Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/Qk8SUDtv35PQudBghJLMDCkV05Y.roa
File: Qk8SUDtv35PQudBghJLMDCkV05Y.roa (raw, json)
Hash identifier: CGtXCN1Ppc2jLH4a4E4mJ8Yb24I37XQwBgJ85+uhimE=
Subject key identifier: 42:4F:12:50:3B:6F:DF:93:D0:B9:D0:60:84:92:CC:0C:29:15:D3:96
Certificate issuer: /CN=9f90f47620cfb2866490f5d118bd25a5005311e6
Certificate serial: 019F236907077639F8FBDB2E708506499191
Authority key identifier: 9F:90:F4:76:20:CF:B2:86:64:90:F5:D1:18:BD:25:A5:00:53:11:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/Qk8SUDtv35PQudBghJLMDCkV05Y.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205913
IP address blocks: 185.202.76.0/24 maxlen: 24
185.202.77.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.mft
rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 18:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:07:07:76:39:f8:fb:db:2e:70:85:06:49:91:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f90f47620cfb2866490f5d118bd25a5005311e6
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=424f12503b6fdf93d0b9d0608492cc0c2915d396
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fc:1b:c0:40:cc:5a:2f:54:82:c9:bb:ef:53:
74:39:a9:5c:cb:5d:08:45:ad:b4:5f:94:4e:ab:d0:
e7:b5:10:cf:98:31:11:93:c6:1b:11:73:cd:1f:76:
27:d8:3b:e2:f5:dd:5e:f5:fe:8c:af:06:79:70:ec:
f0:d9:37:2d:8c:d9:af:6b:e3:09:a4:a7:62:e7:99:
06:36:8b:18:d2:c0:6d:b1:75:4f:81:39:67:ab:6a:
45:8e:22:5d:9f:f6:e3:0b:6e:86:2d:b6:76:f6:bc:
79:59:e9:8d:ec:0f:09:b0:c0:a4:77:0b:67:b7:a2:
f4:c5:36:7e:88:a3:76:88:58:0e:28:15:ba:c7:fd:
91:d5:07:12:e3:fa:85:3f:63:22:58:7a:04:20:2e:
fc:d8:36:2c:f6:da:12:ef:3a:11:4c:f8:7e:cf:0e:
3e:a1:cb:d6:af:40:e3:5e:14:30:4a:e6:6c:87:5a:
28:85:d8:e4:9e:bb:06:81:2b:17:34:bc:8e:5c:3d:
7c:44:ae:8b:fa:9a:f0:a0:7d:fe:b8:c5:cf:ea:ea:
47:af:4f:b6:f1:52:b9:b2:35:13:a6:63:ae:42:d8:
79:d6:c1:31:1f:60:5f:cf:b6:a4:8d:a0:c0:38:61:
4d:5a:7c:f4:6e:bd:fb:4d:a7:3c:91:05:1a:f7:8a:
64:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4F:12:50:3B:6F:DF:93:D0:B9:D0:60:84:92:CC:0C:29:15:D3:96
X509v3 Authority Key Identifier:
keyid:9F:90:F4:76:20:CF:B2:86:64:90:F5:D1:18:BD:25:A5:00:53:11:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n5D0diDPsoZkkPXRGL0lpQBTEeY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/Qk8SUDtv35PQudBghJLMDCkV05Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/3aba7e-1d50-472f-8db7-6912192134e9/1/n5D0diDPsoZkkPXRGL0lpQBTEeY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.202.76.0/23
Signature Algorithm: sha256WithRSAEncryption
1d:31:d4:78:a7:5b:a0:66:d6:b6:49:c7:3e:4d:ba:8a:b6:96:
4a:a1:c5:8b:42:13:6c:c4:7c:16:7a:33:ca:4d:c9:b3:fc:c2:
5f:b3:6e:fc:ca:06:64:4a:16:11:ad:3f:d3:f0:29:4a:d2:9d:
81:4d:da:e3:64:81:cc:a9:76:a3:9e:15:64:e3:cf:87:35:c5:
10:e2:78:74:55:85:1a:b4:b7:80:8a:d3:41:22:c3:a7:b0:1e:
d0:e0:b2:03:45:c2:8f:b1:4d:2a:c8:c6:77:85:a1:07:71:b1:
97:72:7b:ff:c1:a4:c4:e4:c7:84:59:99:c6:c1:6f:18:9b:23:
37:ae:59:1e:49:31:1b:29:35:79:d9:0d:83:52:39:db:39:a2:
40:55:e2:7c:9b:8c:e1:59:e7:69:7b:67:2e:96:8a:98:a6:7f:
35:f4:2a:94:27:80:14:09:b2:43:f5:f2:66:37:fb:6e:6e:1e:
fc:df:43:88:4e:4c:ad:b2:8e:46:25:3a:86:73:9d:1a:18:00:
6d:ea:54:f4:53:56:bb:f9:ca:64:79:85:37:a0:7c:00:00:96:
55:86:c7:a1:66:7f:62:6a:fd:c4:0e:3a:88:78:77:df:6e:75:
fd:3c:fc:0e:04:fc:3b:4b:81:e7:e9:8f:ad:ad:7d:2d:f4:52:
d7:5b:e4:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 03:40:08 2026 by rpki-client