Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/qNxJXDtUTiT_RtW1GUJYB5Tbk8I.roa
File: qNxJXDtUTiT_RtW1GUJYB5Tbk8I.roa (raw, json)
Hash identifier: 3FmXs9BuOt1Pjw7qiwT6Cdmaqxnd0jXH41KNLGc1iSo=
Subject key identifier: A8:DC:49:5C:3B:54:4E:24:FF:46:D5:B5:19:42:58:07:94:DB:93:C2
Certificate issuer: /CN=d1c17d170772fab1e60333a639a30f6ffa98dbfd
Certificate serial: 019F23691F2DD0CA49983F5CF54CDF4D124F
Authority key identifier: D1:C1:7D:17:07:72:FA:B1:E6:03:33:A6:39:A3:0F:6F:FA:98:DB:FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/qNxJXDtUTiT_RtW1GUJYB5Tbk8I.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206195
IP address blocks: 185.193.200.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1f:2d:d0:ca:49:98:3f:5c:f5:4c:df:4d:12:4f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1c17d170772fab1e60333a639a30f6ffa98dbfd
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8dc495c3b544e24ff46d5b51942580794db93c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:57:b1:3f:15:26:7a:c9:43:44:1d:23:d5:9c:
4c:55:c4:91:2d:24:e2:65:4f:91:61:cb:38:a9:7f:
1d:51:b0:60:e8:6f:0e:b2:b8:7e:6e:39:94:2c:77:
d5:4e:4b:71:b7:a0:56:01:15:43:f4:aa:88:5f:6b:
ba:26:15:88:9f:85:4c:36:f3:80:75:fe:23:be:11:
0f:bd:aa:60:f5:b1:4c:1c:50:fc:a2:75:62:49:51:
eb:ed:a7:f1:06:fb:79:f2:4c:31:35:06:b4:9a:38:
f0:f4:67:13:f0:c1:59:15:53:55:79:56:79:c0:6e:
37:b5:55:c5:a2:76:6a:8c:53:4d:9e:e9:21:f4:4a:
71:ab:30:a6:23:2f:4d:39:b6:1b:ef:1e:11:ec:ae:
04:78:68:7c:c3:d2:8c:c1:9f:9b:71:b9:8d:d6:d7:
f9:48:5a:96:44:e3:bb:f9:ba:e7:73:f4:74:88:bc:
fe:5a:06:f4:5e:a2:e5:f3:af:92:c1:6e:7a:0e:2e:
cc:e9:b3:ce:90:85:4f:c6:2f:77:88:e9:69:87:90:
96:a4:8d:4a:34:be:ba:f1:50:1d:75:fd:cb:57:b7:
f8:f0:80:e8:b6:1c:66:5f:dd:cd:f8:95:66:97:e4:
f4:66:13:7f:62:ac:22:48:8a:f3:aa:9d:36:30:1c:
93:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DC:49:5C:3B:54:4E:24:FF:46:D5:B5:19:42:58:07:94:DB:93:C2
X509v3 Authority Key Identifier:
keyid:D1:C1:7D:17:07:72:FA:B1:E6:03:33:A6:39:A3:0F:6F:FA:98:DB:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/qNxJXDtUTiT_RtW1GUJYB5Tbk8I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/0cF9Fwdy-rHmAzOmOaMPb_qY2_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.200.0/22
Signature Algorithm: sha256WithRSAEncryption
97:d1:84:6c:75:7d:9d:91:ff:67:1f:a7:cd:c6:31:15:79:e6:
44:ff:d9:4d:be:de:54:1b:04:1f:b3:de:95:39:26:b6:14:44:
5d:76:bb:84:67:9f:f9:e0:44:9c:4c:bd:d4:f0:6b:57:2f:28:
67:8d:28:e1:0e:19:38:06:b0:17:f0:9d:d8:e9:dd:a7:09:3e:
24:57:63:9e:34:79:2d:20:05:87:7d:da:7f:90:f7:89:d8:55:
84:f2:4a:43:ac:4d:93:d7:69:03:75:12:b6:13:92:c8:83:6c:
50:41:4d:bf:e7:55:bd:f9:2c:a4:3e:47:5f:9a:8b:d6:32:99:
93:b1:4e:99:88:2d:c8:5e:7f:76:e4:a2:a8:f8:de:09:f2:8a:
1b:c7:53:10:d4:9a:1f:cd:b8:79:56:ca:e1:e5:b9:e2:21:08:
72:2b:2c:9d:03:72:7d:30:3d:0e:59:64:f3:c6:f4:34:71:a6:
44:78:82:58:c3:7e:92:80:8c:f3:a0:56:c1:de:d8:df:90:81:
c4:29:7f:30:71:78:cf:47:1b:86:08:28:9d:7a:ff:cc:4c:fc:
e4:5d:39:0e:ce:49:4e:56:46:36:a0:85:41:19:1e:67:c1:4d:
24:c4:a5:c6:5f:45:53:8f:40:e9:b8:52:27:fe:4b:35:19:28:
0c:51:67:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:05:37 2026 by rpki-client