Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/q1151A7ZuAx0qneCNekGqLx9ELE.roa
File: q1151A7ZuAx0qneCNekGqLx9ELE.roa (raw, json)
Hash identifier: YKssHAfZubc3YBN3FcLm56XfU+N+9TioOhwID/3M6TM=
Subject key identifier: AB:5D:79:D4:0E:D9:B8:0C:74:AA:77:82:35:E9:06:A8:BC:7D:10:B1
Certificate issuer: /CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Certificate serial: 019D25E8AD0E54CB44800A410D0241B27235
Authority key identifier: 0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/q1151A7ZuAx0qneCNekGqLx9ELE.roa
Signing time: Wed 25 Mar 2026 16:51:38 +0000
ROA not before: Wed 25 Mar 2026 16:51:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206402
IP address blocks: 62.68.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:25:e8:ad:0e:54:cb:44:80:0a:41:0d:02:41:b2:72:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bf543e23e29fb03748d0939726f30fe9affa19e
Validity
Not Before: Mar 25 16:51:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab5d79d40ed9b80c74aa778235e906a8bc7d10b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:86:26:9b:de:87:74:e9:2c:09:67:97:5e:79:
ab:a9:c7:c0:49:5b:8e:d1:fc:e2:d8:9c:3f:c2:d8:
72:71:d2:01:a7:68:aa:0e:8e:08:2f:66:38:c4:61:
cd:77:f6:5f:e6:6d:f3:8b:6e:9c:aa:5a:88:93:d1:
11:f8:61:3f:f7:69:cf:e9:d5:1f:09:b2:7f:7d:c7:
01:6e:2b:7c:bc:b2:92:f1:a7:d5:86:89:6c:e7:22:
7c:8e:cc:70:d9:c2:f7:da:71:80:58:69:65:36:fb:
f0:2b:08:20:d6:06:b9:36:d9:7a:29:b3:46:f0:c2:
73:f0:b4:85:b6:7e:06:d3:54:ed:f3:1a:f3:b5:cb:
a9:8e:82:5c:92:a4:7b:91:e1:8a:54:1d:2c:97:5a:
ad:a0:d1:94:34:27:a0:87:c1:ed:8b:a0:da:db:0e:
f6:b3:7b:0b:31:71:b7:fc:2d:e6:cb:89:c5:cb:ea:
38:ea:b7:f8:e1:c0:60:8e:8c:cb:32:bf:01:96:ec:
17:72:34:2c:67:fd:06:45:6b:84:5f:a4:d5:10:de:
b3:aa:36:66:e7:4c:ba:5a:a8:56:c6:b1:55:f9:7c:
66:52:71:fe:43:d3:43:f6:06:78:fc:64:c5:23:50:
6a:fe:12:5f:02:d0:4b:95:a8:0e:46:0e:c4:16:4c:
eb:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5D:79:D4:0E:D9:B8:0C:74:AA:77:82:35:E9:06:A8:BC:7D:10:B1
X509v3 Authority Key Identifier:
keyid:0B:F5:43:E2:3E:29:FB:03:74:8D:09:39:72:6F:30:FE:9A:FF:A1:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/q1151A7ZuAx0qneCNekGqLx9ELE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/afa34c-f3f0-405c-b083-a35fc438d4ca/1/C_VD4j4p-wN0jQk5cm8w_pr_oZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.68.94.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:3f:8a:b0:ec:50:e2:14:38:1e:76:2b:e9:8f:81:88:b4:ab:
45:c0:3a:17:0e:2f:48:ff:e9:d5:98:3a:56:25:80:d7:2d:f8:
4d:38:18:07:e5:c2:71:a1:80:f9:5a:4a:0d:5b:f1:c0:0b:ea:
a5:b6:f2:ef:82:eb:03:79:b9:cc:02:e9:49:ec:da:f3:2e:55:
ec:fd:87:4d:41:cc:a8:64:44:ff:94:42:9c:84:6b:87:fb:b9:
ae:52:03:85:ff:3e:2f:bd:c7:c5:a5:4f:e4:7d:09:9c:64:2f:
bb:67:3a:80:0a:d9:4c:8e:c2:1d:89:50:d2:e9:b2:3d:06:e5:
26:63:82:74:ca:4a:93:9b:5e:7a:f9:ea:25:aa:4e:05:6b:94:
58:69:96:4a:db:92:5f:15:85:38:24:02:8b:81:5e:10:cd:39:
d8:fd:bd:d9:b9:70:b6:8e:6d:f5:d5:27:56:23:ab:d6:ca:6f:
95:63:d5:68:b3:82:5d:f3:cd:2e:08:ed:eb:5b:5f:64:88:87:
c0:ab:25:61:cf:9b:7e:1a:ab:f9:bc:40:98:9c:52:27:ab:3b:
a7:76:87:bf:17:0b:c3:c2:d3:74:d3:83:fe:56:a5:bc:11:a4:
61:14:eb:89:30:f8:39:78:ac:4e:dd:1b:75:80:06:b8:8a:38:
6e:8c:fc:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:20:13 2026 by rpki-client