Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/cQ52tUzWll-pMyyKqI8p4AB-MNo.roa
File: cQ52tUzWll-pMyyKqI8p4AB-MNo.roa (raw, json)
Hash identifier: bxR3X3yZRop2aXatfRKBWJD++1XD0ikvu76wT8tJNzE=
Subject key identifier: 71:0E:76:B5:4C:D6:96:5F:A9:33:2C:8A:A8:8F:29:E0:00:7E:30:DA
Certificate issuer: /CN=1b12120c351c14eec22109f603249fcdac1d3321
Certificate serial: 01A0B11CC36A7D1A6A47CC507A13C682BD2A
Authority key identifier: 1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/cQ52tUzWll-pMyyKqI8p4AB-MNo.roa
Signing time: Thu 17 Sep 2026 20:44:07 +0000
ROA not before: Thu 17 Sep 2026 20:44:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48678
IP address blocks: 185.7.241.0/24 maxlen: 24
185.7.242.0/24 maxlen: 24
2a14:db80:6::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 14:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b1:1c:c3:6a:7d:1a:6a:47:cc:50:7a:13:c6:82:bd:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b12120c351c14eec22109f603249fcdac1d3321
Validity
Not Before: Sep 17 20:44:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=710e76b54cd6965fa9332c8aa88f29e0007e30da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:23:b2:49:c4:95:48:15:41:07:34:bb:35:dd:
ea:af:34:b5:ba:75:f4:bf:ec:5d:ed:91:da:e2:90:
26:b7:03:34:04:c9:aa:f1:86:3e:f9:de:15:bb:90:
6b:c8:6b:f3:d8:67:9c:43:6b:6e:e0:29:ab:13:9a:
e0:18:31:3b:e8:66:27:b7:36:ad:4a:75:88:a5:70:
1e:53:ed:7a:ee:08:e3:34:1e:ac:64:2c:d6:bf:a9:
29:92:08:eb:b5:05:c6:c6:a7:dc:72:86:e8:2a:e0:
7d:e5:7e:a3:b0:d5:7b:f1:29:e4:01:61:ed:58:ea:
d9:b9:c0:3f:79:e1:d5:67:5d:c1:28:bb:40:71:5e:
83:34:18:fd:81:bc:e1:96:5d:5b:80:11:71:2a:c0:
b6:4d:eb:cc:e2:9b:81:85:5f:1c:ea:24:59:97:ac:
46:81:98:1a:96:8f:c4:c3:7a:1e:12:b5:2d:a4:a6:
40:f0:ba:94:a5:f9:df:00:5c:38:21:68:e4:59:02:
4f:72:b1:5b:f0:3b:c6:30:6e:38:44:80:ae:fc:4f:
32:1a:18:4e:e0:9e:5f:17:4e:57:8a:4f:75:12:ef:
f1:9e:11:04:4e:f9:2c:ab:3d:75:e4:61:c7:67:bd:
50:13:21:3d:f5:e0:f5:70:34:3b:c9:82:2d:13:9e:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:0E:76:B5:4C:D6:96:5F:A9:33:2C:8A:A8:8F:29:E0:00:7E:30:DA
X509v3 Authority Key Identifier:
keyid:1B:12:12:0C:35:1C:14:EE:C2:21:09:F6:03:24:9F:CD:AC:1D:33:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GxISDDUcFO7CIQn2AySfzawdMyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/cQ52tUzWll-pMyyKqI8p4AB-MNo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/3daf7f-301d-423e-946e-43df47d5a1e7/1/GxISDDUcFO7CIQn2AySfzawdMyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.7.241.0-185.7.242.255
IPv6:
2a14:db80:6::/48
Signature Algorithm: sha256WithRSAEncryption
7d:22:cc:ef:20:65:85:09:0d:15:7f:f1:f1:58:69:57:1c:f2:
e0:37:de:50:16:cc:9c:22:71:95:10:29:51:c2:67:e0:01:be:
bc:9a:05:46:f6:d0:6c:40:24:ac:87:c6:5f:38:c4:3a:ed:5e:
47:95:99:52:b8:79:9b:28:1d:1d:5b:e9:81:7d:02:a2:37:fd:
5e:4f:1b:22:2c:3f:b3:fa:7c:02:c4:dd:64:9f:3e:f2:ec:76:
8f:1e:c3:e8:72:d6:7d:cd:ab:40:87:8d:3f:1d:be:a6:d9:7d:
44:6b:5d:c6:0f:c5:49:fc:83:cc:3c:02:7c:6c:43:5b:bc:c0:
4f:e3:68:77:7b:e5:a3:79:01:42:39:b4:11:c1:c3:8a:50:7c:
a1:df:40:98:52:e5:dc:42:51:84:fc:3e:58:c1:97:42:e5:db:
94:36:d9:ef:80:d8:7e:f7:dc:c7:13:15:be:88:30:7b:c8:55:
96:83:a7:d2:86:b4:ca:c6:ed:06:35:c8:e4:22:f1:bf:25:5a:
5f:7a:93:f9:c4:45:ab:b8:74:fc:11:b9:59:c8:44:24:e8:1a:
cf:12:c0:6c:99:77:bf:8e:7e:fc:0b:04:7f:f7:20:3f:88:b7:
88:39:15:ca:0d:fa:ca:b3:d3:e5:49:82:ba:97:b8:ef:b9:25:
e3:79:a5:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:12:53 2026 by rpki-client