Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/qS5pyl9pypw36FT-lbjeONyk28Q.roa
File: qS5pyl9pypw36FT-lbjeONyk28Q.roa (raw, json)
Hash identifier: 3XhF5aY0cvvvNLZA18eCkajF3VHk7yUuOdxjn+SLuVQ=
Subject key identifier: A9:2E:69:CA:5F:69:CA:9C:37:E8:54:FE:95:B8:DE:38:DC:A4:DB:C4
Certificate issuer: /CN=e04ed602bbf65f5f2396fd8095c3d986146741fe
Certificate serial: 019F23693AB4AEDD53DC4FEE9A63325B6DB2
Authority key identifier: E0:4E:D6:02:BB:F6:5F:5F:23:96:FD:80:95:C3:D9:86:14:67:41:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4E7WArv2X18jlv2AlcPZhhRnQf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/qS5pyl9pypw36FT-lbjeONyk28Q.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212685
IP address blocks: 194.164.36.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/4E7WArv2X18jlv2AlcPZhhRnQf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 19 Jul 2026 18:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3a:b4:ae:dd:53:dc:4f:ee:9a:63:32:5b:6d:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e04ed602bbf65f5f2396fd8095c3d986146741fe
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a92e69ca5f69ca9c37e854fe95b8de38dca4dbc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:22:ab:63:02:71:6b:92:f8:0e:ca:db:02:c3:
53:fc:1a:4f:dc:49:8c:9e:47:ee:0b:96:25:aa:44:
3b:6b:39:6c:07:cc:ad:5a:8a:24:e3:b9:f4:a0:ab:
a0:d4:4a:cd:8f:ab:e3:6b:04:60:ff:be:0d:5e:09:
88:dd:3c:a1:20:fc:81:9a:58:26:ba:41:a0:38:fb:
a5:3a:92:29:23:57:61:4a:b5:97:68:1e:6b:48:10:
f1:77:dd:46:14:85:87:6b:27:3b:58:8a:3c:54:89:
49:0a:74:b9:30:2c:96:40:4e:11:69:38:d7:0c:89:
d4:a8:27:8f:d2:66:fa:1d:9f:09:cd:15:78:fe:82:
79:4b:42:a7:0d:b9:d3:57:50:a8:66:5e:93:c9:d6:
d3:5e:0d:8c:df:13:1e:42:96:de:0e:bf:57:a9:61:
60:e7:d9:20:ee:63:38:29:79:4f:70:04:d7:2b:cd:
fe:51:8a:6c:09:b5:c9:fe:51:49:0d:41:de:e5:d0:
53:d4:39:49:b7:64:9b:79:e3:ad:19:e9:24:43:bf:
ed:ce:c2:10:73:a2:9e:c2:a8:2d:12:9a:88:f2:1d:
cb:f5:36:e3:0b:bd:9d:32:12:94:79:3f:43:6b:c6:
bd:50:2c:04:5d:cd:14:76:38:73:1a:cc:2d:d1:25:
11:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2E:69:CA:5F:69:CA:9C:37:E8:54:FE:95:B8:DE:38:DC:A4:DB:C4
X509v3 Authority Key Identifier:
keyid:E0:4E:D6:02:BB:F6:5F:5F:23:96:FD:80:95:C3:D9:86:14:67:41:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4E7WArv2X18jlv2AlcPZhhRnQf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/qS5pyl9pypw36FT-lbjeONyk28Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/f0cc41-b3e7-46ff-a976-29df4e2611f1/1/4E7WArv2X18jlv2AlcPZhhRnQf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.164.36.0/23
Signature Algorithm: sha256WithRSAEncryption
49:1d:ef:78:0b:a2:2e:92:3a:f2:5e:cd:13:88:25:ab:28:7a:
d2:bd:a9:e4:ee:f3:99:cb:c0:f8:ef:de:0c:da:1b:27:3c:e7:
42:a8:f8:e3:c5:04:14:41:26:49:3d:25:15:e5:d9:7b:ac:15:
c0:f9:dd:32:e5:e5:ba:e0:dc:c5:28:c4:4f:25:47:3a:af:3f:
d2:ac:33:9a:5e:2e:66:ca:90:9b:db:b5:af:25:23:22:91:5f:
7b:fd:b9:e1:c8:82:fd:01:64:64:b8:b8:45:0f:4d:d9:6b:f6:
f0:db:d6:0c:bd:d4:52:02:dc:8e:02:f9:cc:a6:3a:92:59:ae:
79:5e:f6:ac:cc:2e:97:cd:ca:d8:56:ef:10:6c:3c:9a:9c:39:
66:2a:52:9c:e6:eb:b4:94:5e:6e:3b:8c:bb:8e:3e:37:2b:51:
23:46:41:ad:00:ba:5a:eb:aa:73:05:0a:64:23:10:ad:a1:62:
2e:4f:29:89:7a:17:3b:eb:ac:18:b9:74:37:35:f5:6d:e3:af:
b6:cf:7a:f3:1c:4a:e4:bd:3c:a8:9b:b3:80:1b:4b:ed:01:1f:
2d:e0:73:aa:50:aa:c4:ea:aa:10:5c:5b:ba:42:63:34:4b:ae:
84:93:52:b2:43:f1:14:c2:fb:3a:a5:1c:ea:2f:dc:04:a2:ee:
be:3b:87:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jul 19 03:14:39 2026 by rpki-client