Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/xd4Mq4ON65en7ALoZejrqf4nIIo.roa
File: xd4Mq4ON65en7ALoZejrqf4nIIo.roa (raw, json)
Hash identifier: aaY7dRKT6Xmwr9Cd00BeUTTsc2ZKXXpDmpf12hv0YrM=
Subject key identifier: C5:DE:0C:AB:83:8D:EB:97:A7:EC:02:E8:65:E8:EB:A9:FE:27:20:8A
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368CB1C480D0A89C9076803A297188C
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/xd4Mq4ON65en7ALoZejrqf4nIIo.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202306
IP address blocks: 2a04:5200:5977::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cb:1c:48:0d:0a:89:c9:07:68:03:a2:97:18:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c5de0cab838deb97a7ec02e865e8eba9fe27208a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:31:e5:12:c4:79:c6:02:a7:2e:f6:b6:2d:94:
a2:ed:1d:98:f6:fc:1e:95:ae:f8:6d:3d:dc:ae:16:
5d:e7:4e:bd:4e:c4:13:a2:7a:7e:67:c2:94:18:43:
71:77:0b:96:65:1a:25:33:5b:91:4b:05:7d:f2:1a:
0c:42:64:5b:c6:63:16:ae:cf:2c:08:87:c0:3e:53:
7d:8b:0c:01:2b:72:d2:2e:85:5e:4a:fa:47:ca:b5:
40:eb:6e:79:b2:83:9e:8d:ca:0f:5d:51:99:93:0b:
52:3d:ca:38:32:77:fd:82:e3:59:ee:38:67:10:01:
cf:71:78:7b:87:7d:ad:4b:0f:fd:81:95:4d:34:3f:
0f:04:5f:94:30:63:56:dd:5b:78:91:1b:7c:c3:96:
9e:f4:9a:fd:bd:0a:70:34:ba:e0:e5:c6:88:08:cb:
d8:c6:66:99:9e:94:c7:67:54:d9:e3:28:5c:0f:7b:
13:ae:d0:3c:cf:59:a0:99:59:2e:f0:f5:f3:b9:64:
e2:70:fa:cd:50:74:21:44:7e:72:35:26:d1:5e:a3:
1d:66:16:25:5a:73:5f:d2:b1:af:75:d2:85:bf:32:
22:24:71:61:fc:7b:30:58:de:5b:77:49:71:52:17:
02:23:50:9a:9b:33:5e:71:8f:5a:d6:d3:9a:36:0d:
3a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C5:DE:0C:AB:83:8D:EB:97:A7:EC:02:E8:65:E8:EB:A9:FE:27:20:8A
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/xd4Mq4ON65en7ALoZejrqf4nIIo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:5200:5977::/48
Signature Algorithm: sha256WithRSAEncryption
41:a4:b7:e8:c2:fa:da:e7:02:3e:81:f8:55:77:bb:58:12:04:
e6:42:9f:14:34:99:3d:46:95:28:02:84:6e:4a:45:c3:6c:ae:
b1:9c:62:00:cc:9f:96:2e:41:1d:b6:6d:bd:1f:b9:a0:2c:58:
3b:5d:c9:d9:9c:ca:92:a5:74:b7:4b:62:e0:2a:6b:9f:53:b6:
95:42:62:ce:aa:59:4a:05:af:cb:c4:34:4f:4b:c8:43:4e:d0:
73:2c:1f:94:dd:44:1e:2b:4f:05:6e:57:56:f0:e9:6b:1c:c1:
e6:ca:ba:f1:d3:42:f7:94:f9:e7:11:99:1b:ce:ff:ed:a7:c7:
7d:bb:73:dd:38:5f:59:53:91:0d:5b:8a:ad:09:73:37:8b:ed:
75:a9:5e:8e:2b:b9:ff:09:29:47:91:03:96:ba:3f:b2:ba:43:
39:72:ef:95:55:05:72:d9:bd:07:85:8e:05:a9:95:e4:1d:dd:
3e:e4:b3:b4:f9:a8:a1:8a:8d:e7:a4:79:9a:9f:96:44:63:ee:
1d:22:04:9c:ec:a3:88:23:9f:38:20:d3:1d:65:ba:3b:ab:ea:
16:40:ec:7e:d7:cd:74:37:5f:5e:0c:c3:c8:08:30:cc:fb:99:
7e:a2:44:0c:7a:13:e0:db:cc:e0:2c:6e:53:87:b6:8c:40:ea:
3d:eb:28:3a
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaMscSA0KickHaAOilxiMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5YTI0YzI4YmEyMDJmYzA4NmYwYjViYWEzMDJlNTdhZTg5
ZmUzMGEwHhcNMjYwNzAyMTUxODE4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNWRlMGNhYjgzOGRlYjk3YTdlYzAyZTg2NWU4ZWJhOWZlMjcyMDhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DHlEsR5xgKnLva2LZSi7R2Y9vwe
la74bT3crhZd5069TsQTonp+Z8KUGENxdwuWZRolM1uRSwV98hoMQmRbxmMWrs8s
CIfAPlN9iwwBK3LSLoVeSvpHyrVA6255soOejcoPXVGZkwtSPco4Mnf9guNZ7jhn
EAHPcXh7h32tSw/9gZVNND8PBF+UMGNW3Vt4kRt8w5ae9Jr9vQpwNLrg5caICMvY
xmaZnpTHZ1TZ4yhcD3sTrtA8z1mgmVku8PXzuWTicPrNUHQhRH5yNSbRXqMdZhYl
WnNf0rGvddKFvzIiJHFh/HswWN5bd0lxUhcCI1CamzNecY9a1tOaNg063QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFMXeDKuDjeuXp+wC6GXo66n+JyCKMB8GA1UdIwQY
MBaAFJmiTCi6IC/AhvC1uqMC5Xron+MKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEt
YjU3YTM2ZjJhZmNkLzEveGQ0TXE0T042NWVuN0FMb1planJxZjRuSUlvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS83YjIxMjktY2M2Yy00NzEwLWJhNDEtYjU3YTM2ZjJhZmNk
LzEvbWFKTUtMb2dMOENHOExXNm93TGxldWlmNHdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgRSAFl3
MA0GCSqGSIb3DQEBCwUAA4IBAQBBpLfowvra5wI+gfhVd7tYEgTmQp8UNJk9RpUo
AoRuSkXDbK6xnGIAzJ+WLkEdtm29H7mgLFg7XcnZnMqSpXS3S2LgKmufU7aVQmLO
qllKBa/LxDRPS8hDTtBzLB+U3UQeK08FbldW8OlrHMHmyrrx00L3lPnnEZkbzv/t
p8d9u3PdOF9ZU5ENW4qtCXM3i+11qV6OK7n/CSlHkQOWuj+yukM5cu+VVQVy2b0H
hY4FqZXkHd0+5LO0+aihio3npHman5ZEY+4dIgSc7KOII584INMdZbo7q+oWQOx+
1810N19eDMPICDDM+5l+okQMehPg28zgLG5Th7aMQOo96yg6
-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:39 2026 by rpki-client