Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/MQ1U78oWAmsdfBjipimRQxhaZUQ.roa
File: MQ1U78oWAmsdfBjipimRQxhaZUQ.roa (raw, json)
Hash identifier: tfXkEvSI0LPBTOF9HaPkhhqnpC/Uebo4bMhTqO5iftI=
Subject key identifier: 31:0D:54:EF:CA:16:02:6B:1D:7C:18:E2:A6:29:91:43:18:5A:65:44
Certificate issuer: /CN=f62eeb879085c94194297dd9e4cd249cd2516515
Certificate serial: 019F7EF551BF50DBFE4D176B4328E1E847A5
Authority key identifier: F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/MQ1U78oWAmsdfBjipimRQxhaZUQ.roa
Signing time: Mon 20 Jul 2026 09:57:14 +0000
ROA not before: Mon 20 Jul 2026 09:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42473
IP address blocks: 159.195.0.0/24 maxlen: 24
159.195.90.0/24 maxlen: 24
159.195.155.0/24 maxlen: 24
159.195.160.0/19 maxlen: 19
2a0a:4cc0::/43 maxlen: 43
2a0a:4cc0:40::/43 maxlen: 43
2a0a:4cc0:80::/43 maxlen: 43
2a0a:4cc0:c0::/43 maxlen: 43
2a0a:4cc0:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.mft
rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7e:f5:51:bf:50:db:fe:4d:17:6b:43:28:e1:e8:47:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f62eeb879085c94194297dd9e4cd249cd2516515
Validity
Not Before: Jul 20 09:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=310d54efca16026b1d7c18e2a6299143185a6544
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:b5:56:f8:d6:08:5c:95:21:80:35:94:43:82:
19:7c:dc:57:b7:a0:7c:06:10:1c:f3:65:ed:0e:31:
ae:9b:26:e4:2c:37:3c:f9:b0:18:7f:e9:98:8e:0d:
b5:d4:d2:76:07:48:93:e3:8c:08:2a:99:ab:80:b5:
95:ec:78:c9:c4:d2:87:1c:f8:db:2e:3c:36:c8:86:
27:5c:3b:a4:f1:87:9e:20:40:07:0b:17:1a:50:32:
c1:00:d0:47:d5:c9:3a:a6:64:fb:28:e3:3c:8e:8e:
d5:d6:b5:c8:2c:a2:2e:e6:ce:9d:c3:1a:14:10:01:
00:82:21:64:2f:37:fd:d9:ee:4e:6e:f2:e7:78:f8:
a5:aa:97:68:42:2a:4c:25:42:e2:fa:0d:bd:ba:68:
3a:71:e9:a8:3e:be:2b:eb:4b:9a:7f:1a:ae:77:66:
a4:ea:87:66:68:20:ac:65:cb:14:d9:7b:4f:39:71:
e7:2f:a4:d8:49:31:4f:ad:4d:8f:ac:f6:76:f6:ef:
ae:7c:a8:a4:6a:0d:59:3b:fa:07:e1:df:42:83:ce:
4e:27:12:1f:08:f7:04:a3:a5:71:b5:67:c7:ed:08:
18:be:a2:38:7f:23:48:7a:89:52:a0:6a:4c:2b:e8:
7b:af:d8:96:9a:a0:21:4e:55:2a:4a:12:69:ef:9e:
fd:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0D:54:EF:CA:16:02:6B:1D:7C:18:E2:A6:29:91:43:18:5A:65:44
X509v3 Authority Key Identifier:
keyid:F6:2E:EB:87:90:85:C9:41:94:29:7D:D9:E4:CD:24:9C:D2:51:65:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9i7rh5CFyUGUKX3Z5M0knNJRZRU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/MQ1U78oWAmsdfBjipimRQxhaZUQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/91da8b-0502-48df-8532-5fbf9a29b6e1/1/9i7rh5CFyUGUKX3Z5M0knNJRZRU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.195.0.0/24
159.195.90.0/24
159.195.155.0/24
159.195.160.0/19
IPv6:
2a0a:4cc0::/43
2a0a:4cc0:40::/43
2a0a:4cc0:80::/43
2a0a:4cc0:c0::/43
2a0a:4cc0:2000::/48
Signature Algorithm: sha256WithRSAEncryption
08:b4:b8:c2:4c:cf:c5:48:60:58:fc:65:dd:d6:15:e5:59:07:
2c:67:a6:8d:dc:31:6a:21:9d:a7:20:03:5a:25:05:63:2e:eb:
a6:0a:b0:e5:7b:1f:72:94:55:d9:86:d7:14:63:44:e3:5a:28:
ac:6c:58:0d:d4:17:ab:4a:7a:84:7b:67:d2:bc:42:a1:b9:f5:
e4:d7:37:01:c5:b8:47:b1:d3:c1:5f:16:b8:ce:5b:ea:63:33:
e7:3d:bf:3f:02:da:e0:70:f6:7e:d5:40:00:12:de:f0:f3:d5:
c2:55:d2:e2:be:b6:9e:ac:3e:ef:bd:78:57:7a:b0:6b:ee:f9:
c9:35:9e:a3:b7:f9:6d:34:0b:88:5b:84:07:92:1f:d0:de:bd:
4e:54:4c:78:fe:ae:28:41:6b:71:80:93:a7:30:bf:c2:a8:8f:
bc:66:d5:4b:c8:6a:30:79:26:59:c5:95:ac:82:ba:a9:10:6c:
3d:a5:c1:48:3d:8a:42:6c:c6:ba:dd:eb:82:ce:5f:b8:9c:03:
e9:d5:bf:ef:71:73:19:c5:99:d4:2b:5c:1c:f5:75:be:3a:0e:
f8:0a:68:97:c9:97:ee:12:ba:c9:41:40:51:c5:f3:ea:e3:41:
ae:a2:83:f1:30:99:17:6d:8f:c3:49:a6:68:35:22:5b:58:56:
ce:ae:74:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:37:46 2026 by rpki-client