Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/pQG7xs47QDWXz1fB29umQErevhE.roa
File: pQG7xs47QDWXz1fB29umQErevhE.roa (raw, json)
Hash identifier: YQn0GgeL+9mDh4EZTTSLpL9PtFZrlsb8YoTmjdlwtnU=
Subject key identifier: A5:01:BB:C6:CE:3B:40:35:97:CF:57:C1:DB:DB:A6:40:4A:DE:BE:11
Certificate issuer: /CN=7ec5f2384e21f64361913391ce1a92b372e80faf
Certificate serial: 019F236874797B731EB860232A7880155ECE
Authority key identifier: 7E:C5:F2:38:4E:21:F6:43:61:91:33:91:CE:1A:92:B3:72:E8:0F:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fsXyOE4h9kNhkTORzhqSs3LoD68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/pQG7xs47QDWXz1fB29umQErevhE.roa
Signing time: Thu 02 Jul 2026 15:17:55 +0000
ROA not before: Thu 02 Jul 2026 15:17:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64428
IP address blocks: 185.165.40.0/24 maxlen: 24
185.165.41.0/24 maxlen: 24
185.165.42.0/24 maxlen: 24
185.165.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.mft
rsync://rpki.ripe.net/repository/DEFAULT/fsXyOE4h9kNhkTORzhqSs3LoD68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:74:79:7b:73:1e:b8:60:23:2a:78:80:15:5e:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ec5f2384e21f64361913391ce1a92b372e80faf
Validity
Not Before: Jul 2 15:17:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a501bbc6ce3b403597cf57c1dbdba6404adebe11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:da:9d:8b:8c:92:56:00:c7:a6:5e:5c:9d:9a:
4c:ed:05:ae:a6:32:c7:35:b5:e3:d3:8a:81:9a:d5:
a0:e6:e7:f9:80:22:89:28:2d:f8:2f:3d:9e:e3:7e:
c8:f3:62:2d:82:df:7b:3f:80:26:1b:6f:61:6f:a1:
14:34:f4:07:66:e0:2d:4f:27:d2:73:00:9d:a1:a9:
15:82:06:ac:c6:c0:96:b9:0a:6f:62:6f:e8:60:a8:
c9:36:52:a6:61:4a:a4:76:d8:70:41:ae:76:51:4f:
7f:89:81:8a:c6:49:37:72:af:1c:86:52:8a:ce:ed:
01:f7:25:28:f5:b1:da:4c:86:57:37:50:2d:63:6b:
15:4d:dd:a0:4a:9f:e7:72:0b:42:95:9d:c0:0b:ed:
c0:a8:09:4b:12:dd:0c:7a:10:f7:75:d4:36:9b:9b:
af:b0:5a:42:d6:2f:28:da:90:11:e1:6e:7e:e8:63:
64:b9:4e:b0:c2:b9:f9:da:97:06:93:b8:05:3d:c9:
84:e7:74:61:47:82:70:35:41:ad:5d:e9:d2:53:c3:
97:1e:e3:9b:df:e0:3a:af:70:31:bf:3a:ef:d6:34:
4b:4f:c7:95:d0:66:c4:89:2e:d2:e7:24:7d:47:66:
35:db:dd:77:b1:be:8d:92:f5:61:d3:c3:d1:c5:ba:
b4:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:01:BB:C6:CE:3B:40:35:97:CF:57:C1:DB:DB:A6:40:4A:DE:BE:11
X509v3 Authority Key Identifier:
keyid:7E:C5:F2:38:4E:21:F6:43:61:91:33:91:CE:1A:92:B3:72:E8:0F:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fsXyOE4h9kNhkTORzhqSs3LoD68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/pQG7xs47QDWXz1fB29umQErevhE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8b7fe9-5df2-473e-8018-b26341d38c3f/1/fsXyOE4h9kNhkTORzhqSs3LoD68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.40.0/22
Signature Algorithm: sha256WithRSAEncryption
2f:c2:e5:5e:ea:70:1a:51:fd:db:ea:a5:10:b4:c1:34:6a:74:
5f:af:0e:e7:35:22:8a:5f:46:f5:03:55:27:0d:0b:75:07:d9:
03:d7:43:e5:e0:58:f9:6c:01:51:21:6f:bb:0e:f4:ea:c3:82:
23:7c:1b:9c:19:f4:8c:54:0a:c3:bf:6e:91:49:c7:5f:b0:a6:
9a:5b:0a:2a:bb:14:a1:9e:fa:e3:3b:74:8f:8e:8b:7b:fd:0e:
63:d6:c9:66:b4:b4:1d:06:2f:b1:b2:21:cb:b0:c8:e5:fb:9f:
e6:f2:54:a5:a6:58:1d:55:88:db:65:c3:a3:69:6c:89:3a:25:
43:f0:60:67:23:29:a5:85:88:43:2c:e7:72:e2:f3:20:fd:a4:
64:3c:b3:c7:f7:83:5f:5d:3a:54:6b:11:f8:e5:4d:00:16:1f:
d8:34:77:cf:27:30:5d:e8:03:98:eb:c8:a3:7e:75:5b:26:3c:
75:2a:59:41:31:19:30:8d:16:24:d2:0e:b8:39:7b:c0:f8:e6:
8b:06:ef:9c:90:0f:ea:43:57:6c:ab:2f:03:32:db:1c:e1:3a:
02:85:7d:ff:df:d2:4f:2a:af:7a:47:a9:08:f3:3b:1a:8e:34:
22:5a:c4:4b:37:31:a6:60:e2:6e:1d:b3:d1:a4:39:c6:38:33:
11:83:c1:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 21:50:43 2026 by rpki-client