Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/RSqg8kSIO-iIBuQDLyx6Ke95bq0.roa
File: RSqg8kSIO-iIBuQDLyx6Ke95bq0.roa (raw, json)
Hash identifier: UD/aJtDTWAdxMJOiKjeflrLQxEx7eb63MCBCICmPG/w=
Subject key identifier: 45:2A:A0:F2:44:88:3B:E8:88:06:E4:03:2F:2C:7A:29:EF:79:6E:AD
Certificate issuer: /CN=01335442514d5249b5143cfdf821216bb5c52940
Certificate serial: 01A0D49783229D1DB22B9E386FC3AD39E345
Authority key identifier: 01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/RSqg8kSIO-iIBuQDLyx6Ke95bq0.roa
Signing time: Thu 24 Sep 2026 18:04:54 +0000
ROA not before: Thu 24 Sep 2026 18:04:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39134
IP address blocks: 23.105.224.0/19 maxlen: 24
23.111.32.0/19 maxlen: 24
23.111.96.0/19 maxlen: 24
23.111.192.0/19 maxlen: 24
88.212.192.0/18 maxlen: 24
88.212.192.0/20 maxlen: 24
88.212.192.0/24 maxlen: 24
88.212.196.0/24 maxlen: 24
88.212.204.0/24 maxlen: 24
88.212.208.0/22 maxlen: 24
88.212.220.0/22 maxlen: 24
88.212.224.0/22 maxlen: 24
88.212.228.0/22 maxlen: 24
88.212.229.0/24 maxlen: 24
88.212.230.0/23 maxlen: 23
185.206.100.0/22 maxlen: 24
185.206.100.0/24 maxlen: 24
2a02:2100::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 03:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d4:97:83:22:9d:1d:b2:2b:9e:38:6f:c3:ad:39:e3:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01335442514d5249b5143cfdf821216bb5c52940
Validity
Not Before: Sep 24 18:04:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=452aa0f244883be88806e4032f2c7a29ef796ead
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:bb:7f:0c:35:fe:f3:27:01:8d:4e:92:50:90:
7e:7c:5d:99:b6:ab:1c:86:31:17:4f:48:5f:6f:19:
a2:90:42:37:83:d8:c7:b4:c2:65:8d:63:b8:a0:66:
f8:6e:49:30:cb:53:da:44:21:19:68:0c:de:e3:73:
16:36:41:49:d4:f6:fd:86:22:46:28:c5:7e:95:e8:
19:ed:21:f1:54:27:34:95:b7:8e:09:b7:a1:12:5d:
11:d5:7b:65:f1:b1:d2:e6:14:d8:8b:fc:56:cb:35:
1f:93:42:97:19:f2:18:3d:8f:75:7c:41:30:4d:e1:
89:47:08:73:de:bf:d1:95:51:9e:0a:43:d0:e1:e0:
f8:2f:42:65:36:0e:e4:97:fb:fe:61:59:22:e9:a2:
3f:f2:79:59:3c:53:60:f1:26:42:6c:e0:89:01:3c:
a1:6b:4a:eb:67:06:74:4c:6c:88:36:eb:52:53:2c:
1d:39:85:87:12:6a:5f:12:7b:22:60:5d:b4:4a:cf:
41:4f:84:9b:80:07:ce:7d:52:c4:4b:52:7b:ec:fb:
f2:a5:c5:c7:d5:4e:14:52:f4:64:28:34:1c:73:00:
be:5f:ba:cc:b5:83:7c:5d:a0:96:a2:b0:76:15:05:
d6:57:61:77:f2:d9:0b:fa:36:b0:98:23:94:a2:d4:
da:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:2A:A0:F2:44:88:3B:E8:88:06:E4:03:2F:2C:7A:29:EF:79:6E:AD
X509v3 Authority Key Identifier:
keyid:01:33:54:42:51:4D:52:49:B5:14:3C:FD:F8:21:21:6B:B5:C5:29:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ATNUQlFNUkm1FDz9-CEha7XFKUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/RSqg8kSIO-iIBuQDLyx6Ke95bq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/c7a68f-7bf8-4f80-a9a2-815d2c026646/1/ATNUQlFNUkm1FDz9-CEha7XFKUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
23.105.224.0/19
23.111.32.0/19
23.111.96.0/19
23.111.192.0/19
88.212.192.0/18
185.206.100.0/22
IPv6:
2a02:2100::/32
Signature Algorithm: sha256WithRSAEncryption
6b:8e:d4:02:20:54:96:2b:4b:63:cf:83:7c:9b:1c:32:5c:b3:
63:77:f2:45:cc:c0:25:aa:b8:3b:dd:92:db:55:eb:52:51:be:
7e:ae:c4:1d:80:88:72:3f:98:76:95:3f:2b:7d:96:71:82:ae:
69:e1:20:61:03:a8:a9:6e:d9:8f:56:be:79:fd:a2:28:2f:4d:
e5:47:70:43:5a:ab:2c:1f:31:2f:b6:d9:88:13:bf:47:99:9d:
9f:67:92:0d:ca:2c:2b:93:80:60:15:76:dd:ef:36:5f:71:43:
8b:3f:05:b7:b8:73:02:41:38:de:36:98:ae:6e:85:33:ee:38:
7d:91:80:79:cc:4c:bf:2e:14:81:bf:bc:b5:0b:51:a8:46:2d:
df:2c:7a:10:c6:39:93:4a:1d:16:87:44:67:88:26:fb:20:73:
0d:48:c8:12:30:60:d5:8d:d8:06:b2:92:86:e6:00:8c:b4:34:
09:99:0e:06:c0:5c:d9:44:4d:7c:a9:bb:8f:98:ed:86:71:f1:
28:c6:a0:ae:ed:aa:13:58:00:6d:49:f9:f9:75:fe:3c:de:99:
4f:1c:ac:65:2c:cc:58:25:92:bf:fa:95:28:b1:38:ef:f4:ea:
f8:9a:8e:5d:24:00:53:d2:ae:29:0d:8a:ce:71:f0:c7:a8:02:
42:9f:08:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 13:51:16 2026 by rpki-client