Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/q6_QV7_dR_nUmUjkdnn1Ol_C4hk.roa
File: q6_QV7_dR_nUmUjkdnn1Ol_C4hk.roa (raw, json)
Hash identifier: e/CCQvEkZLvzTnUS4WnPQ1yCXPvY5eeas48ASlaEDPU=
Subject key identifier: AB:AF:D0:57:BF:DD:47:F9:D4:99:48:E4:76:79:F5:3A:5F:C2:E2:19
Certificate issuer: /CN=ed30a131718560a34ab3493884e858ec431f6ad1
Certificate serial: 019EEFEE9A0DCE55618AEF84FA6B0E176D8B
Authority key identifier: ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/q6_QV7_dR_nUmUjkdnn1Ol_C4hk.roa
Signing time: Mon 22 Jun 2026 15:24:12 +0000
ROA not before: Mon 22 Jun 2026 15:24:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219527
IP address blocks: 45.139.8.0/24 maxlen: 24
194.180.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.mft
rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 03:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ef:ee:9a:0d:ce:55:61:8a:ef:84:fa:6b:0e:17:6d:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed30a131718560a34ab3493884e858ec431f6ad1
Validity
Not Before: Jun 22 15:24:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abafd057bfdd47f9d49948e47679f53a5fc2e219
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:83:e5:29:75:a7:38:79:11:83:83:e9:a5:93:
fe:2d:f9:58:30:58:c2:b9:74:4d:69:ff:a0:4d:cf:
78:54:ed:a3:ee:60:a7:ad:34:c7:0b:6f:b2:80:29:
3b:35:b0:21:02:0c:a8:c8:f4:ad:2c:84:3f:c2:41:
63:69:6b:07:93:8d:c4:6a:ac:32:57:89:8c:95:8d:
39:b7:10:f5:4b:1b:64:d5:5b:8c:2e:25:3a:54:3c:
28:33:37:2d:c8:30:01:2f:26:a8:5f:fe:ca:25:22:
aa:dd:2c:07:15:89:4e:2f:e5:54:db:75:8a:66:87:
c4:e9:9b:37:76:31:13:86:b0:7a:b8:36:62:34:a5:
e1:13:2f:d4:66:b9:78:c6:0a:c2:9f:3e:68:47:a0:
74:92:cf:63:dd:64:e3:43:f9:44:1d:89:2c:78:66:
93:59:ae:73:0a:b2:c6:46:07:4f:2c:f4:b6:0b:c2:
9b:ec:a7:18:c8:52:0a:1f:3e:4b:be:fc:86:38:ea:
cc:74:02:09:9e:b4:67:17:c2:2a:a9:c9:92:06:c6:
5c:17:c5:cf:18:2e:85:fb:35:8f:ce:7e:50:1a:54:
fd:57:22:e9:51:2f:70:6f:e4:fb:9c:c5:c9:9c:eb:
cd:c5:04:da:d4:ef:27:dd:28:4c:c7:11:d9:41:b5:
e4:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:AF:D0:57:BF:DD:47:F9:D4:99:48:E4:76:79:F5:3A:5F:C2:E2:19
X509v3 Authority Key Identifier:
keyid:ED:30:A1:31:71:85:60:A3:4A:B3:49:38:84:E8:58:EC:43:1F:6A:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7TChMXGFYKNKs0k4hOhY7EMfatE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/q6_QV7_dR_nUmUjkdnn1Ol_C4hk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/5b0702-16e7-4627-ae19-4b3b1b63b6ab/1/7TChMXGFYKNKs0k4hOhY7EMfatE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.139.8.0/24
194.180.208.0/24
Signature Algorithm: sha256WithRSAEncryption
67:95:92:4d:e4:c7:4d:13:98:a8:41:f2:e6:50:03:89:d7:cd:
8e:17:a1:c1:f0:36:45:db:28:98:55:74:5b:9b:c2:01:30:87:
c4:8a:70:50:2e:59:1c:71:43:1c:60:fb:1b:3d:58:21:cb:ea:
77:dd:c7:ff:20:2d:0a:94:13:c6:5d:f0:d7:08:1c:00:d8:8c:
c6:f5:00:96:e1:f1:fb:2e:0b:26:39:e4:83:39:41:15:9d:3f:
7d:a4:33:b4:11:aa:4e:66:25:2f:fe:54:ef:c3:db:ef:b8:58:
be:9e:02:e1:b4:b0:e9:fe:62:11:51:30:90:dc:dd:13:21:1f:
e7:cb:43:5f:5d:89:8b:e6:13:02:49:a3:b2:06:45:88:94:37:
39:29:f8:61:b7:ea:fb:44:7b:17:87:8c:f7:da:f1:02:d3:75:
b1:86:32:f8:73:54:f1:45:40:a7:91:95:f7:45:a0:e4:a8:aa:
ce:1f:24:ac:67:dc:91:0d:68:c4:07:8b:44:a8:e7:15:24:da:
13:51:55:98:ed:ea:63:7c:26:0e:95:69:8e:f2:a0:a5:c8:99:
4e:a4:89:a2:f3:1c:57:0b:36:4a:31:42:b6:90:49:40:cc:c7:
52:92:9a:47:3d:86:4f:87:92:25:11:b3:5c:65:2c:6d:48:fc:
ab:2c:7b:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:15:45 2026 by rpki-client