Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Qo5Twpuw0PJHEUfRV8uv8sKD0Jo.roa
File: Qo5Twpuw0PJHEUfRV8uv8sKD0Jo.roa (raw, json)
Hash identifier: /0O51CgL1416iwNlL7nR6ylxjftB4K89aEzhgfr+0xs=
Subject key identifier: 42:8E:53:C2:9B:B0:D0:F2:47:11:47:D1:57:CB:AF:F2:C2:83:D0:9A
Certificate issuer: /CN=774a25728c950e60ac69aeac3ab5745a4e3e44c3
Certificate serial: 019F2368D460988A38627A26B6E7CF0EFB23
Authority key identifier: 77:4A:25:72:8C:95:0E:60:AC:69:AE:AC:3A:B5:74:5A:4E:3E:44:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d0olcoyVDmCsaa6sOrV0Wk4-RMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Qo5Twpuw0PJHEUfRV8uv8sKD0Jo.roa
Signing time: Thu 02 Jul 2026 15:18:20 +0000
ROA not before: Thu 02 Jul 2026 15:18:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25540
IP address blocks: 185.247.32.0/24 maxlen: 24
185.247.33.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/d0olcoyVDmCsaa6sOrV0Wk4-RMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:d4:60:98:8a:38:62:7a:26:b6:e7:cf:0e:fb:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=774a25728c950e60ac69aeac3ab5745a4e3e44c3
Validity
Not Before: Jul 2 15:18:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=428e53c29bb0d0f2471147d157cbaff2c283d09a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:5f:73:ac:49:a6:f6:14:c0:cc:d0:52:51:ae:
d7:a0:4c:55:97:d7:60:9e:a3:58:02:0c:fe:db:4b:
22:fa:5d:5a:b1:95:8b:b5:72:6c:53:cd:04:f5:a3:
18:03:d1:79:6e:d3:96:48:34:04:d8:39:97:45:31:
a5:69:49:56:f5:39:16:3d:ca:7b:cc:2d:cd:a5:ea:
ee:02:9b:d2:2a:8c:0f:e6:22:f3:63:33:41:63:bb:
d9:f6:67:93:d0:69:4a:0c:cb:4d:96:01:c5:5b:f6:
4b:35:83:2e:ad:1b:5b:8e:e1:f7:95:a1:a3:df:9f:
ab:12:a4:fc:8a:97:b6:4c:4e:b8:53:47:f8:cd:3d:
7f:39:7b:b0:ca:31:85:5d:3b:83:e4:a9:cd:4d:2a:
08:77:d8:79:ad:9a:e2:c1:79:1a:46:99:c1:a0:30:
8e:26:7b:5c:8f:e5:b4:f1:ea:a5:df:56:97:5a:df:
1f:9e:3b:f3:fd:d5:45:27:54:77:c2:21:2f:4d:69:
1b:61:6e:70:73:c8:79:4a:5a:f7:ba:d7:f4:61:b4:
8f:d2:34:26:9a:fe:b5:f1:a8:0e:17:b2:d6:42:7e:
fd:3b:32:c5:20:c9:74:5b:19:9f:4d:aa:30:6d:40:
fb:c1:e0:4d:f7:18:10:b9:db:89:98:70:aa:32:e9:
85:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8E:53:C2:9B:B0:D0:F2:47:11:47:D1:57:CB:AF:F2:C2:83:D0:9A
X509v3 Authority Key Identifier:
keyid:77:4A:25:72:8C:95:0E:60:AC:69:AE:AC:3A:B5:74:5A:4E:3E:44:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0olcoyVDmCsaa6sOrV0Wk4-RMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/Qo5Twpuw0PJHEUfRV8uv8sKD0Jo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3b/523b95-3ddc-4818-9265-daaf29211949/1/d0olcoyVDmCsaa6sOrV0Wk4-RMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.247.32.0/23
Signature Algorithm: sha256WithRSAEncryption
a0:e2:c7:59:83:4c:84:7a:a8:5d:0d:57:63:01:83:f2:5b:cf:
63:a5:d8:b8:14:be:49:5f:e2:07:1b:fa:87:ee:04:ef:9f:07:
26:89:b6:a8:bf:34:2e:b2:ab:b3:22:41:fb:9a:96:d7:17:ac:
a3:ca:d9:ae:aa:5a:d8:53:4d:95:e1:04:51:5e:91:b5:c7:09:
c2:31:fd:7f:9d:bd:8b:11:66:4b:a1:41:c5:86:19:a3:6d:28:
a8:91:6a:1e:c3:a6:80:5d:60:cc:bf:31:d2:0e:17:48:fe:0f:
7b:1f:0c:0b:1d:4b:bc:b7:30:23:1a:ee:3d:df:cb:68:44:3d:
f7:7c:12:aa:cc:c7:ca:4d:b5:8a:1f:3e:e8:cd:70:c9:c8:93:
b0:64:3b:f9:64:71:e8:46:81:d8:df:a5:a8:a6:70:7a:11:08:
49:e8:7b:64:17:96:a5:a6:7b:67:33:98:a2:96:8c:be:f0:f5:
d8:42:71:84:de:b9:e4:75:ee:f3:ea:7e:ab:92:bc:c9:ee:8d:
c8:2f:c6:d3:fd:69:2f:a9:14:aa:87:bf:6b:d4:92:c7:13:da:
f6:f4:56:ca:93:90:e4:7e:76:a2:bd:36:9a:c6:61:19:49:ac:
f3:65:91:fa:58:75:5c:2b:24:e5:af:6b:fe:c7:2e:97:7f:84:
8d:84:74:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:10:07 2026 by rpki-client