Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/1-ARnPDpeF5HfHxcd_T7lGmC0C0E.roa
File: 1-ARnPDpeF5HfHxcd_T7lGmC0C0E.roa (raw, json)
Hash identifier: 8s1k4K9p7Wl/oDiDVERXGlGjdDxJki5AK2/jmPeZjLc=
Subject key identifier: F8:04:67:3C:3A:5E:17:91:DF:1F:17:1D:FD:3E:E5:1A:60:B4:0B:41
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 01A19BB21EDBE2AA31FC71163BD775D45297
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/1-ARnPDpeF5HfHxcd_T7lGmC0C0E.roa
Signing time: Mon 02 Nov 2026 09:58:24 +0000
ROA not before: Mon 02 Nov 2026 09:58:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205507
IP address blocks: 185.112.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9b:b2:1e:db:e2:aa:31:fc:71:16:3b:d7:75:d4:52:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Nov 2 09:58:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f804673c3a5e1791df1f171dfd3ee51a60b40b41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:18:9a:5d:9a:84:61:0f:9c:9a:86:f0:2a:94:
ea:12:d4:b0:56:83:0c:c7:4b:f2:22:b4:5c:f2:73:
df:40:a5:66:74:e9:a1:cf:bf:ad:3b:17:38:ca:7c:
d8:d5:bf:cd:ba:f3:ed:68:92:75:dd:19:61:f8:b4:
c3:66:03:63:34:ab:1a:c0:1f:6c:87:78:34:0c:3e:
f7:96:f6:6e:d7:05:18:9e:66:4a:07:7a:60:6d:32:
b3:0a:6b:81:60:68:dd:52:8e:54:ed:3d:1e:70:a2:
ac:c0:94:93:a4:00:86:89:ce:43:8e:77:ad:ce:cc:
8b:13:0b:95:ee:d9:46:b8:f0:15:dd:0c:25:f7:74:
c1:4f:a2:70:c9:34:b4:39:3b:99:33:e8:a8:5e:fa:
3d:d6:09:25:1b:ed:81:38:2e:a7:7c:ab:f2:98:df:
29:46:78:71:d0:b3:8b:56:9f:dd:dd:3f:d2:8d:24:
16:44:70:6f:1a:94:8c:12:07:77:43:74:91:1f:0d:
53:2f:92:d3:f0:d1:c6:40:ff:8f:8a:4b:17:16:62:
17:75:b3:1d:e9:70:91:02:df:3c:6c:20:41:15:17:
1d:8b:43:74:e5:98:1a:5c:d0:49:3a:6e:db:d7:d9:
a5:b5:6f:9b:94:e7:0b:f0:fd:12:27:c2:2b:10:1d:
01:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:04:67:3C:3A:5E:17:91:DF:1F:17:1D:FD:3E:E5:1A:60:B4:0B:41
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/1-ARnPDpeF5HfHxcd_T7lGmC0C0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.112.81.0/24
Signature Algorithm: sha256WithRSAEncryption
07:ee:a1:cb:34:e6:ee:7b:0c:21:ae:8e:f3:05:91:2e:cf:f2:
b5:e5:37:72:8b:00:fc:8e:25:94:68:e0:04:e4:ad:e4:89:02:
69:bf:88:22:bc:27:2f:f8:9a:7d:1c:55:e5:b6:d5:53:c6:43:
3a:90:db:a9:e2:63:c9:27:c7:3d:88:52:9b:0a:c5:36:ae:c6:
19:d4:20:ab:f0:e8:6b:42:a0:5e:1b:5d:e7:44:c3:90:48:92:
33:a7:82:7d:8c:5c:d8:d5:ab:b7:69:bb:65:df:7d:1a:6e:c6:
69:d8:59:1f:3b:e9:96:59:4f:59:da:9e:0e:5f:53:11:52:4a:
dc:3f:40:1d:71:22:70:8e:d0:44:37:b6:05:06:ec:1f:23:8e:
b7:f8:b0:91:42:02:59:51:80:40:e7:74:91:4d:df:b0:33:14:
74:0b:1b:2d:7b:14:c3:63:49:c7:a0:85:af:10:5d:6c:fd:1c:
12:d6:d6:89:31:9e:c3:72:35:61:fd:ea:7b:86:79:79:18:ad:
9a:f4:9e:97:bc:1c:23:26:49:5e:40:09:1a:42:a0:72:25:2d:
c1:83:62:b0:07:6c:1e:d2:e6:52:0c:eb:2f:e8:61:c1:42:1d:
f0:7d:2d:45:77:e6:3a:ad:08:cb:85:91:42:fe:5b:95:62:00:
47:db:aa:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 01:11:06 2026 by rpki-client