Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qiGEtHR-OZvI2oeuorcjI6BhdaI.roa
File: qiGEtHR-OZvI2oeuorcjI6BhdaI.roa (raw, json)
Hash identifier: ME9nmORTjTK7cycE5CtjDm3qTqSJ9rsE8RSCjaBaNp0=
Subject key identifier: AA:21:84:B4:74:7E:39:9B:C8:DA:87:AE:A2:B7:23:23:A0:61:75:A2
Certificate issuer: /CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Certificate serial: 019F32DBA00C6C399BC2F218A63D56D53EBA
Authority key identifier: A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qiGEtHR-OZvI2oeuorcjI6BhdaI.roa
Signing time: Sun 05 Jul 2026 15:18:01 +0000
ROA not before: Sun 05 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215004
IP address blocks: 176.118.177.0/24 maxlen: 24
2a14:3240::/29 maxlen: 48
2a14:3240:4624::/48 maxlen: 48
2a14:3240:71da::/48 maxlen: 48
2a14:3247:feed::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:32:db:a0:0c:6c:39:9b:c2:f2:18:a6:3d:56:d5:3e:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a81297b1d36a42de38e8480bb929b45bc9030c9d
Validity
Not Before: Jul 5 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa2184b4747e399bc8da87aea2b72323a06175a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:74:37:8f:59:2c:64:c9:a0:0c:e5:7c:2f:14:
0e:c6:b7:76:9b:f0:52:4a:1f:7f:e9:c4:a2:bc:cb:
9e:db:43:09:f4:e3:cf:81:08:29:75:d4:18:61:1a:
08:92:ba:0a:99:77:8e:7c:1a:88:58:a4:d3:0c:93:
0e:99:6c:7b:32:eb:e1:3d:27:de:d1:e4:18:59:66:
3e:25:61:05:31:28:24:5e:f4:48:e0:63:d2:8c:56:
d4:8e:d8:37:a7:b8:43:04:88:8e:9f:97:f7:ba:99:
31:c6:23:16:43:5a:39:ac:1c:17:d6:6b:34:6b:a2:
bf:3a:12:8a:58:44:ab:4e:d3:26:49:33:38:8a:ba:
91:bf:2c:29:21:62:c6:96:49:73:1f:b8:b1:5a:ee:
14:b3:ad:8c:f5:0f:41:fa:ec:82:1c:04:52:76:f8:
d0:61:8b:41:d1:4c:77:50:4d:57:16:79:e9:c2:e4:
65:0a:5e:6c:8a:d6:b3:4d:41:c8:69:cc:d0:3a:b6:
f1:e0:b5:7c:3f:80:aa:55:f7:ff:e9:81:de:6c:8e:
eb:17:3a:fc:45:d6:6e:35:d7:06:61:38:36:de:50:
17:8d:41:2b:be:f8:e7:c8:93:c3:d1:6d:52:93:27:
01:cc:83:2a:fb:00:12:36:05:23:a7:09:77:99:39:
92:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:21:84:B4:74:7E:39:9B:C8:DA:87:AE:A2:B7:23:23:A0:61:75:A2
X509v3 Authority Key Identifier:
keyid:A8:12:97:B1:D3:6A:42:DE:38:E8:48:0B:B9:29:B4:5B:C9:03:0C:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qBKXsdNqQt446EgLuSm0W8kDDJ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qiGEtHR-OZvI2oeuorcjI6BhdaI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/720e5f-7f33-4d9d-8cde-22dd0f3928d5/1/qBKXsdNqQt446EgLuSm0W8kDDJ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.118.177.0/24
IPv6:
2a14:3240::/29
Signature Algorithm: sha256WithRSAEncryption
5b:90:62:a4:27:51:6b:f2:06:88:99:c6:06:6f:3b:b9:e3:60:
5f:a6:9a:33:95:34:50:39:36:70:5d:ee:85:ae:a3:15:fa:c8:
6c:29:3f:07:76:45:7c:5b:41:d4:43:35:00:7f:4a:d9:b2:20:
21:a8:65:59:2d:08:43:b6:ac:f3:1b:29:07:44:2f:51:f5:2d:
4f:9e:26:d4:e9:96:5b:32:47:1e:0c:b2:c7:9f:bd:04:7b:d3:
64:88:40:24:78:26:80:25:91:9a:d3:af:05:6f:9f:da:f4:be:
57:c1:94:70:9a:d4:d6:76:a7:ad:d4:06:10:62:3a:fc:ac:03:
f3:39:4a:08:01:c5:6c:24:ca:6a:3f:74:34:d2:d6:c4:0a:cd:
2b:b7:10:e7:1c:5c:8c:1d:50:22:21:1b:66:c4:83:e9:73:99:
03:7b:67:b2:27:cb:e8:f8:eb:6f:11:32:03:df:06:2c:59:8c:
cd:a8:6e:58:b6:8e:15:9a:9b:4d:82:c0:0d:a1:c9:aa:70:d5:
97:24:41:73:a1:eb:ee:f8:5c:e5:10:8e:d3:7c:05:56:8a:0a:
26:cf:5a:f5:b4:a5:14:c8:fa:df:29:bb:57:3c:dc:e3:6e:d5:
f6:87:cb:8c:7f:13:de:13:5f:e3:9b:bf:b9:82:e7:eb:17:04:
a4:ab:fa:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:47:00 2026 by rpki-client