Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/sSzNnsQNCM4DDNjn0LFIqLa_4g0.roa
File: sSzNnsQNCM4DDNjn0LFIqLa_4g0.roa (raw, json)
Hash identifier: OEw6St/0fBPmc8sP0oJzQ80qY/K6N5S+LW6cyfDRjdI=
Subject key identifier: B1:2C:CD:9E:C4:0D:08:CE:03:0C:D8:E7:D0:B1:48:A8:B6:BF:E2:0D
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368E53CE0684C4C919F00824ABD8D81
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/sSzNnsQNCM4DDNjn0LFIqLa_4g0.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215302
IP address blocks: 45.137.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e5:3c:e0:68:4c:4c:91:9f:00:82:4a:bd:8d:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b12ccd9ec40d08ce030cd8e7d0b148a8b6bfe20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:97:60:a7:74:88:ff:f0:3c:c0:e8:6d:ee:ce:
3f:1d:be:f8:93:ae:d7:a2:aa:e8:06:18:01:05:5d:
d1:dd:69:97:6e:4c:1d:e7:f6:9e:15:37:83:1d:ae:
16:af:f0:64:a9:77:e0:43:ea:f3:69:a2:9a:4a:20:
3b:75:be:87:2b:5f:25:32:c2:8f:89:7e:e4:f6:fe:
61:94:d2:3b:ef:64:fa:b1:9c:94:85:a7:ec:fa:65:
07:4b:15:27:50:c5:c4:fb:d5:64:2b:5c:6b:f3:2e:
87:e9:17:fe:aa:45:e4:ab:f5:01:e6:32:1d:a7:bf:
72:36:74:b6:45:55:63:2e:d5:e6:ee:16:0a:ad:0b:
58:6e:6a:b3:72:bb:bd:fd:8d:0f:29:6f:6f:c1:48:
98:49:95:45:89:5d:fa:24:7f:0e:29:cb:2c:5f:de:
2e:bf:e9:9b:ff:a9:a0:6a:ae:94:37:35:86:23:03:
c6:05:34:4c:aa:33:84:62:68:cc:27:c5:c5:90:98:
9f:58:35:a5:ba:79:33:c3:a8:5e:f0:34:bd:e8:1d:
6e:96:fb:54:85:0d:82:fa:0c:67:f0:a1:c2:42:1b:
65:24:38:d1:20:e9:1f:61:ce:28:5d:04:8c:1d:5f:
10:7d:01:92:1a:87:0a:b6:6c:42:6b:b1:51:9f:ea:
5e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:2C:CD:9E:C4:0D:08:CE:03:0C:D8:E7:D0:B1:48:A8:B6:BF:E2:0D
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/sSzNnsQNCM4DDNjn0LFIqLa_4g0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.107.0/24
Signature Algorithm: sha256WithRSAEncryption
87:d1:59:a3:6f:e9:fe:d2:66:56:3d:57:79:09:d1:d3:9e:4b:
6f:6e:9d:3e:9a:b0:95:7c:df:a7:f2:7a:d4:3e:fc:a6:4e:f0:
ee:0b:6f:fa:74:cd:50:8f:22:bf:99:94:77:8c:7b:bb:db:f1:
18:95:c9:34:d3:53:58:78:4b:49:07:a3:3d:8d:f4:38:7d:ea:
43:e3:98:ba:95:79:c6:7c:8b:18:84:27:22:5e:9f:3d:1d:b4:
6f:3e:21:03:f2:de:a7:f1:e2:7d:11:bc:16:98:21:80:37:03:
6c:77:08:64:9b:b9:1d:79:20:09:a8:a8:05:f7:3e:8f:cd:44:
0d:a0:ea:75:b2:81:6f:d4:2e:0f:17:d0:a2:6f:58:8e:dd:f6:
fc:13:81:84:6a:c2:8a:33:17:94:ea:f0:ba:b5:1f:65:8e:b3:
8e:d3:e0:8e:37:b2:ef:a6:b9:ac:60:bd:f8:18:5b:93:47:75:
5c:64:53:ad:91:9f:9f:f7:d8:bb:1f:7c:4e:db:5c:fe:45:0d:
2e:c5:9a:19:de:d2:9a:56:38:47:0b:64:ee:10:79:12:7e:17:
b9:48:2f:8f:85:a0:82:04:9a:85:c2:f1:b1:9d:b5:3d:08:df:
5f:cb:82:49:c3:eb:95:32:16:4a:0d:9a:e9:03:ea:ad:ff:64:
7e:5a:79:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:58:03 2026 by rpki-client