Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/RoQDt4PjdwW0SoiiPvyTsxSfuY8.roa
File: RoQDt4PjdwW0SoiiPvyTsxSfuY8.roa (raw, json)
Hash identifier: 1mJogWLp+9JQPWumTmYBS2/tf+nhYhyUXRjcoUUswLw=
Subject key identifier: 46:84:03:B7:83:E3:77:05:B4:4A:88:A2:3E:FC:93:B3:14:9F:B9:8F
Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Certificate serial: 019F23684A0124AAC2A4C12ECD01DA1E259F
Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/RoQDt4PjdwW0SoiiPvyTsxSfuY8.roa
Signing time: Thu 02 Jul 2026 15:17:44 +0000
ROA not before: Thu 02 Jul 2026 15:17:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211854
IP address blocks: 86.110.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 03:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:4a:01:24:aa:c2:a4:c1:2e:cd:01:da:1e:25:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Validity
Not Before: Jul 2 15:17:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=468403b783e37705b44a88a23efc93b3149fb98f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:10:65:fc:eb:2c:84:ee:e0:3f:1d:cc:4a:9a:
d3:e0:40:f0:b2:b9:04:11:49:00:93:d9:ca:14:8a:
f5:cb:f0:1b:e2:ed:96:5b:75:37:cc:06:c9:41:c7:
a0:61:29:d0:68:ba:86:31:47:07:e0:1e:72:5c:a6:
25:f4:b4:0b:a9:73:c1:d9:8a:85:07:b2:37:8f:17:
03:f6:52:3f:be:9f:22:8a:b9:1b:75:66:8e:91:d4:
89:30:88:b3:94:cd:6b:c4:dd:4b:ee:e0:fb:96:fd:
37:fb:c9:35:1b:d5:7e:ff:12:bd:2e:31:97:9a:3e:
b2:18:a0:83:ea:bd:56:99:8f:70:39:fa:68:2a:14:
be:b1:27:24:d2:a3:4a:52:31:86:e2:71:69:7f:aa:
05:45:aa:03:10:dc:34:9b:d9:a7:9f:a0:ed:dd:c4:
e0:4d:88:cd:89:37:23:15:af:b2:5c:bc:0a:99:2b:
59:e7:23:69:8e:7b:e0:c7:65:a0:3b:74:07:41:dc:
3f:b7:06:ce:c7:5e:ad:3c:8c:96:a8:12:bb:15:50:
f6:42:0f:cb:2b:8f:fe:31:52:c3:07:37:c8:0c:e5:
29:eb:d4:e0:cd:3d:8c:ff:45:ad:c1:4e:76:16:df:
db:88:99:31:0c:0e:2a:bb:64:f0:76:91:2c:b5:4d:
82:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:84:03:B7:83:E3:77:05:B4:4A:88:A2:3E:FC:93:B3:14:9F:B9:8F
X509v3 Authority Key Identifier:
keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/RoQDt4PjdwW0SoiiPvyTsxSfuY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.61.0/24
Signature Algorithm: sha256WithRSAEncryption
89:45:8f:4a:6a:0b:36:dc:f4:7c:b9:2c:99:65:55:7a:d7:48:
26:44:dc:ed:15:40:7f:bc:f3:9a:94:89:4c:63:c2:47:35:db:
cd:a3:ab:b3:71:d3:4f:4f:e1:69:07:5b:7c:68:b6:2c:df:95:
c6:86:d3:9d:e0:ad:31:c1:d7:8c:b7:4d:4b:c5:36:75:14:0e:
21:17:2f:7f:1c:0e:d7:8e:9e:77:9f:46:ff:f9:b4:ea:94:28:
46:cf:49:0c:a0:54:85:9c:6f:4b:6c:e5:fb:4a:07:2b:7e:26:
48:38:81:be:a4:14:25:7b:22:45:43:ba:df:70:3f:ab:5a:91:
44:e5:89:af:56:c1:c6:fb:e0:54:eb:6c:ce:ff:3a:98:0a:39:
da:f6:7a:25:c3:5b:1e:e7:8c:c1:67:13:e0:c0:30:90:2f:3a:
9c:09:7b:da:49:53:f9:cc:49:68:c5:8d:9e:ac:d6:81:11:b9:
97:88:9e:f4:c2:5a:d9:a9:03:bf:3c:41:53:70:d9:b8:f3:fc:
ef:85:12:d2:4e:76:b3:13:8e:32:d4:6b:6c:68:19:41:23:ff:
8d:45:aa:10:3d:97:22:69:b9:10:c3:fc:15:1d:92:ad:e7:af:
9e:f4:16:d5:08:28:37:41:e9:dd:09:67:6f:f3:f8:2c:0b:bc:
dd:d3:d2:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 09:19:57 2026 by rpki-client