Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/RQYIGLLVSIftKc72IB8Q5fGhyLA.roa
File: RQYIGLLVSIftKc72IB8Q5fGhyLA.roa (raw, json)
Hash identifier: du2s9GjbjtVis5okEfEtz3NF056oJiz3iauob6CPdOw=
Subject key identifier: 45:06:08:18:B2:D5:48:87:ED:29:CE:F6:20:1F:10:E5:F1:A1:C8:B0
Certificate issuer: /CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Certificate serial: 019D00E87DA7A74B21B24D74916AD2E70E2E
Authority key identifier: 8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/RQYIGLLVSIftKc72IB8Q5fGhyLA.roa
Signing time: Wed 18 Mar 2026 12:25:29 +0000
ROA not before: Wed 18 Mar 2026 12:25:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212477
IP address blocks: 79.110.236.0/24 maxlen: 32
146.19.160.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.mft
rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:e8:7d:a7:a7:4b:21:b2:4d:74:91:6a:d2:e7:0e:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fc69646457a8bf8ef9569b9b427e9f2c462e56e
Validity
Not Before: Mar 18 12:25:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45060818b2d54887ed29cef6201f10e5f1a1c8b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:38:6a:ab:d6:9b:d0:63:78:59:25:32:fb:20:
ff:db:1b:7e:ac:d4:89:fe:62:c0:53:26:da:40:81:
82:06:16:17:85:1e:b2:5d:61:f2:81:9d:65:19:d6:
02:89:dd:82:b5:d3:4a:34:55:11:14:b1:39:95:ea:
a7:8b:7a:56:a9:e6:da:8a:ed:da:05:3b:c7:e0:0a:
7d:99:7c:cf:d6:a5:c8:99:8a:b7:b7:7d:75:ac:37:
a7:87:49:40:71:0a:2e:82:cf:76:7d:84:28:6e:7f:
4e:b2:5f:9f:51:e5:e1:32:32:08:c1:6b:02:f2:d1:
39:5c:a8:ed:f5:79:b5:61:b2:12:0f:4b:78:f9:a6:
ff:1a:69:77:4a:d3:23:d0:ff:16:f0:15:42:0e:8a:
8a:bf:e4:0e:22:41:f4:94:69:38:48:f9:27:9e:75:
38:ee:75:2d:a3:9c:15:ca:7d:7b:fd:f8:af:eb:3f:
13:dd:6a:d3:a9:3c:ae:2a:bc:ee:d3:cf:c5:d0:10:
31:6f:5e:0f:d3:aa:44:b2:e7:eb:a9:d9:3b:e2:b4:
ad:93:50:57:d7:23:16:b8:13:ef:ea:6a:d0:4b:be:
e0:7b:b3:19:5a:ba:36:32:54:63:86:cc:b0:48:e8:
cc:53:70:01:a8:74:cb:5e:87:33:f8:76:9c:d4:96:
a0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:06:08:18:B2:D5:48:87:ED:29:CE:F6:20:1F:10:E5:F1:A1:C8:B0
X509v3 Authority Key Identifier:
keyid:8F:C6:96:46:45:7A:8B:F8:EF:95:69:B9:B4:27:E9:F2:C4:62:E5:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j8aWRkV6i_jvlWm5tCfp8sRi5W4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/RQYIGLLVSIftKc72IB8Q5fGhyLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/9fab5c-e138-4ef6-8799-b0b35a34e388/1/j8aWRkV6i_jvlWm5tCfp8sRi5W4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.110.236.0/24
146.19.160.0/24
Signature Algorithm: sha256WithRSAEncryption
a5:b6:10:00:e7:2f:e6:7c:1a:51:17:78:ab:88:97:9b:2c:ba:
52:7b:ca:47:cc:d6:81:cf:82:2e:69:e1:c6:34:ce:9c:f8:43:
70:70:eb:58:0d:89:47:b0:ca:32:66:6a:fc:61:fc:5a:f8:a6:
dc:95:2f:22:84:3f:cf:c1:61:59:4e:ee:6b:99:35:4d:7f:1c:
32:3e:42:1a:15:19:db:97:77:79:7b:e8:97:f1:76:bc:81:2c:
bb:bf:0b:50:83:2c:51:4e:0a:e7:c9:75:29:0d:f9:1a:42:66:
97:cc:dc:ee:23:11:46:b2:f2:b4:10:ff:c2:36:9d:3b:54:d7:
65:6f:1a:ad:48:42:66:45:c3:88:cc:26:97:94:6c:1f:27:b3:
ba:f6:b3:0d:07:eb:0c:8b:b3:2e:be:04:d4:56:f4:7c:68:cf:
41:7c:e3:15:9f:97:5a:29:39:95:79:90:c6:1f:36:55:5d:1f:
7d:50:9a:e8:71:a2:f3:83:63:40:18:b6:87:71:80:23:4e:30:
62:af:e4:06:d5:ca:38:a6:9b:39:52:1c:a4:6c:60:cd:63:1c:
08:62:35:bf:55:23:d4:c8:37:dd:75:cf:f8:69:cd:ed:55:c2:
3b:db:cf:89:55:63:dd:1c:a2:eb:cd:42:8b:0a:97:2d:0d:ed:
c6:c5:e9:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 06:37:02 2026 by rpki-client