Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/tZD6kbpZWlxcaLnW3EFRhQhUfVg.roa
File: tZD6kbpZWlxcaLnW3EFRhQhUfVg.roa (raw, json)
Hash identifier: O45a4DgITVFgh64PRfgqEYoUJFz03YMVp+sYNZwtjy4=
Subject key identifier: B5:90:FA:91:BA:59:5A:5C:5C:68:B9:D6:DC:41:51:85:08:54:7D:58
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368DC86F84350AA5A5447C0F117CBD0
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/tZD6kbpZWlxcaLnW3EFRhQhUfVg.roa
Signing time: Thu 02 Jul 2026 15:18:22 +0000
ROA not before: Thu 02 Jul 2026 15:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210720
IP address blocks: 45.8.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:dc:86:f8:43:50:aa:5a:54:47:c0:f1:17:cb:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b590fa91ba595a5c5c68b9d6dc41518508547d58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:a7:d2:ea:ca:73:52:ac:1c:10:0f:c5:97:ab:
35:5c:88:21:47:68:03:0e:60:2c:9f:c9:66:e7:9b:
39:0d:37:ab:9a:12:9d:24:42:eb:ea:1e:12:f8:d0:
85:9e:c9:d0:bb:a7:f7:06:83:79:a9:02:0f:8e:89:
6d:0f:5d:e3:59:62:d4:40:a3:1b:69:2a:15:ee:2d:
2e:a6:5f:59:cf:45:de:b4:b5:ec:d7:e4:8b:f7:dc:
94:23:1b:e5:38:74:9e:21:31:fb:42:51:7c:e0:8f:
28:d2:89:9a:01:bb:bd:19:5f:83:43:35:84:72:cd:
16:72:6e:e2:67:a2:54:7f:60:99:d8:51:c9:f0:ad:
3e:83:60:a5:19:2e:8f:db:6c:f4:70:cd:5f:d4:e9:
85:d0:5c:29:34:71:f5:61:8b:4e:74:4a:59:52:1a:
66:fc:ad:88:d6:53:02:8b:67:0a:bc:61:fa:f0:e5:
e5:ae:04:f3:7f:00:7c:b2:8b:d9:2e:10:6d:0f:8a:
1b:6a:5a:2f:6c:ac:75:54:20:a1:2a:9e:a4:ac:39:
34:75:cc:fe:f2:44:69:95:8d:ba:14:6b:84:da:9f:
ae:66:aa:59:b3:cf:3c:bf:a5:07:9d:25:8d:3a:3b:
c3:d3:67:5e:d7:4c:ea:9d:72:4c:f3:cb:d3:50:de:
56:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:90:FA:91:BA:59:5A:5C:5C:68:B9:D6:DC:41:51:85:08:54:7D:58
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/tZD6kbpZWlxcaLnW3EFRhQhUfVg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.209.0/24
Signature Algorithm: sha256WithRSAEncryption
57:83:fa:e2:f1:80:b5:20:3d:64:64:82:04:df:17:62:e1:41:
0e:11:86:fa:86:e2:19:84:98:05:cf:93:9b:7e:bc:62:3a:24:
b8:a4:42:27:b7:76:44:0f:71:81:20:10:f2:7e:88:4f:a5:8a:
47:4d:7d:e0:5e:3f:cf:ae:6f:d1:2c:e1:bc:e0:59:51:34:ee:
9f:96:ca:23:7b:d3:a3:6e:62:2d:8f:ea:b2:c3:82:13:25:2c:
8a:3a:4c:69:05:39:78:7a:a7:eb:3e:13:7f:95:a9:a2:49:a2:
d3:b0:dd:6e:f5:8a:34:06:04:9d:55:66:b6:cf:b3:e7:5b:2d:
60:2a:51:94:8f:9e:0c:42:cf:0c:91:de:49:b6:fd:c2:1f:56:
f1:fa:5e:82:51:5e:a2:88:bf:a1:ac:91:ad:99:a8:3e:f2:8d:
4a:ec:1b:39:5c:be:d9:9f:c4:2e:4d:4c:42:8e:a0:3f:86:dd:
c0:65:a7:8b:0e:ea:a2:9f:16:de:eb:a2:7d:e3:23:21:89:91:
2f:56:7e:b6:36:68:82:15:a8:04:56:2c:54:40:05:8e:95:71:
f3:63:44:df:89:7a:8e:66:70:a6:46:73:40:ab:6b:9b:f8:e6:
11:6f:e2:4a:ac:c3:b8:76:7d:b9:8e:a7:88:cd:20:08:d8:75:
6b:12:d6:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:44 2026 by rpki-client