Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/V4QNov5aUVl0kjPoDbGXWUTFf3c.roa
File: V4QNov5aUVl0kjPoDbGXWUTFf3c.roa (raw, json)
Hash identifier: RWwYnwshC1K5yWsQ6bl0FWPq+jSiHD0KLQ+6u/grLQo=
Subject key identifier: 57:84:0D:A2:FE:5A:51:59:74:92:33:E8:0D:B1:97:59:44:C5:7F:77
Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Certificate serial: 019F236844886230FF5BAD8697688080AF94
Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/V4QNov5aUVl0kjPoDbGXWUTFf3c.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 86.110.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 03:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:44:88:62:30:ff:5b:ad:86:97:68:80:80:af:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=57840da2fe5a5159749233e80db1975944c57f77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:57:e8:e6:dd:da:e5:59:dd:aa:5b:f4:1d:a1:
25:b0:ed:c3:3d:81:3a:d5:49:c5:d7:32:db:f7:e9:
07:21:db:02:ef:e8:c1:a3:5c:33:68:93:05:a6:6b:
57:be:a8:d6:18:0e:ac:f1:1d:4f:69:5f:e1:ee:87:
72:d5:02:47:3c:84:df:c4:53:cc:b3:7a:ad:2b:e1:
e7:ea:11:6b:fc:78:8e:c7:33:07:99:03:46:5b:3e:
d0:83:41:fe:9f:9b:08:24:51:91:94:ea:74:c4:a1:
92:4e:bf:85:7e:61:c2:41:40:2c:99:82:e0:70:6e:
15:57:92:73:c2:30:c6:f0:6a:f5:7c:ed:14:b0:3d:
2b:cf:fb:34:eb:78:c4:28:6f:24:51:24:78:46:af:
e3:1d:bf:84:33:06:c3:77:d3:2d:c1:19:a4:84:6a:
f4:21:bf:ae:f9:25:45:53:37:fb:15:41:e0:b5:49:
36:6b:25:c2:cc:05:06:a7:c1:f0:8a:b7:7e:e4:2f:
34:36:a6:6e:fb:ca:63:80:ed:02:85:58:d0:cf:88:
90:7d:e2:a8:f8:4f:75:95:b6:b4:cd:d7:8d:ec:85:
cd:eb:3f:4c:8b:a7:c6:3e:7a:d6:31:58:49:0d:f1:
03:7c:60:7a:f2:7d:5c:ce:42:62:67:25:54:04:87:
28:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:84:0D:A2:FE:5A:51:59:74:92:33:E8:0D:B1:97:59:44:C5:7F:77
X509v3 Authority Key Identifier:
keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/V4QNov5aUVl0kjPoDbGXWUTFf3c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.62.0/24
Signature Algorithm: sha256WithRSAEncryption
7e:e4:70:df:e5:d4:58:44:c8:00:50:dd:13:5d:b4:cd:97:32:
eb:14:15:45:74:17:6b:b4:b9:28:92:51:eb:2e:34:b2:bf:98:
c6:78:95:eb:7e:17:a0:f4:cb:44:9b:34:64:9b:10:d1:ff:51:
27:a8:3d:32:5d:06:5f:be:72:ba:70:97:88:11:85:dd:ce:38:
1b:36:74:e6:79:7f:ba:e2:d0:fd:00:7f:5a:93:44:4a:5f:c3:
00:91:1f:88:5c:ee:8c:c8:17:41:90:0b:5b:2a:3e:24:a2:f2:
d5:be:a7:df:5a:b8:95:a0:ac:21:a9:45:8f:35:0c:97:fa:29:
e8:08:54:87:16:e8:d1:eb:f7:c9:fa:0b:1c:06:92:23:a8:c2:
21:c8:3c:5a:0d:5e:6c:b6:6b:54:42:4c:ee:12:6c:fc:2a:ae:
46:42:54:62:a4:99:02:ff:98:c4:40:c2:39:91:78:cb:fe:51:
c8:df:c8:df:a7:0b:84:48:99:bc:28:19:a8:06:d9:93:e5:2f:
8f:d2:01:05:93:43:8c:15:95:ae:cc:a9:00:2d:e6:81:c4:f5:
a0:91:d4:e5:62:6e:a2:34:75:d5:61:57:38:b0:2f:46:3a:b4:
f3:2e:1d:52:b1:63:dc:c3:3f:1b:dc:09:b4:5c:6a:63:04:ff:
32:4e:ec:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 09:18:20 2026 by rpki-client