Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/rtGHKzSK1S4CwM4edqXdB2LM2YY.roa
File: rtGHKzSK1S4CwM4edqXdB2LM2YY.roa (raw, json)
Hash identifier: YHupIeHc9SX2Dh1qCffPWmOdwsp93C9mUNnoY0KsYN8=
Subject key identifier: AE:D1:87:2B:34:8A:D5:2E:02:C0:CE:1E:76:A5:DD:07:62:CC:D9:86
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368C6B4F10AE10896FBACB4BE335BED
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/rtGHKzSK1S4CwM4edqXdB2LM2YY.roa
Signing time: Thu 02 Jul 2026 15:18:16 +0000
ROA not before: Thu 02 Jul 2026 15:18:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198920
IP address blocks: 5.252.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c6:b4:f1:0a:e1:08:96:fb:ac:b4:be:33:5b:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aed1872b348ad52e02c0ce1e76a5dd0762ccd986
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:33:11:a1:72:c3:68:bc:0b:a0:01:e3:17:19:
fb:62:22:ab:ed:c2:d1:7b:eb:68:49:01:c2:43:5f:
9f:4d:a5:32:29:13:9f:00:ed:48:5f:90:82:cf:4d:
6f:e4:d3:df:1e:ef:1b:00:00:a9:0d:3e:25:70:ca:
90:a1:e6:a4:2d:26:a2:0f:52:4e:7f:df:23:9f:8d:
8b:36:73:89:cd:7d:60:64:2d:43:84:ea:cb:2c:ff:
7d:93:9a:7c:16:a0:a1:63:73:a5:38:f5:ce:4f:00:
c3:d0:d1:cf:15:85:86:36:db:ee:fd:19:85:d6:be:
8a:34:c7:04:d4:b3:19:5b:b9:bd:e1:43:24:e1:f7:
4a:d5:fd:e3:79:b5:9a:a1:b4:83:c1:4a:36:5e:87:
2c:4d:8c:84:b3:cd:c3:34:f0:fd:c6:d6:22:b9:7e:
98:c6:7d:f2:73:a5:44:da:ed:6b:14:7a:35:6b:82:
ad:6a:3a:b1:9a:24:28:fc:6c:8b:3c:e8:40:a9:51:
7f:24:65:7e:d7:fc:42:f6:61:9a:58:a9:2c:a6:7d:
77:af:4f:37:95:c5:b3:39:45:1d:4b:e7:f4:70:12:
00:04:0a:4f:75:5f:97:17:30:5c:54:c1:e2:f1:c1:
00:af:cf:a2:93:79:6b:23:52:da:74:2e:98:f0:6e:
2b:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:D1:87:2B:34:8A:D5:2E:02:C0:CE:1E:76:A5:DD:07:62:CC:D9:86
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/rtGHKzSK1S4CwM4edqXdB2LM2YY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.119.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:80:eb:58:d4:9b:ac:0f:74:77:9b:fb:4b:20:5f:aa:87:ef:
d1:5b:2a:a2:55:46:af:f4:87:d8:40:ae:ff:6b:83:8b:3b:ad:
a4:96:47:dc:7a:0e:cf:f5:45:3b:f9:38:94:d6:eb:73:67:25:
2c:65:4c:e7:09:22:eb:b6:cc:c0:de:4b:dd:c5:b4:e5:00:16:
31:22:47:dc:5b:04:d8:1b:53:d3:ea:0e:15:75:03:3c:b5:6f:
65:bb:58:78:23:7d:e7:0e:bd:aa:c8:a7:ec:8e:ca:bf:b3:b7:
45:bf:e8:a8:64:98:6c:0f:63:df:c9:bd:09:ff:8d:9e:cc:27:
ae:89:4b:22:94:0a:f8:85:dd:3c:19:6f:78:0e:4b:33:c2:8a:
bc:47:d3:7c:9a:8b:d3:05:b8:90:d6:1a:27:6f:a6:56:80:bf:
5a:80:39:a4:6e:37:63:39:35:80:92:75:bf:38:7b:07:d6:1a:
2c:80:ff:cd:00:46:b7:d5:4a:f0:f0:a6:5c:8c:d7:46:ff:3f:
46:3e:8d:82:e7:ba:72:60:f5:7a:4b:ff:3e:4c:69:99:02:0c:
dd:01:fb:63:aa:e6:c2:9a:93:e0:f5:3a:48:8f:72:17:76:b2:
c7:3f:97:98:3c:8e:8e:b1:a7:15:b0:5f:77:6a:d6:1c:41:25:
10:f4:47:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:52:41 2026 by rpki-client