Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/Q3eIp9baoUXgGx7jMp7Mfn7uqX4.roa
File: Q3eIp9baoUXgGx7jMp7Mfn7uqX4.roa (raw, json)
Hash identifier: q1dXe35IoMpEAZcG9cyPr1eAH6iDIpKmxS9VDxb5LkE=
Subject key identifier: 43:77:88:A7:D6:DA:A1:45:E0:1B:1E:E3:32:9E:CC:7E:7E:EE:A9:7E
Certificate issuer: /CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Certificate serial: 019DC08DB9830913B0FD2B6BE11008211540
Authority key identifier: A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/Q3eIp9baoUXgGx7jMp7Mfn7uqX4.roa
Signing time: Fri 24 Apr 2026 17:33:26 +0000
ROA not before: Fri 24 Apr 2026 17:33:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 265827
IP address blocks: 194.247.179.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.mft
rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c0:8d:b9:83:09:13:b0:fd:2b:6b:e1:10:08:21:15:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a0acca9c4fe9bf9edf3bc6e5cabc52838d93cb13
Validity
Not Before: Apr 24 17:33:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=437788a7d6daa145e01b1ee3329ecc7e7eeea97e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:75:17:51:ae:81:7e:67:23:e1:72:c2:37:b3:
f7:67:b4:cb:38:25:a6:77:e3:d2:0b:6c:0f:25:a0:
b5:db:c2:c9:6d:c2:f1:a5:54:ae:95:74:f6:a5:89:
58:93:c0:ff:9c:ce:24:b9:0f:29:25:16:05:93:5b:
b8:a0:a4:d0:c5:81:08:9e:52:50:de:97:ec:8d:8b:
6e:69:fd:55:7d:a7:03:b0:51:0e:0c:0a:4f:4b:ed:
f3:e8:2b:43:9b:82:df:f0:3d:08:ad:50:49:55:c4:
04:8b:6f:78:cb:af:f9:48:90:17:5f:29:7b:6c:ff:
36:48:fb:a6:54:50:ac:ba:ef:ef:41:b9:14:f6:2d:
b2:c9:b5:0b:3f:9f:d9:a9:ad:53:30:2a:ec:44:97:
59:61:e5:66:16:0b:fd:d2:2f:99:3c:f4:de:80:06:
04:75:68:d2:04:16:49:33:75:77:1c:27:9b:9a:05:
1b:36:fc:2b:aa:98:72:a9:d3:9e:34:ab:5f:e9:1b:
9f:45:31:af:01:81:7a:53:0d:ad:49:72:a5:4d:74:
02:ed:95:d3:a1:76:4e:eb:ed:22:12:c7:2f:c8:f1:
ae:3e:10:fd:e9:62:6f:f5:8b:a8:0d:d6:7a:8a:e6:
9f:62:95:19:a4:c8:f2:4d:70:8b:0b:08:0a:8f:14:
1e:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:77:88:A7:D6:DA:A1:45:E0:1B:1E:E3:32:9E:CC:7E:7E:EE:A9:7E
X509v3 Authority Key Identifier:
keyid:A0:AC:CA:9C:4F:E9:BF:9E:DF:3B:C6:E5:CA:BC:52:83:8D:93:CB:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oKzKnE_pv57fO8blyrxSg42TyxM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/Q3eIp9baoUXgGx7jMp7Mfn7uqX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/7b6110-8c4b-4af6-a7ca-2edfe25bb58a/1/oKzKnE_pv57fO8blyrxSg42TyxM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.247.179.0/24
Signature Algorithm: sha256WithRSAEncryption
0f:e8:1b:06:ec:b9:6d:ba:ea:3c:65:0a:84:e9:58:91:66:fc:
16:f8:4e:ed:7b:e1:75:e9:39:b7:1e:2d:eb:f8:14:36:b4:b3:
30:8f:21:96:0b:d8:aa:d2:35:bc:b3:43:de:f4:62:52:4b:84:
6c:33:d4:88:70:2b:f1:88:de:ce:3b:a1:11:c8:98:ae:43:c5:
66:7a:c7:3a:3f:6f:d8:05:4d:ba:10:2a:d2:e0:b2:12:a6:87:
42:90:75:56:95:f3:8a:85:3e:38:00:b5:08:a3:cd:c9:5c:5a:
53:ae:55:51:bb:1a:8e:da:ee:57:a6:e9:c4:a5:c9:47:c5:8b:
7f:5a:ae:09:e1:e9:e1:a1:da:85:8d:4c:87:4b:69:f6:be:39:
ab:1e:a0:c0:c7:cb:a6:20:18:af:7e:46:cb:e9:47:4f:bc:dc:
9b:bf:b4:73:65:27:7a:a1:f9:95:d8:dc:c9:76:bb:f9:64:63:
a5:09:a9:08:7b:c9:73:fa:64:ea:57:7d:d1:12:9b:1d:17:86:
0f:7e:1c:32:76:cd:72:0c:8a:ea:0d:c5:5a:97:36:db:90:46:
e6:c5:61:79:59:8f:4b:36:07:63:cd:b0:78:0f:3c:ea:67:02:
34:9b:4e:0f:93:ad:c2:2c:0b:4e:dc:f0:bf:2f:2f:66:e4:d5:
6a:05:55:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 06:38:18 2026 by rpki-client