Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/qEMDrkRlxLB5UG0Z6mCAhLBikio.roa
File: qEMDrkRlxLB5UG0Z6mCAhLBikio.roa (raw, json)
Hash identifier: mHPLMjrq5nmaQwjZOJcQiDtgEZxLquTnwJyzydmKSCE=
Subject key identifier: A8:43:03:AE:44:65:C4:B0:79:50:6D:19:EA:60:80:84:B0:62:92:2A
Certificate issuer: /CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Certificate serial: 019F2368AD8FDD23847687AD949DB7DA1E95
Authority key identifier: F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/qEMDrkRlxLB5UG0Z6mCAhLBikio.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201917
IP address blocks: 194.20.64.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.mft
rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ad:8f:dd:23:84:76:87:ad:94:9d:b7:da:1e:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f03995314d7c2c7053b1cff3e13f96502aaeabcf
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a84303ae4465c4b079506d19ea608084b062922a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:b3:d0:c3:8e:2c:dc:4d:21:d0:e5:76:27:b2:
9b:42:e8:6e:16:7c:ea:c9:3b:e1:98:73:62:2b:cc:
b3:3f:90:b9:53:ba:72:1e:3e:5f:f2:0f:4b:30:56:
51:a5:0d:0c:57:17:b4:d5:3c:f2:c0:0f:41:ae:d1:
09:df:b1:0a:65:ad:e7:8b:af:97:35:3e:9d:2e:46:
81:8d:a9:d1:9f:a7:0a:b3:06:01:f0:8c:0b:cd:7e:
79:01:f5:57:2e:92:2d:07:37:73:16:09:74:e7:b3:
15:e7:99:b3:41:6f:a1:c6:93:4b:b4:1c:64:30:02:
8d:e8:80:08:62:c9:6e:90:4b:dc:7e:d4:90:08:5a:
4b:e8:20:97:73:0f:d2:db:30:d8:9a:31:19:d4:a9:
fd:f2:ca:89:ed:0f:d3:42:ae:06:e1:fa:93:f0:c9:
98:76:18:58:83:7a:ac:58:40:3c:61:58:ef:a9:87:
c5:aa:30:81:c7:81:5e:26:90:30:93:d6:29:5b:67:
3c:50:39:97:6d:84:93:09:96:8f:6e:5e:2d:92:0a:
65:fc:56:c2:bc:8a:fa:f8:87:87:c6:f0:48:51:df:
c1:cd:2a:72:2b:25:6b:b9:06:be:ae:5e:32:ab:40:
c8:66:b2:f2:ec:0d:6d:45:29:55:c9:c4:45:bc:e5:
aa:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:43:03:AE:44:65:C4:B0:79:50:6D:19:EA:60:80:84:B0:62:92:2A
X509v3 Authority Key Identifier:
keyid:F0:39:95:31:4D:7C:2C:70:53:B1:CF:F3:E1:3F:96:50:2A:AE:AB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8DmVMU18LHBTsc_z4T-WUCquq88.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/qEMDrkRlxLB5UG0Z6mCAhLBikio.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/807ed5-50b3-4e5f-9367-5b5e33ce70ad/1/8DmVMU18LHBTsc_z4T-WUCquq88.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.20.64.0/20
Signature Algorithm: sha256WithRSAEncryption
69:ad:a5:06:a5:22:45:6b:a1:27:ac:c6:cd:44:12:1c:e3:da:
74:3a:c8:24:b7:ba:2d:45:31:5b:b4:c9:46:fe:db:23:37:70:
ab:fe:8e:e4:bd:be:2f:5f:78:8d:df:88:c8:20:8f:2a:f6:0f:
12:48:8b:18:a5:63:b9:5e:db:c4:f2:a5:f8:aa:fc:f5:d3:86:
1b:16:9b:b5:14:d7:a1:21:48:74:a3:12:04:94:38:1a:47:57:
66:a2:d6:78:13:ee:d2:17:7b:e0:90:e2:10:30:ba:5d:a9:8d:
59:9f:36:7a:1d:59:50:2d:9d:1e:2d:e5:0c:f6:48:d4:58:72:
45:5b:17:7f:59:04:98:3e:07:e2:fc:d7:25:9f:f4:16:3a:72:
b0:9e:60:61:22:ed:cd:5d:95:2d:87:b5:7c:43:c5:3c:f8:2c:
85:04:b9:99:c6:d7:eb:ec:ae:9a:8d:01:40:b6:2d:79:87:70:
d5:7d:54:33:16:94:d0:c0:36:d7:87:b3:1c:50:08:fa:ba:e2:
c1:ae:70:ab:8f:c6:26:e2:ee:32:f2:2c:f8:56:03:26:73:06:
f6:de:5e:26:0d:de:e7:21:10:c4:43:69:04:1c:cd:92:7d:aa:
6b:b5:b4:82:4c:5d:84:4e:a0:e9:26:4e:0b:0a:cf:77:09:91:
9d:7b:6a:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:31 2026 by rpki-client