Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ryvBTAoaciReQdwD1aTRWCqBM0g.roa
File: ryvBTAoaciReQdwD1aTRWCqBM0g.roa (raw, json)
Hash identifier: U9zvwFLvhqe5i+xTZYqJCT2HqymEVT9d0EhonFCw7ww=
Subject key identifier: AF:2B:C1:4C:0A:1A:72:24:5E:41:DC:03:D5:A4:D1:58:2A:81:33:48
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368D1A8D5AE9539B453C4808C2D3A6D
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ryvBTAoaciReQdwD1aTRWCqBM0g.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205507
IP address blocks: 185.112.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d1:a8:d5:ae:95:39:b4:53:c4:80:8c:2d:3a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=af2bc14c0a1a72245e41dc03d5a4d1582a813348
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ba:63:da:8a:8e:ae:2c:ba:18:e1:a2:5f:01:
2a:e3:bf:b6:02:0f:23:e4:55:f6:49:86:18:04:e7:
75:30:ad:aa:e1:0a:2f:38:ac:d7:06:b1:5b:64:5e:
ea:f7:28:b6:2e:eb:b4:4e:b5:a6:16:1c:16:b2:e0:
17:97:2a:89:88:28:af:dd:5f:2b:ea:f6:8e:7a:ef:
ff:0d:a9:34:df:a2:41:a2:54:66:de:6f:15:ad:5a:
37:38:3f:55:e8:ff:49:36:8b:5a:af:60:81:a0:9b:
f1:46:5d:23:bc:75:da:5f:9d:c5:53:3d:49:68:e9:
19:86:e9:89:5d:2a:8d:f1:c1:c0:1f:16:10:9a:c2:
da:5d:eb:05:13:ac:af:21:d5:bc:d7:d8:79:7f:65:
6d:a8:e1:4e:d6:ab:d6:8b:c8:bb:af:88:ba:0d:d9:
8e:fd:8f:f8:7d:22:eb:79:f1:c7:ee:4c:c4:2a:fb:
6f:61:a7:64:14:b6:b4:dc:61:33:ae:86:91:cc:66:
5a:b4:15:b2:77:06:84:3c:a7:9a:ff:77:56:5e:6f:
55:f3:a6:42:28:49:7c:50:7f:b7:e4:6b:87:e6:a6:
49:80:ca:24:39:b0:97:cf:12:3b:9a:11:57:79:25:
61:b2:29:6a:7f:f7:a8:79:67:7c:b2:7f:57:00:4b:
ea:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:2B:C1:4C:0A:1A:72:24:5E:41:DC:03:D5:A4:D1:58:2A:81:33:48
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ryvBTAoaciReQdwD1aTRWCqBM0g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.81.0/24
Signature Algorithm: sha256WithRSAEncryption
79:97:17:98:38:3b:10:e8:66:44:a3:8b:de:78:8e:bd:11:e7:
62:dc:0e:6a:7e:2a:dd:f9:4e:fe:85:3d:3b:7d:f2:fe:e6:90:
88:77:35:5f:c9:e4:5e:d2:67:87:58:47:db:e3:e4:24:de:13:
fd:c3:b2:0c:b3:6a:db:fc:93:5d:11:66:76:ff:49:9d:74:0e:
0e:42:d1:0e:34:19:0c:b2:ec:b9:f4:07:d3:4a:78:9a:00:ac:
c3:5b:79:a6:9a:84:8b:32:ae:08:f9:e5:b4:e0:4d:49:a7:a0:
30:5a:88:57:87:37:1f:32:c0:04:b4:5b:38:2a:4a:16:ab:59:
54:69:a6:79:3b:0a:ed:4a:96:b5:78:a4:48:ac:b9:51:8b:68:
44:81:62:09:eb:18:e2:22:7d:ee:62:30:4a:b8:4c:f3:89:59:
8e:73:ab:92:4b:0e:f7:ea:c9:0d:b3:44:af:14:7b:f6:0d:81:
9a:0c:77:13:4b:24:c0:2a:1d:f1:0b:ae:5b:64:11:18:a6:e8:
d4:b6:39:ff:06:56:9c:02:9d:16:02:49:df:ad:c4:5e:f1:ab:
15:4f:b8:6a:1e:e9:db:48:41:98:8b:ea:ff:1a:c8:c1:8f:cb:
d5:f5:20:47:95:0c:fe:5f:c5:6e:34:e1:7e:11:31:07:79:28:
f8:b0:78:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:48 2026 by rpki-client