Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/pCj4LNiZXH8rnP7sqHHEdL96Feo.roa
File: pCj4LNiZXH8rnP7sqHHEdL96Feo.roa (raw, json)
Hash identifier: qpR8sV3nv4rMg70VFbi+ildg+9c69VJtQC9FdyMRU38=
Subject key identifier: A4:28:F8:2C:D8:99:5C:7F:2B:9C:FE:EC:A8:71:C4:74:BF:7A:15:EA
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368C3843D3F3900B8FFBC94A1681A8B
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/pCj4LNiZXH8rnP7sqHHEdL96Feo.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61435
IP address blocks: 45.137.104.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c3:84:3d:3f:39:00:b8:ff:bc:94:a1:68:1a:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a428f82cd8995c7f2b9cfeeca871c474bf7a15ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:05:a5:fd:07:e3:e1:8c:ef:74:be:cf:e4:57:
14:16:26:bc:62:a4:51:18:80:59:c4:be:a5:e6:7b:
90:66:40:69:cb:0c:24:e0:4b:65:2f:c3:b6:4e:c9:
04:9e:99:e2:72:99:53:c2:e4:17:2e:93:7f:0b:96:
3e:c2:a4:f0:93:9a:6b:05:fd:b0:0d:59:4f:20:6b:
bd:98:41:67:9c:82:5e:aa:7d:03:7b:66:6f:3c:65:
87:67:36:e3:9f:de:6f:e4:8b:2f:50:0b:d6:75:e8:
4a:5f:5d:e7:8f:7c:7a:c6:c9:ca:4a:28:7a:51:9a:
9c:91:f7:2f:05:e6:db:9d:04:7f:64:4d:42:e8:c6:
91:ab:d2:d2:ff:48:1c:63:d5:f4:86:00:ba:4f:d4:
a7:50:e0:e1:74:15:6f:9f:5d:e9:ea:43:89:80:6b:
2e:ea:c3:51:cc:80:3c:6e:43:d2:76:cd:24:a4:1f:
df:e8:6c:05:18:53:1b:ee:27:6a:40:59:75:2e:8c:
b4:0e:e0:c0:ba:32:6b:58:86:7d:05:91:8d:55:97:
e2:de:59:9c:7d:c2:c1:b7:d1:ff:df:7d:a8:14:40:
bc:3b:88:e8:ac:26:1b:e5:07:d4:3c:5b:79:18:97:
fe:18:90:bc:78:52:63:ec:68:ad:03:32:97:56:c4:
ec:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:28:F8:2C:D8:99:5C:7F:2B:9C:FE:EC:A8:71:C4:74:BF:7A:15:EA
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/pCj4LNiZXH8rnP7sqHHEdL96Feo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.104.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:87:42:31:22:9d:66:c9:19:4c:36:13:76:d1:ca:13:e3:95:
dd:76:38:1a:68:3d:cf:ae:d5:b4:19:b4:14:7d:f1:0b:c4:fd:
3d:0f:8c:19:bc:09:ed:38:24:93:a7:05:3e:64:33:ef:b6:0c:
7a:12:2c:72:98:8d:c9:7a:bb:2d:1b:31:05:a3:62:50:9b:f6:
f4:68:ae:b0:0d:ed:1b:ab:5f:73:56:aa:6b:38:12:ff:f9:02:
f7:a1:24:e3:cf:fe:12:4c:d0:b7:c5:ad:af:28:6b:e1:72:7a:
7c:40:e2:2a:ba:ac:39:13:d5:5b:f7:8b:10:42:5e:ba:77:95:
11:95:0a:5e:fc:e2:05:63:d5:c3:05:5b:48:c7:f9:50:1e:ff:
18:73:c3:3f:6a:35:1a:38:c0:5a:7d:6d:be:89:ae:1b:25:42:
92:4e:55:4a:25:a6:4e:2e:6c:fa:17:a5:24:fa:ee:6e:87:4f:
7b:92:da:ef:13:fe:19:59:18:a7:8a:9f:97:83:c4:03:14:b5:
ac:4a:25:52:e5:08:69:f7:5a:cb:5f:f8:21:6f:75:e7:2a:35:
33:49:75:6e:cd:58:31:0f:4f:96:3c:40:65:a8:31:dc:26:ce:
2d:5f:b5:f6:bc:4d:78:bc:bd:37:db:6c:3d:67:3f:9a:a8:fc:
c2:53:a0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:27 2026 by rpki-client