Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/MQeTf0MYRPYw_402BYO3IY08ZTI.roa
File: MQeTf0MYRPYw_402BYO3IY08ZTI.roa (raw, json)
Hash identifier: ubuWvtB27a2rNunPzQvBhMbVlyiCsPYMuMsDZ/GM8W0=
Subject key identifier: 31:07:93:7F:43:18:44:F6:30:FF:8D:36:05:83:B7:21:8D:3C:65:32
Certificate issuer: /CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Certificate serial: 019F3CA17B3A0816AF21C3529F2D57B6831D
Authority key identifier: 42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/MQeTf0MYRPYw_402BYO3IY08ZTI.roa
Signing time: Tue 07 Jul 2026 12:50:43 +0000
ROA not before: Tue 07 Jul 2026 12:50:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50266
IP address blocks: 45.145.196.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.mft
rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3c:a1:7b:3a:08:16:af:21:c3:52:9f:2d:57:b6:83:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42c42723c1f75ba0be8935c72f61bfe5c5f4ce3c
Validity
Not Before: Jul 7 12:50:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3107937f431844f630ff8d360583b7218d3c6532
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:80:db:2d:e5:36:36:cf:a6:28:21:ef:57:55:
41:37:e4:93:c8:3b:8e:67:6c:83:39:da:25:db:25:
2c:ba:9f:c7:4d:7f:0c:c4:ee:11:ae:21:b9:90:f0:
8d:9e:23:a5:f7:b3:a9:33:76:fc:33:a1:aa:ca:07:
38:58:c6:8f:19:40:1c:ca:da:ec:28:52:d4:0f:b2:
1f:25:1e:b4:81:76:ae:c5:c3:22:b3:41:ff:f6:2d:
c8:65:e0:69:ae:13:dc:46:9d:b1:0a:aa:6c:3d:90:
fe:07:7d:5a:28:97:03:dd:fb:87:8d:30:c4:cf:86:
91:ef:f6:bd:28:8c:b4:8d:59:fb:10:18:79:4a:79:
c4:58:36:10:6e:5b:43:a7:e3:6b:6a:96:50:b6:1e:
35:ee:a4:1d:25:52:0a:10:b8:a4:d4:9b:af:b2:b5:
78:1f:4d:88:6b:04:27:65:c6:fe:83:32:71:ab:a6:
a5:62:1b:16:92:2e:49:f3:9e:96:e5:c9:3a:b1:12:
74:6f:2a:87:87:f9:96:84:7f:21:1a:0e:f9:4c:c0:
67:ae:bf:91:a5:e4:75:24:39:70:40:46:ee:6a:f2:
7d:be:70:72:93:72:8c:e2:6a:96:55:da:e3:73:0a:
63:51:e6:12:6a:60:d9:7f:f6:e9:dc:cd:93:18:5d:
f6:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:07:93:7F:43:18:44:F6:30:FF:8D:36:05:83:B7:21:8D:3C:65:32
X509v3 Authority Key Identifier:
keyid:42:C4:27:23:C1:F7:5B:A0:BE:89:35:C7:2F:61:BF:E5:C5:F4:CE:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QsQnI8H3W6C-iTXHL2G_5cX0zjw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/MQeTf0MYRPYw_402BYO3IY08ZTI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/c56418-d1d6-4b43-aec0-b98a6901ea10/1/QsQnI8H3W6C-iTXHL2G_5cX0zjw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.196.0/22
Signature Algorithm: sha256WithRSAEncryption
7e:c0:81:2e:90:c9:12:4c:1f:ab:32:97:55:f0:ba:1a:6e:b0:
ba:6b:09:e3:01:71:8c:d1:b4:6a:b5:b9:e8:68:fb:da:d0:1a:
a3:58:16:d0:9a:b0:06:aa:09:c6:d8:08:33:22:2d:9f:bd:a5:
b4:0c:b7:fe:92:55:b2:91:05:79:b3:a8:a6:d2:90:4d:74:35:
49:19:c6:8c:73:4b:0f:c6:0e:42:7f:27:ec:43:2a:7d:44:d5:
f7:78:aa:86:b1:ab:ce:dc:fb:57:11:28:d7:64:86:a1:7c:c9:
a3:10:e2:57:fe:b3:76:12:02:f1:4c:c2:ea:55:ae:81:e7:52:
47:5d:93:dd:c7:34:f1:db:bf:39:ed:cc:1c:dd:f0:c5:26:d0:
44:be:fa:01:c3:55:76:cd:9a:9e:e0:fb:96:28:5e:0c:22:bc:
29:f3:8a:7e:da:a1:b4:1b:60:eb:d0:c2:0b:84:a8:5e:0c:04:
95:cc:0f:fc:ca:d7:74:4b:b8:b9:1b:ff:cc:98:4b:5d:4c:2f:
8c:af:80:f4:7a:cb:20:b2:b1:33:e9:f9:97:c2:02:9a:46:ae:
9b:6d:fb:78:49:19:8f:a7:95:dd:f6:14:44:0d:12:e9:e9:b9:
b2:f4:c8:aa:45:e4:6d:c8:7f:22:59:c7:a7:2e:60:ca:1b:e1:
49:0a:c4:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 14:52:35 2026 by rpki-client