Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/qjU3-mg-6plX7NPtZmDw0teXaog.roa
File: qjU3-mg-6plX7NPtZmDw0teXaog.roa (raw, json)
Hash identifier: yHPCb3W11kzbNlMZG3Tad2k2N/aaDEDcgs/PQrk8prM=
Subject key identifier: AA:35:37:FA:68:3E:EA:99:57:EC:D3:ED:66:60:F0:D2:D7:97:6A:88
Certificate issuer: /CN=55167557894686ee0c8727b961cc4b9230005f38
Certificate serial: 019F236861DC66CED25806B3FAFDB2015469
Authority key identifier: 55:16:75:57:89:46:86:EE:0C:87:27:B9:61:CC:4B:92:30:00:5F:38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/qjU3-mg-6plX7NPtZmDw0teXaog.roa
Signing time: Thu 02 Jul 2026 15:17:50 +0000
ROA not before: Thu 02 Jul 2026 15:17:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34756
IP address blocks: 45.15.12.0/22 maxlen: 22
45.15.12.0/24 maxlen: 24
45.15.13.0/24 maxlen: 24
45.15.14.0/24 maxlen: 24
45.15.15.0/24 maxlen: 24
77.95.96.0/21 maxlen: 21
91.194.136.0/23 maxlen: 23
176.58.24.0/21 maxlen: 21
176.58.30.0/24 maxlen: 24
176.58.31.0/24 maxlen: 24
185.47.236.0/22 maxlen: 22
193.138.109.0/24 maxlen: 24
195.114.12.0/24 maxlen: 24
195.230.110.0/24 maxlen: 24
2a03:fc00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:61:dc:66:ce:d2:58:06:b3:fa:fd:b2:01:54:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55167557894686ee0c8727b961cc4b9230005f38
Validity
Not Before: Jul 2 15:17:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa3537fa683eea9957ecd3ed6660f0d2d7976a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:24:67:c6:54:ee:8b:1f:d4:27:55:60:3a:fa:
97:82:8a:0e:0f:42:b1:f7:a1:71:4d:20:2b:51:b7:
a7:91:8b:7c:28:80:a9:fd:6f:36:a0:2c:1e:b5:93:
ef:b2:04:99:20:e8:45:fd:cc:d3:cb:0b:08:ca:32:
43:c5:d2:d3:24:12:e5:7a:5a:ca:7e:36:dd:c1:f9:
53:c0:f8:f3:c3:30:87:f1:84:ab:7d:77:fd:b3:67:
a8:5c:50:35:ea:ff:b1:4d:0d:c8:16:2a:af:67:1b:
bb:99:3c:b8:21:38:59:a2:45:21:ab:ac:f1:6d:8e:
d8:ef:fb:a9:2b:ca:15:1a:93:f4:f0:c5:52:92:47:
8f:cb:af:80:7c:14:2c:92:94:55:d9:18:1c:e4:61:
5c:c4:eb:8a:20:af:d6:b4:41:61:e1:3b:89:cd:ea:
ac:da:1d:c9:76:10:bf:e2:4a:6e:ae:ce:31:a8:7a:
ad:ad:00:41:eb:a5:eb:97:34:68:bc:25:35:89:05:
c8:a3:b1:c2:25:ac:91:67:a4:ce:b9:f8:6f:26:ac:
97:aa:30:27:1c:b3:30:fc:27:f0:92:6d:0a:e5:a9:
5b:42:4b:9e:e7:aa:e9:cf:1d:d1:82:41:24:af:ea:
64:03:44:5f:f5:30:d8:a1:c9:b9:05:2e:66:86:ad:
3c:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:35:37:FA:68:3E:EA:99:57:EC:D3:ED:66:60:F0:D2:D7:97:6A:88
X509v3 Authority Key Identifier:
keyid:55:16:75:57:89:46:86:EE:0C:87:27:B9:61:CC:4B:92:30:00:5F:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/qjU3-mg-6plX7NPtZmDw0teXaog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/4e2808-e8f4-42a7-a827-7abce600c218/1/VRZ1V4lGhu4Mhye5YcxLkjAAXzg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.15.12.0/22
77.95.96.0/21
91.194.136.0/23
176.58.24.0/21
185.47.236.0/22
193.138.109.0/24
195.114.12.0/24
195.230.110.0/24
IPv6:
2a03:fc00::/29
Signature Algorithm: sha256WithRSAEncryption
6f:3e:a7:84:88:76:c8:16:ab:39:22:15:f4:cb:a5:ac:40:45:
4c:f2:d8:77:5e:80:b9:a9:04:c9:19:70:f9:a3:fb:45:86:2d:
47:27:2e:d2:dd:40:d7:48:e5:cb:d2:7b:4c:b9:d2:fb:71:9d:
6e:6f:55:87:de:16:91:96:d4:99:d7:e9:09:f3:e3:69:0a:c5:
0c:5b:9c:65:65:df:1a:e1:0e:be:ce:bf:83:11:23:e3:aa:26:
35:c3:f6:7e:b3:2f:4c:1d:c7:61:c8:f2:5a:e6:57:0c:1f:3a:
75:cc:9d:df:c2:5e:0f:70:40:07:c8:33:18:48:0f:42:d3:2c:
e0:53:f9:ee:5e:ed:f9:00:e4:3b:52:0d:32:7c:a3:2d:0b:62:
ed:31:47:d1:a7:1b:43:03:d1:cc:11:f6:42:c7:a0:6f:a0:f5:
bd:7a:3e:40:03:7c:81:5f:9a:4e:86:44:69:44:7f:fd:70:e4:
42:28:fb:ba:81:94:ab:f6:d1:d6:1f:de:45:b5:2e:08:e8:81:
a4:70:ca:72:cc:c0:e0:55:01:1b:ef:cf:5f:55:1e:86:85:bb:
b6:63:c7:ca:3b:0a:05:84:dc:c6:6c:83:f9:ee:74:e4:3a:16:
21:f8:df:ff:0c:1e:0f:d8:c3:ce:eb:97:7d:70:65:2b:de:69:
72:77:ab:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 05:24:26 2026 by rpki-client