Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/Q7nwBBga7lm3bl1EnYExYBAvOj8.roa
File: Q7nwBBga7lm3bl1EnYExYBAvOj8.roa (raw, json)
Hash identifier: TPTTiiodFtiZWeJt2IIRuAEhr2awAxw7AA6bqN2Fj6s=
Subject key identifier: 43:B9:F0:04:18:1A:EE:59:B7:6E:5D:44:9D:81:31:60:10:2F:3A:3F
Certificate issuer: /CN=89565eab4a632aadf82fd9afbc867d161c1ac4ce
Certificate serial: 019F23686887C3F0657807FEC85B5A4DB911
Authority key identifier: 89:56:5E:AB:4A:63:2A:AD:F8:2F:D9:AF:BC:86:7D:16:1C:1A:C4:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iVZeq0pjKq34L9mvvIZ9FhwaxM4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/Q7nwBBga7lm3bl1EnYExYBAvOj8.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49206
IP address blocks: 83.118.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/iVZeq0pjKq34L9mvvIZ9FhwaxM4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/iVZeq0pjKq34L9mvvIZ9FhwaxM4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iVZeq0pjKq34L9mvvIZ9FhwaxM4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:68:87:c3:f0:65:78:07:fe:c8:5b:5a:4d:b9:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89565eab4a632aadf82fd9afbc867d161c1ac4ce
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43b9f004181aee59b76e5d449d813160102f3a3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2a:4b:f9:4a:9e:c9:3a:45:f6:26:12:73:1e:
fd:cb:e1:c0:15:1e:e6:b2:8b:1c:9a:57:a5:94:fa:
90:fa:3a:1d:87:c0:0a:c1:e9:36:de:2c:88:05:b0:
fe:28:82:eb:fb:f0:8c:d6:f1:01:f1:d2:b1:4c:7a:
1e:91:84:f6:4e:ac:d5:4c:7b:05:43:1e:1d:09:bd:
8a:8d:e3:62:c1:d7:9f:40:fa:71:70:14:09:d9:bc:
b8:e9:79:68:61:8c:4f:0c:98:55:6c:ef:7c:68:08:
6f:34:34:5c:22:31:74:48:c5:27:f0:63:78:0d:87:
a2:9e:b3:08:fb:7f:cc:57:d9:e5:ef:7e:66:f6:ee:
d9:19:df:0d:85:c7:6b:61:b0:cc:d0:c5:74:17:b8:
b0:92:97:f8:4f:fe:95:e3:79:7e:e5:74:3c:07:5e:
75:68:84:94:30:5a:5e:2b:ea:59:ed:98:f7:7b:39:
be:72:56:6e:4b:0e:65:a4:12:42:e8:3b:b1:4d:23:
d2:9f:8a:93:ce:2b:8f:f9:06:90:b1:04:fa:02:79:
9f:31:55:73:e8:05:40:7c:6d:aa:54:eb:94:df:22:
61:c6:8d:26:16:38:fc:7e:86:72:7a:cd:f3:2e:c7:
df:31:89:45:da:58:a7:c2:d2:5e:15:71:22:95:c6:
83:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B9:F0:04:18:1A:EE:59:B7:6E:5D:44:9D:81:31:60:10:2F:3A:3F
X509v3 Authority Key Identifier:
keyid:89:56:5E:AB:4A:63:2A:AD:F8:2F:D9:AF:BC:86:7D:16:1C:1A:C4:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iVZeq0pjKq34L9mvvIZ9FhwaxM4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/Q7nwBBga7lm3bl1EnYExYBAvOj8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/e7bd01-432f-4bf9-80c5-897d00977ff2/1/iVZeq0pjKq34L9mvvIZ9FhwaxM4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.118.224.0/22
Signature Algorithm: sha256WithRSAEncryption
89:ad:69:c6:55:21:51:f9:7c:ec:ff:35:6a:ce:ce:28:46:48:
24:d3:f7:65:56:24:f9:7a:fc:17:8e:51:9e:40:e9:cd:c7:23:
fa:58:45:2f:05:bf:e9:cd:07:c9:1d:ca:5b:5f:23:c3:15:c4:
49:65:95:8c:ac:a9:2a:6c:43:bb:89:d9:8e:89:11:a1:ca:1a:
87:ac:1c:d3:ec:af:b0:40:c9:36:7a:d9:74:25:87:fb:88:22:
99:ac:c0:c1:c3:90:97:56:ca:44:c7:bb:1e:63:5f:46:27:d7:
73:b6:57:c2:e9:33:df:38:56:fc:f8:d4:05:79:d2:b5:20:be:
05:a2:27:aa:8b:43:c6:17:16:43:a6:80:5b:6a:ca:a7:9f:95:
d6:1e:70:7d:f1:a4:ed:bd:c1:f6:a8:6f:be:5b:07:fd:d1:bf:
84:31:44:9d:58:cc:1e:b8:c4:a4:d8:93:af:d6:5c:2b:e1:64:
f5:8b:68:ba:61:1a:99:90:04:5e:48:96:e0:12:99:d1:d3:8d:
b2:92:47:b1:42:f5:8b:77:5d:13:e3:b9:39:b1:af:27:7b:d8:
58:80:a0:69:49:5e:65:4f:15:07:be:4d:64:ed:02:54:13:20:
df:b5:63:e7:f3:ca:55:60:c2:3a:fd:45:49:aa:99:b9:85:cf:
dc:09:d1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:36 2026 by rpki-client