Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Q_RwBK4J-s7JDo1fqPkOrKNHg-I.roa
File: Q_RwBK4J-s7JDo1fqPkOrKNHg-I.roa (raw, json)
Hash identifier: AP+/T1ZzUK+2E8HDXrPKYryisi+cP0Jl7lqvAegGmA0=
Subject key identifier: 43:F4:70:04:AE:09:FA:CE:C9:0E:8D:5F:A8:F9:0E:AC:A3:47:83:E2
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019EF4341AF6DF2951756D08EAFA2081556A
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Q_RwBK4J-s7JDo1fqPkOrKNHg-I.roa
Signing time: Tue 23 Jun 2026 11:18:35 +0000
ROA not before: Tue 23 Jun 2026 11:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213702
IP address blocks: 2a12:bec4:150::/44 maxlen: 44
2a12:bec4:1460::/44 maxlen: 44
2a12:bec4:1a70::/44 maxlen: 44
2a12:bec4:1a80::/44 maxlen: 44
2a12:bec4:1c70::/44 maxlen: 44
2a12:bec4:1c80::/44 maxlen: 44
2a12:bec4:1c90::/44 maxlen: 48
2a12:bec4:2000::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f4:34:1a:f6:df:29:51:75:6d:08:ea:fa:20:81:55:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Jun 23 11:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43f47004ae09facec90e8d5fa8f90eaca34783e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:01:35:4d:f0:06:78:2a:a7:05:e2:ea:27:80:
3b:48:b0:0f:d0:44:19:26:a5:c9:41:df:a9:f9:2b:
89:c7:3f:85:29:f2:3b:dd:d1:de:f8:52:bc:2e:af:
21:09:41:77:ee:12:1d:61:bd:17:3c:be:99:ae:34:
87:1e:a2:7c:c7:3c:ab:33:64:50:dd:9b:07:e0:3b:
52:43:55:b8:76:64:49:c4:d6:98:91:d6:59:ee:3d:
5e:4b:6b:8e:80:16:ab:77:af:3b:45:2a:11:56:2d:
33:e5:26:79:6a:18:2c:b5:8b:3d:08:12:7d:c1:5c:
96:c2:c3:44:cc:56:1d:02:47:46:0d:39:10:df:92:
3d:7f:3a:62:a1:38:0a:6d:cc:5f:c0:16:61:ea:2e:
fc:85:c1:2d:45:45:0d:f4:8e:97:37:e6:fa:ea:40:
a5:f7:d8:8b:e4:82:86:d4:9e:1b:6c:17:be:b8:0d:
4c:79:64:dd:1c:e4:d6:b9:43:f4:cb:30:af:93:67:
29:a8:dd:be:75:5e:2a:da:a2:d8:a8:fc:5b:5e:f7:
8a:f8:01:e9:2d:fd:f8:6e:cf:3d:6f:55:10:18:28:
df:bf:ae:43:a2:2b:9e:6d:6f:07:44:94:5d:9b:ad:
16:b2:fb:3c:e0:b6:a2:74:46:d0:4d:6d:98:cb:8e:
c6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F4:70:04:AE:09:FA:CE:C9:0E:8D:5F:A8:F9:0E:AC:A3:47:83:E2
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/Q_RwBK4J-s7JDo1fqPkOrKNHg-I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:150::/44
2a12:bec4:1460::/44
2a12:bec4:1a70::-2a12:bec4:1a8f:ffff:ffff:ffff:ffff:ffff
2a12:bec4:1c70::-2a12:bec4:1c9f:ffff:ffff:ffff:ffff:ffff
2a12:bec4:2000::/44
Signature Algorithm: sha256WithRSAEncryption
16:87:e4:9d:f1:d8:63:ff:76:47:1c:52:20:b0:7b:ef:a3:1e:
77:89:3d:3d:f0:8a:81:5b:fe:2d:62:d0:9e:1a:b3:51:85:90:
9b:54:12:88:87:8e:b0:a1:66:58:2f:16:d8:b8:64:8f:38:a4:
5f:9e:72:b6:d1:1b:c3:ce:00:df:29:95:4a:4f:93:f2:ea:b1:
f1:13:81:23:d8:89:36:a7:35:d5:4f:ea:e3:33:dc:dd:28:46:
91:79:20:ef:8d:66:af:68:76:55:e1:ef:1e:7c:a0:90:74:34:
f9:54:64:40:05:44:16:9f:f5:ec:26:93:85:b2:f5:00:67:cc:
c6:dc:e5:50:11:93:31:86:52:e1:a9:2e:81:a9:50:e4:d1:3e:
02:80:54:1e:ec:5f:a5:02:07:d4:4f:fd:a2:77:39:e1:dd:46:
3a:d9:dd:74:77:99:c6:6c:6f:52:f7:6d:5c:38:c0:69:fe:6c:
2a:fe:09:d8:96:1a:c8:40:b2:bf:57:81:11:8a:45:e5:f7:38:
2f:85:84:b3:8a:a2:6e:5c:de:13:20:b9:ae:ce:a0:92:88:d8:
4a:60:81:2a:f8:c8:83:2e:99:a5:71:b1:fe:23:a9:ca:74:a0:
1c:fc:7d:b0:86:af:98:fd:4e:75:36:fc:ac:2b:94:64:06:dd:
00:ea:09:48
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Jul 24 01:55:22 2026 by rpki-client