Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/03p-Qz6XRyJNNeVn4ckBquqSilU.roa
File: 03p-Qz6XRyJNNeVn4ckBquqSilU.roa (raw, json)
Hash identifier: ysNzZw8fmnL30nJOwCbMlcySw0Zqlls7bKqqA6kBPb4=
Subject key identifier: D3:7A:7E:43:3E:97:47:22:4D:35:E5:67:E1:C9:01:AA:EA:92:8A:55
Certificate issuer: /CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Certificate serial: 019F42F7CC56FA7B08CBA40915A40A58D4EB
Authority key identifier: EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/03p-Qz6XRyJNNeVn4ckBquqSilU.roa
Signing time: Wed 08 Jul 2026 18:22:43 +0000
ROA not before: Wed 08 Jul 2026 18:22:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61400
IP address blocks: 146.19.142.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:42:f7:cc:56:fa:7b:08:cb:a4:09:15:a4:0a:58:d4:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb39720bbf4506110f903d35ed1249bd491ea8bb
Validity
Not Before: Jul 8 18:22:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d37a7e433e9747224d35e567e1c901aaea928a55
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:12:49:6e:fb:fc:d7:5e:9b:69:69:1f:ff:
12:61:4e:25:a8:be:cf:4a:c8:a3:f9:a7:3f:08:19:
13:c5:b2:14:0e:c5:ba:3b:54:b9:a8:86:e2:e3:e2:
fb:db:26:ed:98:c6:0c:74:16:1c:55:2c:16:03:4d:
11:22:6e:09:2a:9f:bb:f8:b7:94:10:39:73:6a:60:
6d:76:4f:55:b5:d5:ee:eb:24:43:33:7f:91:e1:87:
6a:0a:5d:ab:6b:04:f5:a0:eb:44:42:72:ed:52:cf:
3f:a9:d6:6f:da:ff:05:44:c2:82:06:e0:ff:1b:e2:
72:df:4f:5c:d3:90:bf:e1:8a:af:7c:c8:7e:ee:f8:
ad:e1:10:bd:37:78:00:7e:cb:89:39:03:00:6a:72:
67:78:77:c5:43:7e:0e:7c:e4:21:3e:c5:ed:4d:7e:
1c:c5:64:dd:6b:48:2b:1e:93:90:78:55:3a:d5:73:
78:cb:f9:22:6b:18:2f:7c:eb:18:d6:a9:9e:a0:80:
6b:3c:24:b6:b5:06:fa:8b:96:f1:39:5e:b9:8a:7f:
45:11:40:f9:0e:b3:2b:27:1f:17:d2:fb:6b:7f:6a:
9f:9c:02:7a:cd:b4:4e:82:08:e8:ca:09:f6:6a:6d:
d9:dd:1c:c4:cd:8f:4f:0b:c8:40:92:f4:4f:86:39:
de:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:7A:7E:43:3E:97:47:22:4D:35:E5:67:E1:C9:01:AA:EA:92:8A:55
X509v3 Authority Key Identifier:
keyid:EB:39:72:0B:BF:45:06:11:0F:90:3D:35:ED:12:49:BD:49:1E:A8:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zlyC79FBhEPkD017RJJvUkeqLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/03p-Qz6XRyJNNeVn4ckBquqSilU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4afee6-d2d9-4e96-8f23-b887e322229e/1/6zlyC79FBhEPkD017RJJvUkeqLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.19.142.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:39:c7:e2:e2:89:44:16:d1:4a:25:9b:24:fa:e6:4e:9b:59:
ce:ab:ea:1d:36:a6:6c:1d:db:01:02:1d:59:7d:b9:3e:4d:c2:
f6:6f:ee:0d:a7:6d:fb:57:c2:d8:fc:e7:9c:c7:a2:a5:b9:8e:
7b:c9:7c:0a:de:af:e0:6f:37:2a:6b:0d:5c:44:f9:5f:98:98:
cc:85:17:c3:a9:04:f7:0c:27:68:42:15:c7:07:4b:55:92:74:
53:48:c4:26:05:2c:0b:24:80:89:0e:d5:b5:3d:75:b4:29:94:
d7:3a:9e:28:7f:e9:60:5e:bb:6d:80:0b:b4:db:e2:00:3d:29:
a0:62:7b:2a:47:8c:4e:76:7b:71:09:4f:02:a5:e2:a1:e0:24:
3e:1a:9e:fe:19:81:16:71:90:48:27:b6:65:9c:07:d8:b9:96:
f6:ce:ed:4f:83:64:89:3e:1a:58:ea:34:6c:75:ec:4f:f1:ac:
75:af:30:54:f9:cd:ab:f0:c8:8e:6b:14:a9:d5:00:1a:36:87:
c0:20:87:9f:0b:6b:51:16:8c:8f:de:4e:72:5e:c7:68:fa:68:
1f:ba:7e:1e:15:d0:f6:66:65:8f:04:bf:96:e4:78:fe:80:3c:
1f:53:1c:2a:6d:0f:c8:28:af:2c:28:b2:18:2e:9e:01:bd:91:
e2:c6:04:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 02:34:06 2026 by rpki-client