Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ygggk4zaIsW4YL74GoKya-F_Qzc.roa
File: ygggk4zaIsW4YL74GoKya-F_Qzc.roa (raw, json)
Hash identifier: jf8K8SGIiLl+La0IJQMq6gFkoQTZ093yMS+Om4Wleko=
Subject key identifier: CA:08:20:93:8C:DA:22:C5:B8:60:BE:F8:1A:82:B2:6B:E1:7F:43:37
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 019F2368BC816EDE6E292BD4E7B0EFA416C8
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ygggk4zaIsW4YL74GoKya-F_Qzc.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50040
IP address blocks: 213.108.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 11:02:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bc:81:6e:de:6e:29:2b:d4:e7:b0:ef:a4:16:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ca0820938cda22c5b860bef81a82b26be17f4337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:98:e7:f3:d9:fe:b1:64:13:2e:22:69:43:c6:
0d:ef:4d:4a:a3:fe:ad:e7:e6:06:43:fc:0a:6e:89:
41:97:0b:29:bc:c3:63:b7:54:12:8b:30:2e:00:29:
87:57:82:22:87:0f:fb:4f:94:ce:0d:4d:49:6e:0d:
dd:d6:66:4b:f5:97:6f:c7:c2:46:b2:2d:e2:a9:16:
16:f1:80:71:93:7e:c0:f7:93:13:21:6c:8f:c8:9f:
9c:23:6a:f8:b1:e4:5b:05:8c:fe:91:e2:c4:80:f3:
29:3a:1a:c1:ad:43:20:42:df:ab:b1:dc:b4:15:9b:
b9:89:70:54:62:7e:c9:93:6e:69:e1:df:8b:e5:4b:
e5:fe:3e:d9:46:8a:e5:d2:6f:01:45:5e:7d:51:50:
10:b2:c7:54:86:b8:23:e8:6f:65:cb:f0:67:13:cb:
25:60:f2:53:b5:00:09:14:05:17:14:d0:c4:7b:59:
2e:ea:d7:ff:3d:2b:10:7e:5a:a2:a5:bf:f3:ae:a2:
87:9d:e8:26:71:95:e9:0e:c7:c3:f4:59:00:31:b3:
79:24:a7:9b:14:c0:00:b6:12:0f:5e:c2:dc:49:12:
ac:89:33:34:c3:eb:6a:e2:f4:eb:e8:df:64:17:0a:
7c:f1:e4:e8:90:3f:2f:74:1f:0f:0d:b9:17:f2:49:
df:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:08:20:93:8C:DA:22:C5:B8:60:BE:F8:1A:82:B2:6B:E1:7F:43:37
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ygggk4zaIsW4YL74GoKya-F_Qzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.108.197.0/24
Signature Algorithm: sha256WithRSAEncryption
57:2f:20:d6:9b:1c:c6:62:54:32:78:9a:de:1c:63:72:54:76:
37:28:75:39:d4:18:52:36:f6:35:21:b6:96:18:b4:75:fa:33:
ca:43:8d:03:57:5c:e6:4b:0c:92:0b:5d:bf:d4:5a:62:7e:97:
cb:c8:d3:d4:45:e4:da:29:df:29:b0:4d:80:ba:6b:04:d2:a8:
c0:b1:fa:c4:59:d2:63:5b:f0:20:b6:57:8d:a8:2c:ad:a0:f0:
ac:3c:bb:94:b5:a3:c8:b8:9c:4f:2e:f9:75:0a:6b:e0:92:14:
b1:8b:c8:b1:1e:5d:a1:32:90:fd:be:f6:3e:f7:eb:ff:1c:b8:
a9:8d:d2:4f:82:f3:ee:1f:b8:df:c8:14:09:94:bb:34:db:e2:
55:ad:42:39:2a:a2:46:0b:53:53:ed:53:40:ea:8d:90:b7:e4:
94:23:1e:cf:32:63:fd:78:e2:b5:27:96:e7:51:f3:2f:87:6c:
0c:a8:9d:83:f3:e8:de:ca:8f:74:35:85:e0:6c:b6:1d:d7:3f:
e4:80:2a:f7:97:0d:ee:38:6b:e5:6c:66:97:a3:56:de:2f:50:
d9:cd:65:8c:04:46:40:b0:6c:55:15:3b:07:69:92:a0:db:00:
4b:49:10:d6:08:60:48:50:be:70:0b:1e:8d:5d:47:ae:a9:a2:
0c:78:78:b4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:38 2026 by rpki-client