Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/Q4Sy3gCd7dMsdf3U673WYPrB4qA.roa
File: Q4Sy3gCd7dMsdf3U673WYPrB4qA.roa (raw, json)
Hash identifier: f+vgH/8lCAyoaopM+ARWem0PqsHCRHeZDcYhmCyBUow=
Subject key identifier: 43:84:B2:DE:00:9D:ED:D3:2C:75:FD:D4:EB:BD:D6:60:FA:C1:E2:A0
Certificate issuer: /CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Certificate serial: 019D0D524916282DF1511DC00FF95854BAD4
Authority key identifier: 59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/Q4Sy3gCd7dMsdf3U673WYPrB4qA.roa
Signing time: Fri 20 Mar 2026 22:16:29 +0000
ROA not before: Fri 20 Mar 2026 22:16:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207465
IP address blocks: 194.147.139.0/24 maxlen: 24
2a07:e480:1::/48 maxlen: 48
2a07:e480:2::/48 maxlen: 48
2a07:e480:aaa::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0d:52:49:16:28:2d:f1:51:1d:c0:0f:f9:58:54:ba:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=59d36a21e9b368d748bab8c77bebdde2c227c6c3
Validity
Not Before: Mar 20 22:16:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4384b2de009dedd32c75fdd4ebbdd660fac1e2a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:c4:01:c6:4e:7d:7d:8a:d7:3e:24:2a:43:4a:
da:52:d0:fa:dc:35:8c:3a:d2:c2:0a:53:c3:f4:24:
00:db:70:54:c1:0f:37:fa:92:6f:f8:b4:2e:aa:2d:
86:3a:1b:ab:fd:cd:cb:a9:33:69:f3:4a:91:f6:f9:
e3:5c:4e:25:a9:46:51:80:dd:2c:fe:a2:6b:d8:0c:
4b:3d:9b:76:5c:bb:f1:45:f1:0d:42:23:6d:8d:fa:
cf:7d:d2:8a:2c:3f:17:6e:ff:00:db:a1:ce:ec:a5:
cc:33:39:d8:8e:6a:97:e9:00:ae:68:4a:af:b7:c6:
eb:fb:23:40:7f:6f:9f:28:81:56:bc:84:33:78:3d:
fa:91:c1:8c:92:10:e6:6f:25:72:67:43:6f:5f:51:
c2:a1:d6:a2:8a:54:a4:85:8b:8d:81:e9:78:55:d9:
0b:bb:3e:a0:41:8b:16:62:a2:72:1b:f0:ca:f0:f7:
7f:01:92:8b:05:c2:53:72:98:fc:77:74:40:af:33:
1a:f5:98:c1:e6:e9:3a:4d:fa:bc:75:ce:85:7a:0f:
fa:ba:55:ed:62:cf:bd:eb:e9:b8:84:08:ef:1c:e1:
89:4d:d6:5c:6e:f8:97:58:47:d1:ca:f4:bc:12:b1:
3e:8d:d1:31:50:c0:00:c5:e0:08:b9:bd:2f:ef:2a:
c3:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:84:B2:DE:00:9D:ED:D3:2C:75:FD:D4:EB:BD:D6:60:FA:C1:E2:A0
X509v3 Authority Key Identifier:
keyid:59:D3:6A:21:E9:B3:68:D7:48:BA:B8:C7:7B:EB:DD:E2:C2:27:C6:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WdNqIemzaNdIurjHe-vd4sInxsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/Q4Sy3gCd7dMsdf3U673WYPrB4qA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/7a7dc1-e168-4d47-b46d-40ea80892f03/1/WdNqIemzaNdIurjHe-vd4sInxsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.147.139.0/24
IPv6:
2a07:e480:1::-2a07:e480:2:ffff:ffff:ffff:ffff:ffff
2a07:e480:aaa::/48
Signature Algorithm: sha256WithRSAEncryption
32:49:f7:4d:c7:da:62:fb:cb:1e:ee:2c:24:ba:51:f3:36:50:
e8:6d:c9:a0:79:ee:9d:b8:81:7c:5e:bb:04:fd:d5:a8:68:35:
41:15:d3:36:89:43:07:9c:4c:e1:b3:ab:51:b9:b6:5c:5a:06:
9c:12:b2:b1:96:aa:95:f2:d5:5d:58:00:e3:20:82:57:75:b2:
aa:bd:b5:96:9c:3c:52:9e:a7:42:4a:79:93:0a:57:f9:1f:01:
5a:07:d5:63:a7:27:1d:7f:56:4a:fe:f2:4f:11:d8:3a:b0:4c:
65:fb:07:0a:5d:50:1d:f8:75:ad:4f:52:e4:ea:4f:5f:da:e6:
44:c6:4f:71:07:d0:fe:38:d5:20:bb:5b:5d:85:4f:c2:08:fa:
d2:40:b3:7c:ce:f9:2e:34:d4:e8:ab:fa:c8:d4:56:90:3d:fd:
a8:2a:97:b0:d5:06:b9:58:43:dd:80:1f:10:ac:6a:dd:ef:22:
4d:a8:77:69:75:32:bd:2d:a9:8e:ae:09:8b:9d:40:f7:82:9e:
71:60:c1:f3:43:f9:97:82:88:df:5c:05:15:ce:c4:f5:ec:55:
74:8a:1a:02:98:62:ba:34:f0:bf:86:0f:60:0e:54:d9:45:10:
ea:99:4d:9e:b9:09:e1:20:fe:6f:2c:46:23:1a:6b:34:78:c8:
ee:23:f4:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:59:11 2026 by rpki-client