Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/bQOXzwiKFnJjs2_uDsZEFpXTZLQ.roa
File: bQOXzwiKFnJjs2_uDsZEFpXTZLQ.roa (raw, json)
Hash identifier: 3n4VI0ULyvif8yzsdTNuE3QU+7DzDaX9WPpYj6cmaQo=
Subject key identifier: 6D:03:97:CF:08:8A:16:72:63:B3:6F:EE:0E:C6:44:16:95:D3:64:B4
Certificate issuer: /CN=624ad4535ac88dd534199f2a726095af71afe44e
Certificate serial: 019F12DBFDD7F4819D86DCA814590A8F14A4
Authority key identifier: 62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/bQOXzwiKFnJjs2_uDsZEFpXTZLQ.roa
Signing time: Mon 29 Jun 2026 10:10:35 +0000
ROA not before: Mon 29 Jun 2026 10:10:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209043
IP address blocks: 45.66.252.0/24 maxlen: 24
45.66.253.0/24 maxlen: 24
45.66.254.0/24 maxlen: 24
45.66.255.0/24 maxlen: 24
91.217.6.0/24 maxlen: 24
91.217.7.0/24 maxlen: 24
103.69.32.0/24 maxlen: 32
103.69.33.0/24 maxlen: 32
103.69.34.0/24 maxlen: 32
103.69.35.0/24 maxlen: 32
109.74.28.0/24 maxlen: 24
109.74.29.0/24 maxlen: 24
109.74.30.0/24 maxlen: 24
109.74.31.0/24 maxlen: 24
209.23.36.0/24 maxlen: 32
209.23.37.0/24 maxlen: 32
209.23.38.0/24 maxlen: 32
209.23.39.0/24 maxlen: 32
209.23.40.0/24 maxlen: 32
209.23.41.0/24 maxlen: 32
209.23.42.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.mft
rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 10:10:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:12:db:fd:d7:f4:81:9d:86:dc:a8:14:59:0a:8f:14:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=624ad4535ac88dd534199f2a726095af71afe44e
Validity
Not Before: Jun 29 10:10:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6d0397cf088a167263b36fee0ec6441695d364b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ea:58:73:21:5b:af:ef:c5:7d:1f:b8:fb:e6:
9c:56:91:ba:ef:6a:95:43:00:bd:b2:d1:91:5f:94:
dc:78:ec:5f:61:20:0b:43:68:c5:89:09:a0:e2:e7:
76:d1:bd:bd:81:4f:54:0e:39:98:cb:1b:39:16:26:
09:a5:a3:99:d9:66:9f:fd:d1:25:f8:ec:cd:ca:b0:
f3:b5:93:11:4a:e7:e1:7e:a7:77:5e:41:d7:7f:e2:
b8:6d:04:09:9e:2d:72:67:5b:78:a9:2f:4e:75:73:
c0:36:a8:f5:99:7a:af:bd:cb:e9:ce:ce:91:fe:19:
34:8c:58:cd:88:8d:d0:24:50:51:80:14:4c:06:57:
61:43:a7:91:24:4a:a7:9b:e1:88:db:66:47:f0:74:
d6:ef:5e:cb:13:91:c8:85:04:54:a3:58:0f:8a:49:
ac:00:fb:c3:20:f4:4c:36:9f:5a:2c:d9:ef:69:91:
b3:3e:90:3c:32:b9:df:e3:f8:ba:7a:7e:a8:de:fb:
b9:7f:81:4f:da:1c:a6:b3:0a:78:6d:17:3a:6b:6c:
4d:39:e2:1a:92:b6:cb:75:74:7d:5c:52:e9:35:ff:
a1:28:d0:42:29:0e:af:86:d1:19:ac:13:88:aa:e9:
01:89:9e:17:40:9f:52:90:8f:31:d7:c7:84:bf:7c:
94:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:03:97:CF:08:8A:16:72:63:B3:6F:EE:0E:C6:44:16:95:D3:64:B4
X509v3 Authority Key Identifier:
keyid:62:4A:D4:53:5A:C8:8D:D5:34:19:9F:2A:72:60:95:AF:71:AF:E4:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/bQOXzwiKFnJjs2_uDsZEFpXTZLQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/aa1019-564f-4c46-a217-fb5949808ddc/1/YkrUU1rIjdU0GZ8qcmCVr3Gv5E4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.66.252.0/22
91.217.6.0/23
103.69.32.0/22
109.74.28.0/22
209.23.36.0-209.23.42.255
Signature Algorithm: sha256WithRSAEncryption
38:2f:a2:45:d5:68:d7:f7:5f:15:2d:14:87:bc:74:ab:76:0b:
6d:81:74:eb:37:98:6c:ec:96:41:3a:b5:e7:0f:1b:03:8d:b1:
54:b6:f9:cf:64:db:e3:13:c1:de:8e:c0:77:71:b1:77:b7:70:
ae:dd:d7:a0:19:2f:4f:5c:01:02:7c:50:be:fb:8c:20:48:1c:
7d:bf:0c:b6:61:e1:5c:4b:9d:71:2c:de:69:53:7f:ce:65:7a:
85:a7:9a:62:c1:ea:ea:dd:64:79:48:ca:1a:b7:ac:28:86:ec:
8c:31:05:42:97:21:90:85:9d:7f:15:95:db:dc:d2:51:41:af:
2c:0c:5f:78:54:d4:7a:08:8d:79:92:b4:f1:98:89:3e:6b:a4:
a0:02:e8:7f:d9:6e:80:80:4e:25:72:dd:a2:c6:3d:e9:3a:be:
91:69:10:d9:d9:f8:d7:64:51:ee:aa:f5:8a:4b:16:93:3e:27:
79:d9:3f:9c:d2:0f:da:eb:aa:d6:bd:27:21:a1:54:d1:a3:41:
ef:a7:bc:a5:96:f1:32:86:81:46:1b:b4:a9:a1:eb:f6:a4:09:
c4:7d:71:3e:e8:42:46:72:8e:93:33:73:ec:e1:59:46:4b:e7:
08:92:66:49:1e:25:ad:d1:3c:77:cc:73:36:84:d7:15:73:06:
37:75:19:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jun 29 16:30:52 2026 by rpki-client