Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/QEAgodlhX0q31m_BwmFzK4J6e_I.roa
File: QEAgodlhX0q31m_BwmFzK4J6e_I.roa (raw, json)
Hash identifier: ifPYPV007NLuqIpdttAdYACWibvcd1/6B9YqJ6XHc+w=
Subject key identifier: 40:40:20:A1:D9:61:5F:4A:B7:D6:6F:C1:C2:61:73:2B:82:7A:7B:F2
Certificate issuer: /CN=fd0b9c669eedf568849e44b22d4b0f0011489adb
Certificate serial: 019F236859B4AB54662F1E230E395D2036EA
Authority key identifier: FD:0B:9C:66:9E:ED:F5:68:84:9E:44:B2:2D:4B:0F:00:11:48:9A:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_QucZp7t9WiEnkSyLUsPABFImts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/QEAgodlhX0q31m_BwmFzK4J6e_I.roa
Signing time: Thu 02 Jul 2026 15:17:48 +0000
ROA not before: Thu 02 Jul 2026 15:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9009
IP address blocks: 45.147.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.mft
rsync://rpki.ripe.net/repository/DEFAULT/_QucZp7t9WiEnkSyLUsPABFImts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 19:33:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:59:b4:ab:54:66:2f:1e:23:0e:39:5d:20:36:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd0b9c669eedf568849e44b22d4b0f0011489adb
Validity
Not Before: Jul 2 15:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=404020a1d9615f4ab7d66fc1c261732b827a7bf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a9:6f:a2:98:f5:21:60:78:79:25:a7:6b:a1:
58:74:5e:8f:60:9a:70:14:95:ea:b8:11:10:f5:b0:
72:b5:48:b9:9d:56:de:c2:52:cd:07:5c:db:b8:1e:
aa:6b:1e:c7:a3:ea:62:7a:7c:86:6d:52:64:73:b0:
5b:a7:09:a4:e5:22:c0:93:c7:31:58:11:d5:70:5a:
e6:84:7e:b5:b7:f8:f8:eb:ea:dc:cc:8a:1d:90:65:
2e:cd:1f:33:41:e6:99:e8:61:c1:1f:5b:5b:d3:37:
3f:1c:08:0a:c6:1c:b8:8b:77:e6:c7:32:13:20:ee:
0e:c2:3a:92:d8:bc:3f:c7:cf:55:4c:a4:4a:5b:bd:
c4:0a:ef:70:7a:0b:b6:5f:17:ea:f0:c7:7a:f0:e9:
19:ce:2a:27:da:f1:e4:c7:b6:b7:77:83:3f:26:a8:
4b:77:9d:9e:ad:a2:61:e2:5b:0a:4f:01:b0:1f:5c:
5c:96:a6:09:f8:65:f8:f3:a7:5a:40:19:24:9c:66:
97:d1:b8:6f:d1:ba:3e:b3:b0:38:5b:0a:bc:77:5d:
a8:e7:86:e1:ef:5d:5d:37:7b:60:6d:f6:21:ee:63:
8d:de:bf:f7:0d:ad:11:b7:30:df:57:a4:12:3c:6b:
15:65:aa:61:d9:d9:e2:fa:f3:3e:3a:6d:c2:90:96:
fc:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:40:20:A1:D9:61:5F:4A:B7:D6:6F:C1:C2:61:73:2B:82:7A:7B:F2
X509v3 Authority Key Identifier:
keyid:FD:0B:9C:66:9E:ED:F5:68:84:9E:44:B2:2D:4B:0F:00:11:48:9A:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_QucZp7t9WiEnkSyLUsPABFImts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/QEAgodlhX0q31m_BwmFzK4J6e_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/496773-5018-48dc-a240-f60d6f7182a1/1/_QucZp7t9WiEnkSyLUsPABFImts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.147.166.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:0c:66:1b:48:ad:c0:17:37:b1:d0:d3:af:5e:c8:59:8b:a4:
9d:bd:a0:c1:83:44:8c:d7:96:e8:96:90:e2:5c:9a:a9:b6:58:
6c:ab:45:bd:78:6c:85:a0:2a:30:e9:11:ea:21:da:b7:8c:75:
cd:fa:bf:2e:6b:61:bf:b4:06:12:59:d0:a6:cc:8f:8e:a3:3d:
25:23:ef:48:9a:32:8c:18:29:e4:86:ab:e8:2e:39:03:6e:a4:
e5:d0:6e:31:3c:18:f2:ba:dc:6a:83:52:14:00:70:d7:99:1a:
50:9d:77:54:c0:b9:dd:26:dd:9c:7f:20:bf:dd:15:45:56:89:
97:27:a4:3f:c9:41:d6:a3:82:0e:85:1a:8c:a1:aa:a7:27:6f:
11:1b:4a:b3:ff:f2:da:71:ea:cc:04:1c:e2:df:d4:8a:71:c5:
ef:4a:4d:d5:fc:79:b3:bf:bb:06:ee:5a:a3:bf:c2:0f:bc:5e:
7d:bb:2f:37:f7:c4:d9:32:48:ab:ad:40:6f:b4:dc:1e:af:55:
04:6b:a1:5a:d7:ea:f3:dd:61:d9:54:25:84:d2:0a:93:31:b3:
b6:78:9c:f3:ac:bb:61:f6:ca:2a:0d:8b:3d:c4:21:60:0e:41:
50:b0:01:8d:80:c4:6e:75:92:b0:b8:07:bf:ce:61:19:94:fc:
50:83:92:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 00:13:11 2026 by rpki-client