Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-qTTgM8_FjndNmYEIFWVZsm4BR0.roa
File: 1-qTTgM8_FjndNmYEIFWVZsm4BR0.roa (raw, json)
Hash identifier: IQwCTwh0KylgYLx5I6wpJLaDymW7kWDaAWbCOaWCEFQ=
Subject key identifier: FA:A4:D3:80:CF:3F:16:39:DD:36:66:04:20:55:95:66:C9:B8:05:1D
Certificate issuer: /CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Certificate serial: 019F3BDE63BC961FF95E4B039A3419D8DF07
Authority key identifier: AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-qTTgM8_FjndNmYEIFWVZsm4BR0.roa
Signing time: Tue 07 Jul 2026 09:17:38 +0000
ROA not before: Tue 07 Jul 2026 09:17:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402236
IP address blocks: 159.148.131.0/24 maxlen: 24
159.148.245.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.mft
rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3b:de:63:bc:96:1f:f9:5e:4b:03:9a:34:19:d8:df:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ab0952c8ba8dadb1d34de6c6a93864a609fc41ec
Validity
Not Before: Jul 7 09:17:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=faa4d380cf3f1639dd36660420559566c9b8051d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:77:bb:5d:5a:07:f1:91:b8:8d:45:49:8d:14:
9e:f8:6e:c0:99:6a:61:fb:01:06:2c:cb:61:15:85:
01:81:06:ed:11:b1:0b:d4:45:18:33:7b:03:84:66:
6e:56:db:01:be:4c:a0:54:45:a9:9f:5a:56:2b:cf:
48:71:9c:44:5d:c9:86:07:d6:f0:b0:e0:12:73:1a:
59:93:cf:8a:64:82:d7:ba:81:35:73:fd:76:1a:25:
1e:41:55:97:1b:f7:c7:ab:99:83:e4:26:21:14:49:
3f:97:10:f5:38:22:34:b6:c6:bd:bf:61:5a:d2:a9:
1d:b2:2a:ec:c9:c8:8a:28:bc:40:e9:84:54:1c:c3:
4e:a3:ef:cc:e2:0a:42:a9:34:33:46:dd:66:b0:6a:
c7:78:66:ac:59:fe:f1:8a:26:ab:f1:1a:ac:c5:56:
2c:fd:e7:2e:d7:d4:e2:93:c0:65:53:4f:a0:43:77:
41:f7:bd:c7:61:7e:7c:a9:9e:43:29:d5:6c:a0:d5:
89:dd:c6:d9:df:af:33:a3:c8:f7:5a:36:ec:60:e1:
8a:09:10:be:9a:13:7d:78:e1:23:9a:ef:ad:9c:15:
bb:a7:f5:07:b7:ff:9a:cb:c3:c0:51:e6:f4:73:d5:
8b:97:90:08:a4:9a:2c:03:88:46:fe:18:85:dd:60:
55:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A4:D3:80:CF:3F:16:39:DD:36:66:04:20:55:95:66:C9:B8:05:1D
X509v3 Authority Key Identifier:
keyid:AB:09:52:C8:BA:8D:AD:B1:D3:4D:E6:C6:A9:38:64:A6:09:FC:41:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qwlSyLqNrbHTTebGqThkpgn8Qew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/1-qTTgM8_FjndNmYEIFWVZsm4BR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/3555fe-12cd-402a-a810-5554d6e1686f/1/qwlSyLqNrbHTTebGqThkpgn8Qew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.148.131.0/24
159.148.245.0/24
Signature Algorithm: sha256WithRSAEncryption
bd:2f:6a:25:22:84:14:29:a2:d3:65:2d:81:8e:ec:4d:7f:26:
f7:81:65:00:59:6b:7b:b0:4a:ef:65:7f:54:8b:79:bb:76:57:
d1:33:93:5e:30:ff:4e:80:09:e6:ec:fe:87:fb:92:14:4e:e3:
78:6b:82:b9:3d:20:89:93:4f:62:bb:8d:dc:02:53:de:5b:d3:
2a:89:1e:bf:dd:1d:37:69:1a:c2:35:cd:47:d0:b2:4d:07:10:
42:c5:24:37:5e:70:ae:b3:50:90:7d:dd:63:97:c3:8d:a3:d9:
40:f9:8a:11:d1:49:49:5d:31:7b:9b:b2:06:bb:27:33:cd:5f:
f5:b2:78:ce:ef:7a:66:33:ca:25:c8:f4:ef:3e:76:53:11:26:
1b:5d:d8:ef:b3:9b:0f:1d:5d:dc:ae:fb:91:1f:1a:3a:5c:72:
aa:49:99:40:e1:27:ed:d2:99:5d:50:77:0f:9f:cd:0b:c5:d1:
e6:9b:f1:b0:2c:e9:e7:21:e6:8d:32:b6:1e:10:8d:24:0e:17:
29:e0:cb:fb:d2:86:95:74:8d:df:08:1e:3a:28:75:32:a4:03:
62:5d:c7:52:3b:34:b0:58:9a:70:f7:9c:af:bc:2b:74:23:63:
0c:e6:df:2b:89:ec:f9:08:a0:ad:92:c6:1c:52:7c:af:6e:ca:
6c:f4:ec:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:53:44 2026 by rpki-client