Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/qVqPlxRScCv-8COTBMikJ00MVgc.roa
File: qVqPlxRScCv-8COTBMikJ00MVgc.roa (raw, json)
Hash identifier: cIM7SO04HJtuy4ha6oHnE1+5MGRerl+2369SkEliLls=
Subject key identifier: A9:5A:8F:97:14:52:70:2B:FE:F0:23:93:04:C8:A4:27:4D:0C:56:07
Certificate issuer: /CN=68d6604c88c2e04e6167241315b74a758ce648c3
Certificate serial: 019F7F440D91FBC81676095E4FB56080FD8A
Authority key identifier: 68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/qVqPlxRScCv-8COTBMikJ00MVgc.roa
Signing time: Mon 20 Jul 2026 11:23:14 +0000
ROA not before: Mon 20 Jul 2026 11:23:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 5.83.16.0/21 maxlen: 21
5.83.16.0/22 maxlen: 24
5.83.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7f:44:0d:91:fb:c8:16:76:09:5e:4f:b5:60:80:fd:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68d6604c88c2e04e6167241315b74a758ce648c3
Validity
Not Before: Jul 20 11:23:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a95a8f971452702bfef0239304c8a4274d0c5607
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:e9:e7:cc:c4:38:ef:82:e6:ef:b4:77:c3:cf:
4d:81:1d:1a:50:37:c0:47:8f:89:3c:3f:64:04:b7:
d7:cc:da:bb:42:df:aa:ac:83:1a:63:43:79:5a:a8:
02:2f:6e:66:a5:82:3b:a4:6a:16:c7:70:ef:73:64:
2d:ff:2f:80:34:ca:2d:a6:72:b7:fe:e0:ad:bf:78:
08:e2:5a:79:40:f4:47:f4:cd:ec:80:85:14:8d:f5:
8b:e7:cc:f4:f9:0e:71:de:15:75:14:af:55:4b:86:
ce:41:ee:26:ae:24:a4:6e:03:c0:5c:eb:49:63:13:
f2:ce:c4:94:2f:26:18:06:77:e4:25:57:38:b5:f4:
9b:8a:3c:9d:bb:e0:2b:45:60:f3:14:9d:46:24:1a:
a6:0b:09:f3:91:73:ee:46:17:92:ed:32:7b:a1:3a:
75:c2:17:6e:0d:a7:63:9b:8e:88:b4:88:00:c6:d0:
34:31:b4:2c:d3:ce:31:f2:e9:48:e2:3e:d3:65:e6:
f7:f1:d6:3c:ad:0d:41:6d:de:4c:6f:86:64:d2:55:
ac:3d:d5:5a:d0:1d:3b:a3:34:87:14:2d:66:e5:2d:
8b:32:31:2d:dd:db:29:64:95:53:da:14:fc:92:8d:
c0:10:e7:60:b3:60:d9:f4:d1:2a:0b:ca:b3:af:7c:
a8:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5A:8F:97:14:52:70:2B:FE:F0:23:93:04:C8:A4:27:4D:0C:56:07
X509v3 Authority Key Identifier:
keyid:68:D6:60:4C:88:C2:E0:4E:61:67:24:13:15:B7:4A:75:8C:E6:48:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aNZgTIjC4E5hZyQTFbdKdYzmSMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/qVqPlxRScCv-8COTBMikJ00MVgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/006225-9bff-4583-8a15-7cc2945f2ca6/1/aNZgTIjC4E5hZyQTFbdKdYzmSMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.83.16.0/21
Signature Algorithm: sha256WithRSAEncryption
95:5e:05:cd:dc:20:bc:c9:0a:9a:64:b5:3e:8a:10:16:47:48:
d1:35:3a:c7:f0:78:93:d5:2b:f5:20:dc:fa:f7:53:67:b3:6f:
a7:d8:de:de:ea:e5:87:83:1e:92:c0:5c:84:5e:9c:b1:ce:3f:
cb:ed:f2:17:fa:6a:62:32:3b:e3:b5:6c:54:fe:04:3d:ef:4d:
57:7f:c7:95:50:b6:cf:75:89:a5:09:99:4e:bd:79:32:92:a7:
25:e2:52:be:a2:fa:d9:0d:95:84:1b:5d:6d:00:20:ea:87:90:
ad:eb:2c:9c:b8:ef:5f:dd:c8:66:c4:25:d2:51:3c:9b:63:f2:
1b:02:fe:be:73:e2:a3:9d:3e:08:de:87:cc:0c:f0:94:a8:4e:
b3:fa:bb:5f:0b:cc:fa:15:f1:6c:1b:c2:5a:bd:ea:80:1d:00:
71:99:3a:1a:37:88:f1:68:51:31:a0:ea:b2:18:82:f6:50:e5:
29:32:f2:dc:d4:33:34:89:36:a6:ca:5c:e1:9f:0d:97:b7:cc:
84:ed:09:3a:e9:dd:93:e5:09:e2:a7:99:47:00:70:05:81:88:
8d:7e:f0:53:2b:d6:e2:3a:9f:b0:55:82:2d:06:63:a8:b8:53:
b2:45:ad:9d:78:a7:1a:4a:0b:6f:11:58:de:35:c8:9a:bf:08:
de:c4:52:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:04:10 2026 by rpki-client