Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/tIq7ppCnAByPFQjdzKVgBpHHKbk.roa
File: tIq7ppCnAByPFQjdzKVgBpHHKbk.roa (raw, json)
Hash identifier: MlyxTWNuDKMlC8iXO6t1Z8NS/eE+e7cxZSgRCtD6hmI=
Subject key identifier: B4:8A:BB:A6:90:A7:00:1C:8F:15:08:DD:CC:A5:60:06:91:C7:29:B9
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368D16553A1028BA8469D4A966701BA
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/tIq7ppCnAByPFQjdzKVgBpHHKbk.roa
Signing time: Thu 02 Jul 2026 15:18:19 +0000
ROA not before: Thu 02 Jul 2026 15:18:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205135
IP address blocks: 185.229.67.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d1:65:53:a1:02:8b:a8:46:9d:4a:96:67:01:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b48abba690a7001c8f1508ddcca5600691c729b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c2:e1:06:a9:ea:e5:75:0e:fa:fb:6c:b0:9c:
ea:43:54:5c:cf:cc:9d:74:c1:29:cd:dc:74:1a:56:
60:f8:33:fd:9e:92:f0:4a:d1:d1:d1:27:29:a1:eb:
c0:97:74:83:ca:ce:5a:46:aa:6d:ef:b7:47:0e:45:
0c:85:35:51:80:bb:73:4f:9e:7a:07:5a:d5:a6:05:
d4:0d:c2:4f:02:98:f8:cb:bb:cf:97:52:f1:1a:ee:
1b:8e:a1:2d:83:b8:1d:6a:75:6a:d6:c7:5b:db:8c:
b0:ba:f4:d4:e6:72:72:9a:a0:9e:2d:18:1f:df:06:
b8:e9:3c:41:be:8e:63:38:b5:62:07:91:52:7d:b6:
1d:6f:05:90:2b:c8:1d:7d:16:e9:ad:37:82:13:ed:
8b:27:ad:8a:f5:d6:49:5e:a8:dd:73:f0:18:4e:22:
92:ca:18:9f:89:2e:50:e4:6c:63:c7:f1:fc:dc:20:
38:ad:49:16:a0:f7:f2:3d:dc:5d:ad:bd:2d:69:c2:
76:6d:5c:0b:de:32:e4:82:29:43:96:7a:8f:46:3c:
a8:72:81:58:cd:91:20:63:c3:0f:5c:22:a8:2f:45:
37:a7:2d:8b:0e:1d:28:99:f2:12:7a:d6:eb:f7:1d:
5b:2c:76:6b:66:42:bb:eb:d5:b3:e1:73:58:19:ff:
e7:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:8A:BB:A6:90:A7:00:1C:8F:15:08:DD:CC:A5:60:06:91:C7:29:B9
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/tIq7ppCnAByPFQjdzKVgBpHHKbk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.67.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:af:f1:bf:7e:48:0c:d5:34:1d:27:37:c2:80:27:6e:40:fd:
17:82:24:59:2f:50:8c:2d:ca:3d:53:e9:48:41:51:d5:5b:e9:
8e:87:44:3c:a8:b1:00:cf:ac:04:2b:0a:16:d1:59:c5:e4:bc:
48:bb:59:1d:f4:c9:d0:8d:ef:42:d0:a9:47:08:d6:f2:64:a6:
d6:e8:42:dd:4e:d3:a3:f6:03:9a:e5:41:5d:cf:38:1c:40:b2:
dd:45:14:d8:88:91:a3:ad:53:dc:2c:fc:3d:59:af:7d:c5:35:
6b:01:e2:2c:55:42:21:32:37:06:85:05:e9:82:55:3a:56:83:
4d:76:55:39:bc:8c:b8:d9:d3:44:5b:bf:41:88:8d:fa:ee:02:
52:24:88:c2:67:78:31:ab:51:77:30:a6:fb:35:dc:e7:6e:b2:
78:c7:ba:72:85:da:14:01:13:be:c8:2f:ec:47:3e:d4:da:d9:
b8:50:0d:ac:28:29:61:5e:c9:2a:00:6f:98:2d:33:e6:5a:ab:
e0:7c:07:0e:ef:cb:09:2e:7f:22:7c:05:fd:1f:c2:9c:c8:51:
34:40:69:ac:c9:6e:b2:04:c0:9d:b1:8c:6f:f8:e7:04:cb:4f:
3e:68:fb:a4:59:40:25:03:be:d6:77:24:0c:04:f5:91:2d:8c:
98:76:83:1e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaNFlU6ECi6hGnUqWZwG6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTI0YzI4YmEyMDJmYzA4NmYwYjViYWEzMDJlNTdhZTg5
ZmUzMGEwHhcNMjYwNzAyMTUxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhiNDhhYmJhNjkwYTcwMDFjOGYxNTA4ZGRjY2E1NjAwNjkxYzcyOWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMLhBqnq5XUO+vtssJzqQ1Rcz8yd
dMEpzdx0GlZg+DP9npLwStHR0ScpoevAl3SDys5aRqpt77dHDkUMhTVRgLtzT556
B1rVpgXUDcJPApj4y7vPl1LxGu4bjqEtg7gdanVq1sdb24ywuvTU5nJymqCeLRgf
3wa46TxBvo5jOLViB5FSfbYdbwWQK8gdfRbprTeCE+2LJ62K9dZJXqjdc/AYTiKS
yhifiS5Q5Gxjx/H83CA4rUkWoPfyPdxdrb0tacJ2bVwL3jLkgilDlnqPRjyocoFY
zZEgY8MPXCKoL0U3py2LDh0omfISetbr9x1bLHZrZkK769Wz4XNYGf/nEQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFLSKu6aQpwAcjxUI3cylYAaRxym5MB8GA1UdIwQY
MBaAFJmiTCi6IC/AhvC1uqMC5Xron+MKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEvdElxN3BwQ25BQnlQRlFqZHpLVmdCcEhIS2JrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueVDMA0G
CSqGSIb3DQEBCwUAA4IBAQBLr/G/fkgM1TQdJzfCgCduQP0XgiRZL1CMLco9U+lI
QVHVW+mOh0Q8qLEAz6wEKwoW0VnF5LxIu1kd9MnQje9C0KlHCNbyZKbW6ELdTtOj
9gOa5UFdzzgcQLLdRRTYiJGjrVPcLPw9Wa99xTVrAeIsVUIhMjcGhQXpglU6VoNN
dlU5vIy42dNEW79BiI367gJSJIjCZ3gxq1F3MKb7NdznbrJ4x7pyhdoUARO+yC/s
Rz7U2tm4UA2sKClhXskqAG+YLTPmWqvgfAcO78sJLn8ifAX9H8KcyFE0QGmsyW6y
BMCdsYxv+OcEy08+aPukWUAlA77WdyQMBPWRLYyYdoMe
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:23 2026 by rpki-client