Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qIIcHArn6pw4TS-vwub08b33UwE.roa
File: qIIcHArn6pw4TS-vwub08b33UwE.roa (raw, json)
Hash identifier: hZsEqHqa0cZcpc+YX4flV6r7O3l0leldXt1vB6Sukv4=
Subject key identifier: A8:82:1C:1C:0A:E7:EA:9C:38:4D:2F:AF:C2:E6:F4:F1:BD:F7:53:01
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368CD5C87F55458D9647059AF532F3D
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qIIcHArn6pw4TS-vwub08b33UwE.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203549
IP address blocks: 185.103.111.0/24 maxlen: 24
185.109.22.0/23 maxlen: 23
185.109.22.0/24 maxlen: 24
185.109.23.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cd:5c:87:f5:54:58:d9:64:70:59:af:53:2f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8821c1c0ae7ea9c384d2fafc2e6f4f1bdf75301
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:e2:c5:8e:ec:fe:d1:5a:bd:0c:25:ae:53:ac:
5b:f3:b4:09:e7:a8:64:fd:4a:ec:38:dd:ee:35:0a:
cd:e1:21:08:9f:b4:71:b2:04:b1:95:d3:64:2d:a1:
09:9c:83:df:dc:5c:4d:c2:93:84:93:ac:87:42:7a:
a5:11:65:ca:60:a3:e8:cc:24:cc:a5:b6:89:e6:8e:
e7:58:c8:81:22:64:76:9e:00:52:1e:7f:f0:8b:eb:
39:40:e4:11:ff:4e:2c:1b:70:08:3a:8f:0a:d5:39:
f9:f6:7b:d8:6a:48:e8:ae:12:46:95:9d:9c:1e:b0:
52:83:75:52:fe:30:11:fc:73:bf:45:26:4b:77:44:
59:a3:59:24:f2:8e:3d:f4:66:85:8f:fa:7c:f2:c6:
d2:7f:88:b0:9c:be:b2:c3:fa:af:f3:e3:cb:20:22:
1f:81:9d:1d:d7:75:a7:85:d3:75:a9:a4:d2:c5:5c:
44:29:fc:02:c8:2b:d3:ba:82:e4:0c:67:7b:87:44:
17:47:9c:b7:37:4a:9d:ae:61:72:d4:b9:eb:12:24:
be:6d:af:07:c7:37:58:1a:e6:8a:ff:d1:39:b0:1a:
ad:c1:f4:bb:fe:97:83:c6:de:70:b9:00:26:43:bf:
0a:3b:4f:57:4e:cf:b1:64:44:02:fe:d5:a6:a5:ce:
e6:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:82:1C:1C:0A:E7:EA:9C:38:4D:2F:AF:C2:E6:F4:F1:BD:F7:53:01
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/qIIcHArn6pw4TS-vwub08b33UwE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.103.111.0/24
185.109.22.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:6f:0d:f6:3f:ff:72:16:53:aa:59:40:27:0a:11:4d:c8:9d:
4e:a3:8e:67:37:64:07:6d:2f:5f:57:ef:be:a3:10:20:fd:3d:
92:9e:0a:d6:fe:ca:5b:1d:c8:1b:4c:66:0a:b9:37:40:56:b6:
d3:e3:37:ed:8d:2e:e9:3e:ac:63:0e:6c:9f:13:08:48:50:97:
0d:d5:64:39:3d:a6:dc:24:c8:9a:8a:7b:8e:a4:14:18:63:62:
c1:cb:10:d6:a7:ee:a6:e5:a2:b2:a2:c2:70:5e:57:63:00:cf:
ef:7c:fd:cb:f0:ca:fe:e1:ec:b4:84:4a:9f:5a:f7:af:09:2d:
fb:13:cd:da:fb:35:56:4d:e4:b8:c4:1a:ba:29:28:ad:9f:49:
eb:43:04:ac:28:de:67:57:5c:f7:3b:85:0b:5d:58:ea:17:4b:
70:61:ca:4c:d0:45:68:76:ed:d2:35:83:3e:dd:66:13:94:be:
3b:1d:00:39:a0:96:a1:89:e5:71:18:af:1c:7c:d5:f5:61:29:
65:6f:86:01:3d:74:c8:4a:5a:f3:f6:68:e6:07:88:34:d5:87:
3d:90:fd:37:2a:c0:e2:f4:d4:96:79:65:48:ab:c7:3a:e5:d6:
a1:91:26:c4:8c:81:80:76:cc:79:23:2f:8a:49:52:d4:2c:04:
55:ab:d8:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:39 2026 by rpki-client