Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/vz9Qx90-S3Zs247zPC8BQE3hAes.roa
File: vz9Qx90-S3Zs247zPC8BQE3hAes.roa (raw, json)
Hash identifier: lZ9Tm3vUveLdOmNF3n9sEhbqX2mbKNTMq6weihejZgI=
Subject key identifier: BF:3F:50:C7:DD:3E:4B:76:6C:DB:8E:F3:3C:2F:01:40:4D:E1:01:EB
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368C2BC8CD0B51F865DA36A726D68C6
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/vz9Qx90-S3Zs247zPC8BQE3hAes.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 185.106.95.0/24 maxlen: 24
185.109.21.0/24 maxlen: 24
213.108.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:c2:bc:8c:d0:b5:1f:86:5d:a3:6a:72:6d:68:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=bf3f50c7dd3e4b766cdb8ef33c2f01404de101eb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:40:72:6a:f6:4d:b9:57:03:05:1c:1e:92:d9:
8d:75:8b:02:a7:ce:66:80:4b:79:a9:2f:c4:58:63:
34:6d:3f:2f:a5:a8:e8:bd:f5:24:63:41:6c:d3:ae:
3a:11:3d:2f:31:a3:09:c9:51:07:7c:31:80:6a:d2:
7d:4b:59:6c:2f:ba:b5:2d:e2:32:76:a5:ca:fa:ba:
53:25:44:5a:1a:e6:1b:47:5a:86:99:ad:20:2c:11:
ad:23:6c:5f:61:6b:03:65:ba:af:9a:3b:7e:91:b4:
6e:34:b9:1c:99:b9:1e:12:8d:df:6b:31:9f:45:2f:
fc:66:c5:bf:67:42:f0:56:ac:7b:2f:3e:7b:21:a4:
ae:59:1c:04:82:40:4f:28:c1:1e:de:96:6c:7d:93:
f8:42:6b:98:89:1a:54:f1:b4:7b:35:21:85:6b:49:
c7:0d:2b:ff:de:d8:78:10:17:21:b5:3b:1b:24:e8:
34:b9:b6:90:5e:56:30:58:4a:6e:7d:33:c9:99:ef:
38:02:bd:b7:1d:1d:62:61:4a:b5:66:e0:c5:18:52:
c6:ca:cb:49:cf:0a:99:2a:b4:b6:ca:5e:f4:b6:62:
b8:03:7b:0d:4c:cb:5f:43:40:00:13:6d:7e:32:e3:
81:57:ad:3d:60:16:6a:d4:60:00:9c:96:fa:5d:78:
16:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:3F:50:C7:DD:3E:4B:76:6C:DB:8E:F3:3C:2F:01:40:4D:E1:01:EB
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/vz9Qx90-S3Zs247zPC8BQE3hAes.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.106.95.0/24
185.109.21.0/24
213.108.199.0/24
Signature Algorithm: sha256WithRSAEncryption
11:b5:7e:2b:68:5f:bd:ba:01:2e:b1:b0:b1:48:22:82:97:93:
d6:80:fd:7f:d2:ec:7c:84:c3:df:90:05:ec:cb:53:bc:2e:1f:
6c:6d:d7:c4:d8:e8:d0:a8:d5:a0:7d:e4:6c:6f:f0:53:77:42:
03:72:ee:3e:f7:8b:4c:42:b7:de:7c:ff:cd:94:b7:c9:d1:0a:
fb:45:fa:a6:fa:f2:36:31:d2:9a:8d:da:0c:41:49:c0:42:17:
29:ba:17:0c:9a:8f:3b:80:5f:01:c5:8a:91:23:6f:8e:ed:ff:
e9:90:6c:1c:94:f7:18:59:28:87:e4:eb:e0:26:e5:86:d9:b2:
a1:ca:c6:0e:13:bd:e3:c4:b0:22:2a:97:06:e7:6f:5a:78:75:
f4:6a:cb:a9:23:dd:8f:80:fb:3e:13:73:43:3c:ba:d0:e1:9d:
3c:43:73:be:7d:7e:a9:dd:6b:63:9b:f6:c7:53:1c:54:80:d7:
5e:33:3e:62:3c:1d:5d:3f:cf:2d:5a:df:5c:0c:25:f4:24:7d:
fa:09:d1:47:34:11:25:33:cb:94:81:d1:d5:25:bc:1d:b4:8c:
b8:39:76:d3:29:b3:ad:3c:a9:ed:96:15:fc:a4:68:ad:e9:18:
5c:8b:35:4b:d0:91:ee:2d:2f:fe:22:6a:c2:d6:d2:1d:d5:3e:
a3:d9:f6:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:49 2026 by rpki-client