Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Q3sTjLtmrDvbzir7YE0w2jMSoJ0.roa
File: Q3sTjLtmrDvbzir7YE0w2jMSoJ0.roa (raw, json)
Hash identifier: 0jD4LWEqLeU5CgP8E5h8KKGeyRdcthhaN6MyhGBKEOg=
Subject key identifier: 43:7B:13:8C:BB:66:AC:3B:DB:CE:2A:FB:60:4D:30:DA:33:12:A0:9D
Certificate issuer: /CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Certificate serial: 019F360941AADFA8069153C22E9856911FD3
Authority key identifier: 05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Q3sTjLtmrDvbzir7YE0w2jMSoJ0.roa
Signing time: Mon 06 Jul 2026 06:06:44 +0000
ROA not before: Mon 06 Jul 2026 06:06:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64150
IP address blocks: 45.155.56.0/23 maxlen: 23
45.155.56.0/24 maxlen: 24
45.155.57.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.mft
rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:09:41:aa:df:a8:06:91:53:c2:2e:98:56:91:1f:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0534c49fcfa8a45041d95ed4d8d4fc69c727a467
Validity
Not Before: Jul 6 06:06:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=437b138cbb66ac3bdbce2afb604d30da3312a09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:a7:22:31:06:c4:40:fd:ad:b1:f0:65:32:e2:
5c:82:14:7a:c3:3d:ed:60:ca:c3:31:0c:92:12:2a:
8a:2a:7a:79:69:48:66:10:a4:64:f2:2b:35:f3:06:
12:f5:4a:c7:98:aa:98:49:49:ce:9c:3b:4f:ff:09:
ee:ca:f8:f1:ff:58:3a:52:aa:1a:78:58:dc:c4:4d:
9c:fa:b2:53:0a:77:93:50:dc:db:46:db:82:7d:51:
28:b2:3f:47:ff:60:bc:5e:cb:d7:71:63:a9:6f:18:
c7:81:93:fd:ae:a4:36:3e:d8:85:fa:ff:87:c0:c8:
b9:dd:d4:46:de:5f:58:31:b7:21:4e:c3:68:eb:28:
c2:82:a7:4f:ef:6f:86:92:f0:05:cd:cb:37:00:d9:
0d:1f:84:95:c4:91:fa:d4:b1:0f:63:2f:9e:15:ba:
d1:9d:45:16:e2:c5:0a:17:44:22:9d:e9:86:e9:42:
75:1b:ae:6a:9a:43:24:cc:11:c4:e0:ad:40:6a:74:
e0:f1:47:ea:c9:14:1e:da:67:3f:17:52:79:4d:29:
27:f1:55:81:49:e0:e7:62:2b:a0:d4:98:4b:9e:9f:
64:6d:47:e7:6b:6d:f5:14:fe:cf:2f:cc:fa:71:eb:
98:e5:9e:6f:dc:3b:f3:af:27:42:44:9a:c2:f0:51:
b4:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7B:13:8C:BB:66:AC:3B:DB:CE:2A:FB:60:4D:30:DA:33:12:A0:9D
X509v3 Authority Key Identifier:
keyid:05:34:C4:9F:CF:A8:A4:50:41:D9:5E:D4:D8:D4:FC:69:C7:27:A4:67
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BTTEn8-opFBB2V7U2NT8accnpGc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/Q3sTjLtmrDvbzir7YE0w2jMSoJ0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/0ccbda-d6f1-4527-8106-cd7e06cbb531/1/BTTEn8-opFBB2V7U2NT8accnpGc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.56.0/23
Signature Algorithm: sha256WithRSAEncryption
b4:3b:44:a4:02:04:ec:a1:da:75:e8:3c:2e:99:10:c0:0d:7c:
83:16:04:c4:f5:f5:5c:9e:21:c8:b0:00:71:d6:38:e7:02:69:
7c:b5:2e:8b:5b:2f:63:e4:7f:3e:d3:3e:7f:8b:8e:cb:0d:43:
a4:84:80:a9:c7:2b:b2:d1:c2:a1:ce:e5:6f:4e:05:2f:5c:35:
b2:f5:54:68:65:57:56:09:f6:41:31:30:5d:af:07:5e:ed:61:
f3:4f:39:23:b9:b1:63:17:4c:f1:12:13:30:0c:cb:0b:76:97:
3d:a7:fa:a3:7e:33:63:8e:7d:59:15:e6:a6:3e:93:f9:8f:7a:
ee:ac:84:a9:30:af:24:f3:8e:fc:ef:49:33:10:d4:17:82:cd:
b8:9e:f8:7e:14:ae:85:13:fe:fc:bd:e4:60:82:73:fc:2a:03:
f9:e6:97:c7:6b:73:43:cf:82:f6:e8:cb:93:6c:e7:24:08:4e:
22:a0:99:6f:68:fd:b2:21:b2:60:8b:9d:b9:3a:d5:93:b3:62:
19:86:da:9a:c6:bc:77:ee:db:45:e4:47:3d:6a:cb:04:97:2e:
93:85:96:12:6d:6e:9f:0c:81:a7:ab:3c:72:42:f2:95:e6:a2:
f8:0a:04:8a:49:77:fb:0b:fe:f0:4a:06:9c:4b:7a:1d:cc:4e:
d1:ff:60:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 06:38:23 2026 by rpki-client