Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/c-QDkOwRsaqWaCLR67UW_lU7-L0.roa
File: c-QDkOwRsaqWaCLR67UW_lU7-L0.roa (raw, json)
Hash identifier: AE6Uaz5NJLGOrk5M1q3pxLLZKI8/2jUOSqya5+asWc0=
Subject key identifier: 73:E4:03:90:EC:11:B1:AA:96:68:22:D1:EB:B5:16:FE:55:3B:F8:BD
Certificate issuer: /CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Certificate serial: 019ED08533108AC5D1D40C923194B99A6572
Authority key identifier: 08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/c-QDkOwRsaqWaCLR67UW_lU7-L0.roa
Signing time: Tue 16 Jun 2026 13:00:50 +0000
ROA not before: Tue 16 Jun 2026 13:00:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211421
IP address blocks: 80.249.112.0/23 maxlen: 23
152.89.44.0/22 maxlen: 24
213.109.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.mft
rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 19:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d0:85:33:10:8a:c5:d1:d4:0c:92:31:94:b9:9a:65:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=081b7a22e51cfb9cf84205e4449998ad55d8f065
Validity
Not Before: Jun 16 13:00:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=73e40390ec11b1aa966822d1ebb516fe553bf8bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:0b:bb:17:57:37:59:b6:e4:00:6f:5f:54:5c:
14:ec:df:17:f0:00:73:be:48:6b:b1:6e:8a:e2:a0:
64:4e:df:2f:a2:16:1f:c0:72:58:94:67:4a:4c:fd:
3c:40:7c:2c:60:e8:59:6c:00:8d:e2:21:67:5e:56:
35:f9:34:9c:93:3c:6b:b4:05:72:ab:c5:fd:da:98:
38:62:95:91:8c:2b:64:fe:3d:07:38:3a:13:06:cf:
81:b0:11:6c:47:6d:01:aa:dc:b8:e5:25:07:49:41:
87:e6:32:00:43:90:fb:5f:7d:60:db:44:38:7d:56:
1a:63:96:0a:93:7d:7d:42:70:45:9a:6c:6e:1a:a4:
bf:5b:00:1c:cf:71:b3:28:1d:6b:e7:d6:d9:d9:cf:
f1:59:99:43:be:60:c0:6a:e1:a8:bd:47:05:79:c6:
a2:30:69:f8:bf:59:d4:d2:21:ac:ad:8f:3a:41:a4:
da:12:a2:e4:59:50:cd:ee:05:96:49:9d:47:4c:15:
cc:78:da:4f:b9:4f:21:41:ff:8f:42:c0:60:4a:58:
83:2d:fa:74:a9:6c:1e:e6:05:51:1a:66:e4:09:d4:
58:78:60:02:ed:63:80:60:56:b5:a0:5b:28:3a:62:
11:a1:9d:59:cc:4e:4e:79:0c:18:80:2c:ed:9f:c1:
d5:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:E4:03:90:EC:11:B1:AA:96:68:22:D1:EB:B5:16:FE:55:3B:F8:BD
X509v3 Authority Key Identifier:
keyid:08:1B:7A:22:E5:1C:FB:9C:F8:42:05:E4:44:99:98:AD:55:D8:F0:65
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CBt6IuUc-5z4QgXkRJmYrVXY8GU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/c-QDkOwRsaqWaCLR67UW_lU7-L0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c515c9-df08-426c-80e6-0367268ff871/1/CBt6IuUc-5z4QgXkRJmYrVXY8GU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.249.112.0/23
152.89.44.0/22
213.109.199.0/24
Signature Algorithm: sha256WithRSAEncryption
75:a4:d3:ee:85:bd:eb:5b:a3:a6:f6:2b:ea:ab:b5:d2:13:63:
7c:0d:68:6e:b8:68:15:59:7f:e3:ad:73:c2:f1:da:ca:cc:9d:
49:00:05:fe:3a:18:9e:37:dd:57:f8:80:4f:ff:63:5a:21:95:
6c:65:96:bf:bf:7c:fa:82:a0:1f:ab:59:a5:85:34:e5:4d:92:
98:c9:d0:63:e5:62:2e:e9:1b:54:ea:c4:7e:51:3a:9b:7d:4c:
24:32:30:ba:09:7d:b0:b7:f7:aa:c9:e8:33:cf:85:1a:7f:8b:
f5:da:37:9f:88:b0:88:bb:4c:6b:c3:a8:47:08:2e:c5:65:cb:
c5:27:96:9b:50:83:a0:ff:85:ba:98:78:eb:eb:98:96:ca:b5:
8f:78:75:4f:82:ae:2a:1f:c0:7e:66:d2:23:4a:90:f9:53:b1:
49:2c:77:94:3d:94:8c:89:fd:33:61:c9:48:c2:81:df:50:98:
15:e9:d9:87:3d:40:09:14:c7:51:62:a9:13:a1:d5:f1:3c:7f:
ff:9c:ea:84:cc:ca:8f:44:25:8c:4e:82:67:28:a3:45:89:51:
f1:82:e6:4f:62:53:8a:6a:aa:f7:7b:e1:03:1d:d2:68:6c:61:
8a:2b:64:0e:c0:7b:37:cd:4c:60:42:96:85:53:4d:51:1c:ac:
e0:e9:cb:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:27:38 2026 by rpki-client