Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/q3AcvSoNF20doXTk9QlAnTvcSjA.roa
File: q3AcvSoNF20doXTk9QlAnTvcSjA.roa (raw, json)
Hash identifier: Ui8SoolJbLZ5X4LyhiafgmO8BgxCUTg7oVZBkGTjS2g=
Subject key identifier: AB:70:1C:BD:2A:0D:17:6D:1D:A1:74:E4:F5:09:40:9D:3B:DC:4A:30
Certificate issuer: /CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Certificate serial: 019DF82030324F48ECBA452C2D1F1D6DEFC3
Authority key identifier: C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/q3AcvSoNF20doXTk9QlAnTvcSjA.roa
Signing time: Tue 05 May 2026 12:32:32 +0000
ROA not before: Tue 05 May 2026 12:32:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197939
IP address blocks: 185.149.135.0/24 maxlen: 24
2a0b:85c7:ffff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.mft
rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f8:20:30:32:4f:48:ec:ba:45:2c:2d:1f:1d:6d:ef:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7e9c7aa534b1300bf724fff0f0c1b0519d505bb
Validity
Not Before: May 5 12:32:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab701cbd2a0d176d1da174e4f509409d3bdc4a30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:40:a8:2a:c6:d9:c4:cf:0d:45:11:b2:d7:69:
48:c9:02:cf:41:03:95:e8:4e:f3:52:20:19:b1:dc:
f4:55:f6:25:27:47:bb:fb:48:87:3c:09:e2:b4:a5:
08:92:35:c1:d5:b7:da:00:41:1e:fb:d3:5f:c7:e0:
e4:47:4c:aa:35:85:41:d7:17:33:7f:c6:8d:1c:fb:
e9:1b:e2:ff:59:79:00:09:80:3e:15:c3:36:b6:49:
87:1a:94:5a:63:a7:bb:7f:11:4d:28:50:e5:0b:ac:
b0:9b:d3:7b:4c:1a:ed:97:87:29:ef:95:e7:92:0b:
64:4c:a2:7c:4f:8f:73:0f:8d:21:82:fb:58:50:4e:
f0:09:2d:c4:97:bb:5f:1f:50:3c:3b:00:db:9b:11:
44:34:27:e0:5f:7e:75:c9:b8:02:4c:e9:7a:06:a6:
77:6c:24:53:1a:76:14:46:1a:48:08:4b:e5:74:62:
af:c4:d7:32:67:61:8a:71:4a:b0:1f:ac:ca:c3:c1:
ce:ef:10:7f:63:2a:2e:6f:64:06:39:5a:15:4d:1b:
57:3e:35:92:5d:5a:0e:9f:76:af:38:b4:3b:ef:91:
93:a9:f4:0f:48:77:42:39:4d:78:00:d3:8a:e8:99:
69:78:fe:ad:28:7c:88:aa:2e:79:5b:70:92:a7:f5:
a0:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:70:1C:BD:2A:0D:17:6D:1D:A1:74:E4:F5:09:40:9D:3B:DC:4A:30
X509v3 Authority Key Identifier:
keyid:C7:E9:C7:AA:53:4B:13:00:BF:72:4F:FF:0F:0C:1B:05:19:D5:05:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x-nHqlNLEwC_ck__DwwbBRnVBbs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/q3AcvSoNF20doXTk9QlAnTvcSjA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/50abef-374c-4ea6-b7d4-ce500827ff7f/1/x-nHqlNLEwC_ck__DwwbBRnVBbs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.149.135.0/24
IPv6:
2a0b:85c7:ffff::/48
Signature Algorithm: sha256WithRSAEncryption
09:93:13:a5:1e:74:c9:02:b8:72:a4:9b:c6:ac:df:56:cf:b6:
dc:ec:48:7b:e2:0d:60:cd:be:0a:78:ba:47:55:bb:07:4c:39:
16:21:1f:a1:c5:ce:d7:ea:ff:49:e9:d3:6a:36:67:e3:93:2a:
51:60:a8:0c:3c:0e:d1:60:8c:b6:27:20:cb:14:2c:89:b7:1c:
44:3c:e2:4a:5f:8e:f8:29:12:0f:d6:bd:ad:f9:dc:f7:0b:bd:
d0:f9:e3:17:af:0d:5f:04:78:2f:b7:06:b2:a4:08:51:dc:c7:
f1:31:c2:5b:b4:ce:4a:a2:25:57:80:28:ab:04:c6:61:8c:d4:
04:e9:6e:17:09:de:95:78:52:6c:4e:26:48:35:4d:e6:22:4c:
ea:fd:4f:5b:26:f5:49:ec:95:74:5f:7d:27:b9:e5:fb:0a:fb:
3d:4f:29:5a:fb:05:7a:ca:b8:6b:f6:16:67:fe:8e:df:0e:2a:
28:bc:28:95:3f:56:01:62:a4:3e:4e:21:f5:cd:79:af:eb:bd:
28:8a:a1:f6:09:51:15:43:bb:0e:0a:e3:d6:16:71:62:30:7f:
76:38:97:3f:c8:34:ed:87:ac:f7:2b:8c:45:0d:41:39:31:41:
1f:90:ac:bf:c7:38:70:5b:64:b4:e0:f7:22:17:09:bf:d3:60:
21:06:d7:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:17:02 2026 by rpki-client