Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/qw9D3bwHD-pnEIm3zYFhAcY1hDE.roa
File: qw9D3bwHD-pnEIm3zYFhAcY1hDE.roa (raw, json)
Hash identifier: wdRWH9AxQCpUQD8h4pLTtws6prvHWse3QWuviHE/f3Q=
Subject key identifier: AB:0F:43:DD:BC:07:0F:EA:67:10:89:B7:CD:81:61:01:C6:35:84:31
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368F65EEE8F0760587E6A6DC82EB521
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/qw9D3bwHD-pnEIm3zYFhAcY1hDE.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47441
IP address blocks: 93.174.72.0/24 maxlen: 24
93.174.73.0/24 maxlen: 24
93.174.74.0/24 maxlen: 24
93.174.75.0/24 maxlen: 24
93.174.76.0/24 maxlen: 24
93.174.77.0/24 maxlen: 24
93.174.78.0/24 maxlen: 24
93.174.79.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f6:5e:ee:8f:07:60:58:7e:6a:6d:c8:2e:b5:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab0f43ddbc070fea671089b7cd816101c6358431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4d:76:5f:87:9c:cc:e5:6b:4e:be:c8:c1:2a:
3f:2f:91:d6:00:71:65:e6:63:ce:a8:50:81:4b:90:
0b:c2:f2:11:f7:05:2c:92:28:d4:9d:85:f7:f1:9f:
6f:a7:18:2d:dc:ce:85:db:4e:f7:f5:16:53:aa:0d:
e4:85:48:49:94:1f:41:63:5d:ed:6c:2f:15:2b:31:
71:99:8f:a9:20:60:2c:8f:8c:b1:c0:92:bf:b4:d5:
0d:45:a9:a2:b1:a6:f7:fb:2e:a3:4b:2a:d4:8a:45:
e7:a9:1d:2f:24:57:45:02:eb:61:e3:57:53:bc:bc:
10:a1:ea:0f:6d:c3:da:e4:99:82:a7:80:e4:34:2a:
f8:cc:f0:e3:f0:99:cc:96:c3:80:8c:d8:52:46:cb:
d8:8f:51:d1:2b:11:29:de:98:40:4f:47:f8:2b:df:
a4:74:b7:69:cc:ed:70:35:45:2a:85:86:9c:ce:5d:
c8:0a:5b:34:71:8a:f9:ae:ef:f8:16:e0:8c:3b:16:
18:88:ed:1e:12:e1:d3:6e:3e:f9:49:9f:10:cf:90:
83:13:b9:5d:da:b7:e1:83:dd:60:a9:b8:75:e6:bd:
f6:31:bb:d0:ec:df:f5:8e:b3:f2:a7:a5:5d:af:d3:
e9:9f:08:b0:f0:bc:e9:0f:45:be:45:45:d7:81:51:
29:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0F:43:DD:BC:07:0F:EA:67:10:89:B7:CD:81:61:01:C6:35:84:31
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/qw9D3bwHD-pnEIm3zYFhAcY1hDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.174.72.0/21
Signature Algorithm: sha256WithRSAEncryption
02:fe:26:72:d3:7d:3c:75:cc:4d:fb:0f:1b:2d:8e:7f:31:ea:
45:08:9e:d6:a9:98:65:1b:e7:dd:62:9c:ad:f6:92:0e:52:29:
05:51:14:3a:33:7e:81:c2:98:df:a9:60:d3:ad:e0:f1:fa:b7:
5d:81:57:e4:52:be:7e:92:5a:00:f8:ef:1c:2c:24:82:56:02:
c9:13:8a:a1:73:e3:5a:02:25:72:5e:18:d8:a5:56:e1:b6:5e:
ea:c8:7f:d8:08:bc:3c:27:e1:0f:ff:79:d1:9f:51:09:09:63:
70:10:35:4e:89:20:a0:06:81:1b:30:14:4c:aa:2d:48:41:9a:
74:bf:ec:b3:94:e2:84:e7:6b:36:87:44:6a:f8:f8:35:df:78:
e0:ed:25:9a:8c:f7:40:e2:37:82:83:79:9a:89:3f:d4:52:78:
23:dc:7d:8a:01:e1:ef:b3:96:29:af:35:a0:4e:37:ea:4f:7e:
58:9f:ab:26:59:86:07:b8:b2:10:1e:4f:9b:3e:53:a8:9f:51:
ba:e4:6b:04:55:0a:9c:09:d7:6a:c9:37:6c:a7:4a:b0:0d:3b:
8a:5c:5d:de:f0:49:99:14:2c:bd:86:e4:61:1f:c4:7d:52:8a:
8e:d2:7f:9a:08:65:bb:13:19:a2:55:b3:cc:35:d4:d8:44:08:
b1:7f:92:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:45:49 2026 by rpki-client