Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/q9AZ9P7QUfekPrQysKLIfDnMJbU.roa
File: q9AZ9P7QUfekPrQysKLIfDnMJbU.roa (raw, json)
Hash identifier: LLX9K9xCwxCQlj+HJY24QlDZarm7oVsZ3lkpY8WxkSM=
Subject key identifier: AB:D0:19:F4:FE:D0:51:F7:A4:3E:B4:32:B0:A2:C8:7C:39:CC:25:B5
Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Certificate serial: 019ED1227369FFBE0B83C63085F03A3DF9C4
Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/q9AZ9P7QUfekPrQysKLIfDnMJbU.roa
Signing time: Tue 16 Jun 2026 15:52:36 +0000
ROA not before: Tue 16 Jun 2026 15:52:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153771
IP address blocks: 152.175.224.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d1:22:73:69:ff:be:0b:83:c6:30:85:f0:3a:3d:f9:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Validity
Not Before: Jun 16 15:52:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abd019f4fed051f7a43eb432b0a2c87c39cc25b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:b8:6d:cf:e7:05:e7:c6:d9:df:45:a5:90:30:
2a:12:62:9c:a1:0d:f5:68:65:ef:33:b8:7f:be:1f:
11:4e:74:64:ef:91:dd:78:0f:33:a3:58:f7:f6:cb:
1d:89:80:85:4d:fa:34:63:e5:80:6e:95:5a:79:cd:
d9:e1:bf:95:7b:b0:5f:19:d3:57:f0:cb:34:d6:0f:
5a:92:3d:e3:fd:96:3e:be:d8:1c:d8:6f:24:f1:79:
ac:d4:2c:11:4d:ba:a0:a2:58:98:c1:f1:0e:a7:60:
17:3f:66:99:7a:c4:99:56:9a:f5:a4:7b:17:b9:1e:
eb:85:7c:23:c9:29:9d:62:85:78:60:5e:1f:4b:85:
1a:a0:c9:30:27:65:1c:eb:ec:2a:92:ea:6a:c1:7e:
e1:6b:00:55:0f:d0:06:0e:8d:f1:88:29:82:08:07:
e0:e3:b7:da:32:b3:e5:43:ec:5d:62:7b:03:66:0e:
7f:ef:c9:9f:60:e0:6a:e9:85:a2:5d:c8:6e:57:0e:
8b:b6:e5:fb:0e:2e:2f:7a:e3:ae:b3:ef:fc:5f:74:
fd:2f:fa:9f:f0:8e:ac:3b:e9:c4:9c:eb:27:38:c7:
87:d2:db:32:3a:53:9c:21:72:5b:03:58:87:c4:54:
ac:ba:02:fb:3c:bf:7e:90:ee:85:fe:cb:60:8f:50:
78:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D0:19:F4:FE:D0:51:F7:A4:3E:B4:32:B0:A2:C8:7C:39:CC:25:B5
X509v3 Authority Key Identifier:
keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/q9AZ9P7QUfekPrQysKLIfDnMJbU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.175.224.0/19
Signature Algorithm: sha256WithRSAEncryption
59:e1:f3:05:55:bc:58:1e:41:13:44:c3:7a:ce:33:79:89:b2:
d8:f5:a3:41:87:12:4c:09:ba:1c:39:be:bb:24:f3:2d:1e:16:
01:4a:4c:ff:c3:db:31:93:52:6d:86:94:cc:51:cc:f0:13:f1:
4b:fd:f1:34:51:ca:d4:a2:ec:b5:e6:25:2e:9a:18:9b:0b:08:
0d:b7:fa:ca:ec:7c:a5:a7:1a:ff:d1:75:4c:58:a2:b3:7e:31:
fa:61:10:d9:27:0f:d1:f9:13:1f:40:0d:bb:8e:73:f4:5b:3e:
36:e3:2a:f6:66:1e:65:79:6f:c3:8b:b8:92:64:ed:75:92:1d:
d4:8f:41:63:e8:b6:18:98:36:79:6a:46:a3:88:fe:a7:db:2c:
3e:46:70:86:86:bc:b4:d6:64:bd:78:9f:a8:7f:f3:71:dc:06:
ce:70:59:cb:1d:30:a9:7f:d9:a7:f4:ba:94:c0:fc:9b:ca:93:
0e:45:b7:45:e7:ba:6e:4e:df:4e:35:4b:3e:5e:40:98:8b:7f:
a7:f6:73:05:b9:4f:78:f9:95:ba:3d:fb:91:d0:11:bd:11:6c:
d4:a7:e6:e7:9e:91:9e:ed:c9:71:9e:c2:05:24:c7:d0:fb:d7:
1b:82:98:18:b4:16:70:18:3e:83:b6:54:f8:97:c6:28:25:42:
20:77:05:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:19 2026 by rpki-client