Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ADtuOD1yOP6yIdz175rZCd9RL0o.roa
File: ADtuOD1yOP6yIdz175rZCd9RL0o.roa (raw, json)
Hash identifier: kYOMg25KcY4glfQCotXETNFcWSL15tDK9RvGZb5+h9E=
Subject key identifier: 00:3B:6E:38:3D:72:38:FE:B2:21:DC:F5:EF:9A:D9:09:DF:51:2F:4A
Certificate issuer: /CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Certificate serial: 01A1A77E0D827385640148107D07411E0EBF
Authority key identifier: 99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ADtuOD1yOP6yIdz175rZCd9RL0o.roa
Signing time: Wed 04 Nov 2026 16:56:58 +0000
ROA not before: Wed 04 Nov 2026 16:56:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213999
IP address blocks: 185.200.188.0/24 maxlen: 24
193.168.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.mft
rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:7e:0d:82:73:85:64:01:48:10:7d:07:41:1e:0e:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99a24c28ba202fc086f0b5baa302e57ae89fe30a
Validity
Not Before: Nov 4 16:56:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=003b6e383d7238feb221dcf5ef9ad909df512f4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:6f:96:15:44:33:e6:4e:81:75:76:70:ce:29:
60:de:05:ac:95:d6:a8:d9:a3:07:32:0c:a9:f3:47:
a6:91:41:a8:04:be:d4:7f:66:c9:c7:a5:f2:d5:7c:
41:83:40:51:dd:73:29:36:f7:6d:00:01:5c:84:e5:
ff:94:ca:8c:5a:24:76:71:11:81:b4:f9:d5:c9:57:
13:77:af:d4:19:f5:5a:87:e0:3c:3b:51:eb:9b:b5:
e3:20:1a:5a:c6:69:c4:1d:6f:bf:6d:57:3c:5a:3c:
8a:47:cb:9e:76:c0:46:6c:27:3d:2e:9a:51:65:7e:
38:f8:21:e7:4f:23:61:6e:fd:82:33:4e:1f:4c:1c:
cf:3f:d9:c9:d5:69:0b:44:d1:32:7b:63:9d:db:a6:
37:9a:ee:80:da:9c:0c:8a:77:42:55:14:4b:2a:10:
f0:2d:37:a6:e1:8e:cc:9b:d5:43:d4:d0:4f:3c:b3:
64:37:03:6e:14:82:db:7f:68:98:0f:fb:d6:91:d5:
a1:27:5d:91:1e:b0:6d:63:5f:f3:e4:fd:f8:ae:bb:
02:ef:ab:0e:5b:cd:97:59:9a:8a:24:57:9a:2b:cc:
ab:72:42:55:10:e9:86:1b:ef:19:ce:2d:67:0a:ec:
55:08:95:7e:21:22:82:f3:36:b7:bc:13:b4:31:33:
2f:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:3B:6E:38:3D:72:38:FE:B2:21:DC:F5:EF:9A:D9:09:DF:51:2F:4A
X509v3 Authority Key Identifier:
keyid:99:A2:4C:28:BA:20:2F:C0:86:F0:B5:BA:A3:02:E5:7A:E8:9F:E3:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/maJMKLogL8CG8LW6owLleuif4wo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/ADtuOD1yOP6yIdz175rZCd9RL0o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/7b2129-cc6c-4710-ba41-b57a36f2afcd/1/maJMKLogL8CG8LW6owLleuif4wo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.188.0/24
193.168.224.0/24
Signature Algorithm: sha256WithRSAEncryption
51:b0:8d:d2:de:37:a8:38:3a:75:0c:e2:84:97:ca:36:22:72:
ae:e2:07:24:18:99:1a:1b:72:47:29:39:f9:50:96:2a:04:67:
7e:4c:1a:f6:50:e5:30:f4:8b:8f:12:1b:00:51:8c:20:37:8f:
29:5c:58:9f:d5:73:b1:af:55:6a:02:1e:c3:7c:0e:23:c0:7c:
14:73:c5:92:fe:ec:5e:30:60:74:d9:7f:36:aa:a1:14:f7:de:
fa:7c:71:a8:e4:1c:f1:b4:1b:7f:81:89:ca:a9:dc:f3:38:57:
78:7b:f8:80:7b:3c:bd:01:30:90:72:e6:49:e4:67:af:dd:f0:
92:21:2f:c8:fb:c6:8b:14:59:ab:40:b8:24:67:38:7b:25:af:
1c:77:9e:63:90:9a:b9:fd:d4:e1:ba:d9:68:15:d9:d8:d9:cf:
f9:22:bc:33:e6:8c:1d:7a:4f:99:9f:a9:70:e4:74:84:6b:10:
d5:75:3b:01:97:19:73:5a:11:6d:8d:e0:5b:cd:e3:27:4e:e7:
ff:00:8d:41:86:c4:28:f1:4e:6a:b5:27:67:1c:29:ec:de:ea:
02:3b:96:e5:94:b7:0e:ad:17:63:1b:6f:f2:b3:7a:4b:da:d7:
ee:d8:58:ed:43:1d:86:d5:25:0b:c0:92:23:3c:f7:8c:24:99:
66:64:54:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:41:14 2026 by rpki-client