Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/2QGMBl3UaUnanjS2q3I4CT5kcZg.roa
File: 2QGMBl3UaUnanjS2q3I4CT5kcZg.roa (raw, json)
Hash identifier: gT+03r/Akhqe4ZoJErcZDzYA56UUOiJnaMjRSrb0AlM=
Subject key identifier: D9:01:8C:06:5D:D4:69:49:DA:9E:34:B6:AB:72:38:09:3E:64:71:98
Certificate issuer: /CN=e35607a494200ff1f3d599e25fc013f38640cd46
Certificate serial: 019EF9505E917C8E21746A1E00313A81B875
Authority key identifier: E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/2QGMBl3UaUnanjS2q3I4CT5kcZg.roa
Signing time: Wed 24 Jun 2026 11:07:34 +0000
ROA not before: Wed 24 Jun 2026 11:07:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215261
IP address blocks: 45.146.6.0/24 maxlen: 24
94.156.37.0/24 maxlen: 24
2001:67c:fac::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 17:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:50:5e:91:7c:8e:21:74:6a:1e:00:31:3a:81:b8:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35607a494200ff1f3d599e25fc013f38640cd46
Validity
Not Before: Jun 24 11:07:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d9018c065dd46949da9e34b6ab7238093e647198
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:fe:7f:a8:25:ae:00:1f:fe:d9:a0:11:44:d6:
e1:0f:7f:b5:4f:78:6c:4b:35:90:38:52:4a:d0:f3:
12:67:26:75:f5:41:40:d7:7b:e7:fb:2d:29:5a:77:
82:c8:0d:c1:0d:81:2d:15:2e:06:07:99:f4:f8:35:
0a:c1:21:4c:0c:84:77:d1:ad:05:a0:11:78:c7:80:
03:a5:1b:f4:8b:04:b9:8c:b0:ac:88:cd:a9:8e:8f:
ae:86:90:ef:47:14:9a:21:74:eb:06:23:ab:3e:71:
3b:33:80:5b:11:d1:23:04:af:5b:21:57:48:42:e9:
14:f6:61:44:8f:16:71:d6:68:82:9b:c0:11:f0:c4:
06:6b:3d:4f:ef:c9:70:2e:ce:29:62:d0:9f:40:34:
ee:39:32:80:78:b6:05:f9:4d:ba:4b:41:e1:f5:45:
bb:b7:c5:da:ba:8b:62:73:03:60:0e:f7:3e:00:31:
74:e5:f8:20:01:40:80:66:60:7f:c1:b9:bb:4d:c5:
d8:16:fe:99:d1:df:01:25:8e:2c:ae:24:87:30:8a:
d9:4a:b9:95:cb:d7:27:d8:ad:6e:05:60:17:17:bc:
9e:7b:a5:17:cc:0a:26:1f:5d:2d:21:3c:d6:b4:20:
cb:1f:b6:bb:c1:2e:9b:f6:f5:e4:53:66:b3:07:14:
a9:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:01:8C:06:5D:D4:69:49:DA:9E:34:B6:AB:72:38:09:3E:64:71:98
X509v3 Authority Key Identifier:
keyid:E3:56:07:A4:94:20:0F:F1:F3:D5:99:E2:5F:C0:13:F3:86:40:CD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41YHpJQgD_Hz1ZniX8AT84ZAzUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/2QGMBl3UaUnanjS2q3I4CT5kcZg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/8d6759-506f-4f0a-bc36-5047cb327d9e/1/41YHpJQgD_Hz1ZniX8AT84ZAzUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.146.6.0/24
94.156.37.0/24
IPv6:
2001:67c:fac::/48
Signature Algorithm: sha256WithRSAEncryption
7d:de:f7:14:37:23:fb:80:af:2d:fe:15:0c:05:c7:9e:e4:d0:
23:8a:7a:5c:fe:f9:f4:95:a1:86:19:af:55:24:91:f8:30:14:
0e:4e:0e:2c:33:a8:5a:4e:de:90:2a:0e:a2:f3:1c:ab:cd:b5:
7f:0e:41:96:8f:7a:9b:be:01:e8:c7:0f:6e:c4:df:2b:36:6a:
24:05:2a:61:d3:e6:6d:31:45:b0:91:ec:f9:cd:69:97:44:74:
f8:78:1a:d5:05:bc:81:cb:70:3d:42:95:21:1b:01:52:e7:12:
49:ed:72:a9:56:c0:2a:88:92:f1:55:fc:e1:2d:39:46:97:c7:
55:72:77:21:c7:fb:a5:2a:86:23:86:be:fc:50:f4:10:1e:d5:
ed:3f:8c:69:33:33:42:8d:40:58:e3:51:e2:35:d6:e7:9d:75:
3b:34:28:0c:6a:be:5b:5f:b6:f0:f3:59:95:75:12:4e:0c:5f:
97:26:8d:26:95:1b:11:60:27:9f:3e:00:5b:12:88:55:03:fe:
66:93:77:45:fe:0b:12:8d:2e:df:31:dd:ef:38:47:af:a9:50:
4d:41:1a:61:43:51:2f:57:bc:e1:a7:b7:d0:75:4c:ad:18:f4:
96:27:d9:39:3f:8e:b6:2b:55:31:64:cf:10:ec:96:d9:b5:7e:
c5:c5:a0:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:15 2026 by rpki-client