Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/sjRS44G9qSyn3Bruu2Nm2MJqfZc.roa
File: sjRS44G9qSyn3Bruu2Nm2MJqfZc.roa (raw, json)
Hash identifier: zE44pvGhfWk0fR1x8nrpIZ4R/uS31OaWuS4PRr3WxNw=
Subject key identifier: B2:34:52:E3:81:BD:A9:2C:A7:DC:1A:EE:BB:63:66:D8:C2:6A:7D:97
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368DF1E215D272DCBCE682CDED41BFB
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/sjRS44G9qSyn3Bruu2Nm2MJqfZc.roa
Signing time: Thu 02 Jul 2026 15:18:23 +0000
ROA not before: Thu 02 Jul 2026 15:18:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 45.137.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:df:1e:21:5d:27:2d:cb:ce:68:2c:de:d4:1b:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b23452e381bda92ca7dc1aeebb6366d8c26a7d97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c5:f2:a8:fe:7d:3a:47:b6:2d:38:f1:b9:18:
05:67:ca:aa:a0:78:39:e6:22:fc:61:b7:19:ad:8f:
86:64:45:49:a7:72:58:9a:ec:98:8b:2c:fc:5e:a8:
50:a4:0f:6b:ab:43:ce:22:9f:d2:02:6b:b8:c8:de:
97:10:97:f0:32:a7:e9:5c:77:22:80:a5:d5:b5:8c:
59:e5:c8:44:d3:48:bc:ea:36:b3:aa:35:7f:42:bd:
34:22:61:63:02:32:11:b1:68:e1:ff:e2:6c:5c:34:
50:19:18:2a:fd:53:af:32:f4:03:2e:27:bc:42:b1:
30:98:ed:38:37:1f:ad:eb:8f:c0:3d:15:2e:24:20:
f4:17:9e:87:26:69:b4:c3:5d:7f:ec:5a:1d:cb:11:
16:9c:2a:0f:fa:7a:c2:2e:a6:41:61:5b:8b:b0:e2:
51:b1:cd:a3:9b:68:0f:91:45:db:af:65:4d:99:93:
3a:2f:4a:0a:1b:e2:f9:c3:aa:73:9d:7f:ea:2a:0f:
07:3e:de:c5:90:be:d2:a4:c5:2b:64:3b:f8:f4:92:
f3:1f:c3:e2:76:bc:0d:8c:5e:e3:fd:ad:d6:99:b2:
43:f1:3b:68:a9:27:d9:92:42:c4:21:16:ee:cb:a2:
d9:cd:18:c5:cd:34:8c:d7:d4:08:9d:a8:e8:9a:40:
ab:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:34:52:E3:81:BD:A9:2C:A7:DC:1A:EE:BB:63:66:D8:C2:6A:7D:97
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/sjRS44G9qSyn3Bruu2Nm2MJqfZc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.137.106.0/24
Signature Algorithm: sha256WithRSAEncryption
81:ac:5d:4c:ac:ff:b4:aa:e3:dd:a0:50:d3:e5:62:74:64:50:
30:f4:3e:a2:67:5d:52:72:5c:24:bb:dc:21:09:8a:ae:8e:4e:
26:21:3e:a4:49:cb:2f:96:79:31:4f:04:05:ce:74:04:73:21:
ee:3b:24:9c:39:5c:a4:f8:15:a1:f9:a4:6d:b2:69:cc:92:2a:
8a:65:d5:96:13:6d:18:2f:47:db:4a:fe:a4:e8:f1:04:1b:a7:
c3:da:57:cb:d3:47:5d:b0:d1:96:f2:c2:ff:b2:3b:dc:2e:f6:
91:b7:4a:4c:55:1f:0d:3c:4b:41:49:77:fc:4f:80:dd:25:af:
3e:47:aa:f6:32:77:c1:cf:76:53:71:43:1e:6e:0e:bf:ee:8b:
b8:fc:08:e6:fc:25:26:27:02:0a:f0:94:b8:2c:79:02:a4:f0:
42:9c:02:ab:b1:73:90:41:a1:2f:c8:05:0a:6f:a6:c1:7b:dd:
d9:c8:94:ba:ba:4e:71:74:5a:8d:36:91:95:52:ca:de:90:6e:
09:56:44:13:f1:e9:ec:35:02:f7:56:a5:e2:b0:ac:1f:7b:18:
bd:a4:0c:1b:58:b6:41:44:cc:53:37:76:e9:f9:6f:87:b5:38:
e1:1f:c5:62:e7:b4:ff:ef:46:98:bd:91:89:f5:b4:cd:bc:3b:
e5:7d:89:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:54:54 2026 by rpki-client