Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/Q1Q0DhzuTCi0jVC3ZwvS2z89fWY.roa
File: Q1Q0DhzuTCi0jVC3ZwvS2z89fWY.roa (raw, json)
Hash identifier: gZPINODeqX2SsKrHs+U4Y9Hw6JIKCtowrKwWGgtFtv0=
Subject key identifier: 43:54:34:0E:1C:EE:4C:28:B4:8D:50:B7:67:0B:D2:DB:3F:3D:7D:66
Certificate issuer: /CN=0e517bdd696d9bb11faa78c216a15e160d745e69
Certificate serial: 019F2368727FC702F9B4083448DD2B74DBA5
Authority key identifier: 0E:51:7B:DD:69:6D:9B:B1:1F:AA:78:C2:16:A1:5E:16:0D:74:5E:69
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DlF73Wltm7EfqnjCFqFeFg10Xmk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/Q1Q0DhzuTCi0jVC3ZwvS2z89fWY.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1902
IP address blocks: 185.156.128.0/22 maxlen: 22
2a07:9e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/DlF73Wltm7EfqnjCFqFeFg10Xmk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/DlF73Wltm7EfqnjCFqFeFg10Xmk.mft
rsync://rpki.ripe.net/repository/DEFAULT/DlF73Wltm7EfqnjCFqFeFg10Xmk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:72:7f:c7:02:f9:b4:08:34:48:dd:2b:74:db:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e517bdd696d9bb11faa78c216a15e160d745e69
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4354340e1cee4c28b48d50b7670bd2db3f3d7d66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:eb:12:5c:9d:c4:ff:83:63:1a:41:4f:b0:05:
df:71:40:b3:f8:8d:10:ea:4a:88:20:1f:42:c8:e0:
89:d3:f8:e1:1d:d9:8f:f8:e0:e4:64:40:84:a2:87:
e1:4f:72:91:b1:15:0b:9c:3d:e5:41:78:bc:6b:d0:
2d:55:41:c8:3c:32:ff:25:76:77:18:0d:24:23:b5:
51:7a:ca:b9:30:9f:bf:ea:2b:4e:67:28:f3:a0:1c:
b1:d1:c2:7d:5b:bc:78:f5:3e:df:3d:e5:93:0b:4e:
b9:6d:52:19:9d:88:db:62:83:ef:c3:20:67:d5:39:
c9:50:da:b1:0b:c3:44:54:57:31:0d:f0:94:20:bf:
27:d6:b1:36:a1:7b:53:c0:82:fd:5f:53:4a:c2:84:
37:a5:50:34:87:d5:3b:e9:c4:c8:49:61:fa:2a:63:
7e:1f:93:41:2c:69:9a:99:ee:56:90:3b:8c:14:90:
a9:98:1b:3f:7d:b8:25:a0:40:ec:81:ed:33:aa:b8:
93:be:f2:9e:fe:eb:58:e5:9c:0b:e9:2b:9e:91:32:
29:86:05:20:00:be:ab:ce:7e:53:ff:a6:72:3c:67:
5e:48:73:db:9c:d5:83:5b:14:84:54:ae:c7:48:44:
4c:38:4b:cc:d0:61:a3:02:08:0a:4a:82:85:ed:0c:
b4:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:54:34:0E:1C:EE:4C:28:B4:8D:50:B7:67:0B:D2:DB:3F:3D:7D:66
X509v3 Authority Key Identifier:
keyid:0E:51:7B:DD:69:6D:9B:B1:1F:AA:78:C2:16:A1:5E:16:0D:74:5E:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DlF73Wltm7EfqnjCFqFeFg10Xmk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/Q1Q0DhzuTCi0jVC3ZwvS2z89fWY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b476f9-d242-465a-8748-5f1dc0a0bfcf/1/DlF73Wltm7EfqnjCFqFeFg10Xmk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.156.128.0/22
IPv6:
2a07:9e40::/29
Signature Algorithm: sha256WithRSAEncryption
22:c1:90:37:8e:76:dd:0b:4e:1b:53:f5:4a:e1:85:a3:1d:20:
a0:5b:3e:d3:15:39:fa:b6:37:a2:4a:e2:70:0e:62:52:5d:33:
8f:c1:78:2f:de:6a:d0:ef:ee:25:c4:0b:66:46:45:e3:1c:34:
62:71:00:e1:c5:24:cf:6e:d3:24:0b:d6:df:9d:31:8a:7b:ca:
70:fc:0c:a2:8c:b7:40:31:9f:d7:59:6d:65:d0:d4:cc:50:5d:
8d:88:62:27:82:42:15:de:cc:5f:82:40:1f:5d:f8:11:1c:89:
ff:4b:3a:f6:4f:1f:44:00:7c:b1:f7:6d:1f:8e:68:d8:8d:e7:
73:61:14:70:20:a5:49:94:8f:fc:61:1b:f7:d8:1f:b7:3a:94:
51:2e:f8:ea:39:d4:77:39:a5:2f:45:60:2d:12:d7:89:bb:d5:
be:0a:e6:47:c7:f1:63:61:68:58:d2:41:af:1b:f5:ee:1f:29:
01:75:29:4f:67:cb:b3:fa:50:53:c9:6f:7f:54:03:20:e0:b5:
01:c5:78:69:de:50:c3:59:73:24:d0:ad:9e:94:f4:12:88:48:
eb:e5:8e:76:70:69:71:04:87:39:a5:7c:31:41:8d:5d:0c:68:
85:4c:2e:4f:96:54:c7:8e:a7:54:94:1c:b9:3a:b2:fb:6a:49:
16:12:d5:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:41:57 2026 by rpki-client