Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/tWbVCiLL5n5swpr6tqK8rlGPjmY.roa
File: tWbVCiLL5n5swpr6tqK8rlGPjmY.roa (raw, json)
Hash identifier: M6kcyVn7bEYT/k5bDc/7Q689+Pcdqw2xfQr0vHEwHB0=
Subject key identifier: B5:66:D5:0A:22:CB:E6:7E:6C:C2:9A:FA:B6:A2:BC:AE:51:8F:8E:66
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368B7E8C62119A72707BA00CD10F7B2
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/tWbVCiLL5n5swpr6tqK8rlGPjmY.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 45.86.44.0/24 maxlen: 24
45.86.45.0/24 maxlen: 24
45.86.46.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b7:e8:c6:21:19:a7:27:07:ba:00:cd:10:f7:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b566d50a22cbe67e6cc29afab6a2bcae518f8e66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:10:5b:7f:6d:05:03:4c:7e:15:3d:bf:62:06:
3e:79:1f:e9:19:bf:2a:a2:f4:ba:81:b1:b7:4e:a2:
9b:4d:60:6f:7c:ec:3c:6a:c4:5c:d3:af:fb:42:8d:
fd:da:c5:84:85:82:dc:ca:a4:62:ab:6c:cd:2b:cf:
76:6a:70:9a:1e:f1:e5:9e:38:36:85:7b:03:1a:fb:
7e:29:97:4f:a0:2d:bf:c3:20:f1:88:c0:c8:ff:2a:
cf:51:c8:c5:be:2b:06:1c:82:c5:48:a2:4b:fa:3d:
5b:29:fb:90:6b:7b:9d:4a:5b:55:0c:5d:a4:09:d7:
75:12:1e:e9:0c:fd:7e:34:09:b0:b8:9c:ac:73:eb:
23:a8:6f:26:50:49:90:c4:e1:1b:59:5e:76:9c:d7:
cb:88:76:12:99:30:d7:bb:b2:63:21:0e:71:d6:19:
e7:24:68:91:68:9c:d5:c8:0a:00:d1:c5:8d:c4:94:
12:f9:69:2b:c4:df:c8:14:87:32:c8:20:0c:bb:f4:
d8:22:b8:a7:a8:86:d5:54:6d:c8:e6:a7:9e:bf:11:
f2:98:46:3d:fd:31:95:77:bb:4f:9b:dd:5c:0d:ec:
6c:40:77:d1:a0:70:ac:c2:12:86:8c:30:6b:ed:61:
df:ca:67:96:5c:02:03:d4:1a:24:eb:42:a8:fc:89:
8d:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:66:D5:0A:22:CB:E6:7E:6C:C2:9A:FA:B6:A2:BC:AE:51:8F:8E:66
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/tWbVCiLL5n5swpr6tqK8rlGPjmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.86.44.0-45.86.46.255
Signature Algorithm: sha256WithRSAEncryption
44:0a:ff:f7:76:62:c2:5d:28:fb:38:5d:a6:96:8d:ab:3f:15:
ee:72:bc:b4:d0:57:74:93:a7:d6:08:d1:d0:fa:a4:7d:97:d0:
12:75:5a:33:da:7a:f6:46:2f:e1:d8:01:d4:9f:2e:5a:ad:60:
70:cd:d3:ac:e5:9f:e3:e3:1b:80:6d:94:3b:54:90:4e:0c:30:
fa:6b:42:88:1c:a8:c4:bf:74:26:e7:38:43:d1:bc:06:a6:9b:
9a:20:8f:3f:ea:cf:d9:d3:29:95:b3:c8:d3:37:b4:63:9e:9b:
41:92:56:62:b7:32:64:7c:6b:67:47:db:86:ee:4c:91:77:81:
ae:e3:c0:21:9e:98:83:42:f2:df:0e:ae:69:e6:6c:94:24:0e:
6d:e2:2c:bb:8a:17:dc:e2:7b:a2:35:07:23:1a:23:83:35:b4:
72:f3:f0:ba:0b:f6:11:46:69:14:3f:9e:e0:6e:98:c6:0a:51:
cd:92:4f:f4:02:27:bb:54:d6:fc:56:1b:c0:d0:be:57:e0:98:
38:ea:25:be:85:ce:3d:b5:98:6d:c6:7e:85:7b:45:39:a4:27:
71:31:4b:f0:ce:7b:c4:71:85:c5:00:ef:07:ac:37:e6:52:00:
7c:ff:01:7d:89:00:87:b4:f6:c1:27:55:08:f3:8c:03:1f:b6:
de:3f:38:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:23 2026 by rpki-client