Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ttetaIv3LgGQ3E9cqqUD2FXyjPI.roa
File: ttetaIv3LgGQ3E9cqqUD2FXyjPI.roa (raw, json)
Hash identifier: 9NeC+xupgZD/BCsMnFNQ6TIX/HYgzNHDkbfiYMCI1DE=
Subject key identifier: B6:D7:AD:68:8B:F7:2E:01:90:DC:4F:5C:AA:A5:03:D8:55:F2:8C:F2
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368E6F9BA3F38AA860431B46A007CE0
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ttetaIv3LgGQ3E9cqqUD2FXyjPI.roa
Signing time: Thu 02 Jul 2026 15:18:25 +0000
ROA not before: Thu 02 Jul 2026 15:18:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216119
IP address blocks: 194.67.195.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e6:f9:ba:3f:38:aa:86:04:31:b4:6a:00:7c:e0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6d7ad688bf72e0190dc4f5caaa503d855f28cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:5d:e5:37:cf:f2:03:b5:1c:03:91:3b:0c:0d:
66:de:17:3d:61:b5:46:b0:95:8d:5e:d9:e2:b8:ea:
30:95:76:f3:2e:b7:69:9e:7e:72:6c:50:08:ad:44:
2c:50:d9:60:b4:7e:2a:58:13:3f:ac:0f:81:bb:ef:
ca:b3:9a:69:32:05:df:36:c7:10:44:7d:b5:fb:ca:
64:0f:2f:7a:c5:09:cd:cf:5b:c9:76:01:ed:88:b9:
0f:ee:bb:b5:22:bd:4f:c2:00:bb:36:0c:d7:ff:1a:
3f:f4:3e:bd:18:99:38:ef:f6:c3:16:d0:a9:5b:f5:
8c:d9:b4:3b:9f:2e:4d:96:89:8b:0b:d4:1d:3a:b3:
d2:3e:34:77:f4:5f:d0:36:6b:ee:b7:72:76:d8:76:
97:ca:46:3d:a1:fa:eb:84:91:b3:02:32:71:30:1e:
9c:ea:c8:f5:81:03:d9:f9:d6:e3:a5:fc:70:f5:9b:
79:0d:a8:73:b2:d4:02:c1:1d:39:cc:22:c6:8f:17:
fe:95:2b:a6:3e:74:86:81:80:23:c6:ba:91:ec:64:
50:68:22:fd:72:06:17:23:eb:dd:bb:3f:27:61:eb:
01:86:a1:4a:79:bb:75:02:b7:d5:b3:67:0c:b9:5c:
a6:e3:59:e0:31:b6:c0:56:27:96:90:53:26:03:4d:
1c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:D7:AD:68:8B:F7:2E:01:90:DC:4F:5C:AA:A5:03:D8:55:F2:8C:F2
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ttetaIv3LgGQ3E9cqqUD2FXyjPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.67.195.0/24
Signature Algorithm: sha256WithRSAEncryption
70:01:bc:09:5b:6b:16:9f:a0:dc:9a:fe:74:ef:87:7d:5d:9d:
36:ee:2b:8f:75:7b:0b:24:1f:18:48:3e:8d:71:7a:b1:96:4c:
dc:22:db:10:f5:03:be:ab:3b:e1:d9:b6:18:ea:3b:6b:e4:52:
e2:73:e4:b1:3c:b4:a6:20:7a:a8:ef:d0:68:d7:c1:31:43:51:
3c:8f:d5:e8:a8:51:18:08:49:d5:20:2e:d5:5e:36:a3:61:e0:
03:2a:2c:03:e8:b9:1b:c1:b0:db:7e:dc:58:34:af:a7:8e:a6:
aa:ba:41:fd:58:dc:f6:0d:0d:a4:ea:d9:50:56:8c:ad:96:ca:
f6:c0:c3:14:36:27:57:b4:20:50:bc:5c:5f:d5:37:dc:de:a3:
f5:74:ab:3d:98:c9:be:40:6d:d6:17:7d:a0:52:07:6c:a8:2d:
c7:ed:14:a4:c0:33:60:42:c4:37:19:4f:0a:67:ca:fd:72:35:
ef:d7:86:99:9b:0d:9c:f9:6a:06:e5:b2:0b:99:5f:b2:40:de:
2c:13:e3:7d:1c:68:06:15:89:59:d4:2c:d6:1a:e7:a2:ca:fb:
ce:ba:36:54:2f:81:78:dc:b3:5e:49:03:eb:3f:52:e4:84:ee:
da:c3:9f:25:6f:d4:63:33:70:1b:8a:e9:e7:95:c4:af:20:bf:
98:61:95:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:53:27 2026 by rpki-client