Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/qt1X8cd4EEdSt0Ko4GKZetgm0U8.roa
File: qt1X8cd4EEdSt0Ko4GKZetgm0U8.roa (raw, json)
Hash identifier: QOME3Vz+1BFTr6N1pPVdoLgRzF0h3H4cA0/YeWP3aH0=
Subject key identifier: AA:DD:57:F1:C7:78:10:47:52:B7:42:A8:E0:62:99:7A:D8:26:D1:4F
Certificate issuer: /CN=de02929f5ac8c349fea985529c1714e7cc95cfcd
Certificate serial: 019F2368E465256C6BC502E4A59DBB67DB0A
Authority key identifier: DE:02:92:9F:5A:C8:C3:49:FE:A9:85:52:9C:17:14:E7:CC:95:CF:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/qt1X8cd4EEdSt0Ko4GKZetgm0U8.roa
Signing time: Thu 02 Jul 2026 15:18:24 +0000
ROA not before: Thu 02 Jul 2026 15:18:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50629
IP address blocks: 185.223.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.mft
rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:e4:65:25:6c:6b:c5:02:e4:a5:9d:bb:67:db:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de02929f5ac8c349fea985529c1714e7cc95cfcd
Validity
Not Before: Jul 2 15:18:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aadd57f1c778104752b742a8e062997ad826d14f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:4a:84:b7:0c:f5:1c:9f:45:3d:8a:9f:6e:fc:
7e:19:20:3e:ff:4a:d8:55:3b:bc:ad:28:dd:92:9c:
ff:0b:58:95:70:f1:bd:fd:da:41:31:6d:17:c1:c1:
fd:68:11:91:e9:c5:49:0d:2b:64:16:4c:5c:ad:68:
69:9d:77:30:c9:dd:10:70:e9:85:5d:db:b3:cf:09:
1e:86:44:45:8f:4a:d5:7e:bf:6f:d5:42:0e:20:51:
0f:3a:6a:87:ea:2c:a3:dd:9b:2a:66:7b:aa:c4:ad:
ec:bb:41:99:9f:4a:e3:04:b6:ac:15:5d:4c:bc:4d:
4a:50:72:88:af:6f:1c:2e:67:ed:d2:d2:f4:e9:f7:
25:d2:a1:a7:b6:30:3f:a0:fb:d4:98:be:68:c7:61:
b9:06:7f:89:5e:c5:77:fb:3d:06:d2:fc:61:75:32:
8f:6b:d3:db:87:55:45:68:29:09:6d:36:8d:0c:36:
b7:71:5a:9e:92:e9:9e:48:63:6f:1b:74:e4:9f:d8:
6d:5f:c9:aa:95:c4:36:f3:09:62:3f:ed:7b:f2:41:
00:63:fc:17:84:46:6b:f3:97:56:44:ed:2b:c7:c2:
42:ea:31:d5:96:b8:8a:45:24:65:4d:76:4e:4c:e1:
38:fc:d0:b0:4f:74:da:51:be:43:e5:e0:6b:0e:cb:
fd:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DD:57:F1:C7:78:10:47:52:B7:42:A8:E0:62:99:7A:D8:26:D1:4F
X509v3 Authority Key Identifier:
keyid:DE:02:92:9F:5A:C8:C3:49:FE:A9:85:52:9C:17:14:E7:CC:95:CF:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3gKSn1rIw0n-qYVSnBcU58yVz80.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/qt1X8cd4EEdSt0Ko4GKZetgm0U8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b34642-c7ec-4d47-9d6f-271a155eeb92/1/3gKSn1rIw0n-qYVSnBcU58yVz80.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.223.144.0/22
Signature Algorithm: sha256WithRSAEncryption
79:aa:bd:6f:18:1c:ae:2d:f7:07:b7:2d:24:fc:0e:dc:24:24:
76:55:c4:4d:cd:22:fc:e8:0f:88:36:3d:54:55:e2:05:72:23:
d5:80:0f:c3:39:cc:d5:9d:03:d8:61:8d:53:45:42:0b:bd:4c:
12:31:15:78:bb:f1:01:93:f5:21:98:49:14:07:4e:67:28:40:
f6:3a:34:d2:a1:27:b1:7d:12:73:56:41:2c:e4:ab:01:39:b2:
74:1e:0d:ac:e6:b3:9b:aa:d7:e7:65:e7:76:86:48:25:80:11:
60:a9:0e:93:c0:63:7c:6f:22:c0:34:98:18:4d:0e:46:bb:33:
f8:b9:f0:b5:93:c5:61:a9:81:88:86:8e:10:86:cd:8e:17:27:
87:9e:31:1c:dd:10:82:e3:02:35:ff:e2:3c:1d:b1:05:ce:ad:
c6:74:77:f1:d7:14:9b:73:17:12:bf:19:dc:af:ee:5f:03:6b:
6e:cf:78:ed:3e:fa:c9:e2:ab:6a:48:f0:f5:a0:a3:45:f7:30:
6a:b7:cb:12:16:0c:a5:94:97:38:73:df:67:41:a8:e2:68:76:
91:65:7b:4b:85:29:2e:99:8d:d1:13:81:f2:6f:23:41:27:3b:
a2:af:8f:65:d4:8b:75:3d:83:94:b6:11:75:4a:2c:a8:d0:8b:
77:46:c4:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:44 2026 by rpki-client