Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/RaFD1qIa1FBUHdH1NBKzltHz-BE.roa
File: RaFD1qIa1FBUHdH1NBKzltHz-BE.roa (raw, json)
Hash identifier: QJ4vh7+fg+2vbDLAlShsEsZ766Dpe7V2hwZH9ZczJ2M=
Subject key identifier: 45:A1:43:D6:A2:1A:D4:50:54:1D:D1:F5:34:12:B3:96:D1:F3:F8:11
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019F3625A2647E21597A8A4AEE0E3A0CBFFB
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/RaFD1qIa1FBUHdH1NBKzltHz-BE.roa
Signing time: Mon 06 Jul 2026 06:37:43 +0000
ROA not before: Mon 06 Jul 2026 06:37:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 213.214.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:36:25:a2:64:7e:21:59:7a:8a:4a:ee:0e:3a:0c:bf:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 6 06:37:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=45a143d6a21ad450541dd1f53412b396d1f3f811
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:51:8c:c5:82:ae:bc:bb:31:c5:5a:bc:4f:39:
5f:49:73:81:a8:d0:7d:c4:b6:a0:d8:d9:8a:72:85:
fa:22:d5:e3:50:c3:be:db:f4:29:d1:bd:01:b6:19:
62:54:e0:9a:7d:f5:e8:0d:25:e8:70:1e:f2:1a:cf:
ef:51:87:cc:36:f8:af:6b:4a:14:f1:62:cd:de:b3:
1f:f0:e8:72:05:45:cc:01:ca:2c:c1:42:49:0e:dc:
d9:2d:bf:4b:c4:04:b1:3d:38:5a:27:a5:a7:8c:d6:
17:22:46:6d:ed:c1:8f:b6:d3:71:9d:41:31:28:14:
6b:2c:eb:31:f9:ce:83:09:4e:23:e3:ed:e8:5f:f3:
91:17:36:dd:f9:70:2e:f9:ee:69:ba:22:d7:bd:55:
49:cb:cf:07:d1:0b:9c:67:24:48:31:df:0a:3f:ed:
2d:f5:7a:a5:e5:b3:d2:6c:75:03:25:07:81:e1:1b:
e5:5b:61:38:c9:3a:44:eb:da:8d:15:21:fa:2b:89:
ad:1b:4d:2a:68:99:f1:3f:28:2b:90:88:3e:f6:80:
05:38:0f:f5:6d:1a:db:09:eb:d8:b3:97:ed:96:6c:
db:ee:46:a3:a6:bb:b7:ae:20:cd:88:2a:da:7d:89:
ae:e4:66:f9:de:33:62:28:e9:6f:7c:3b:9c:78:1d:
9c:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:A1:43:D6:A2:1A:D4:50:54:1D:D1:F5:34:12:B3:96:D1:F3:F8:11
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/RaFD1qIa1FBUHdH1NBKzltHz-BE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.214.98.0/24
Signature Algorithm: sha256WithRSAEncryption
37:4b:f8:a7:d7:cf:43:91:5d:7b:8e:1a:05:83:6d:42:5f:58:
8c:b3:20:2a:81:84:7d:d2:81:4e:fb:ed:35:8d:e3:e8:80:60:
d7:13:4b:1b:46:f2:ed:8a:68:0f:d3:7d:4f:ec:28:74:b7:5c:
93:0a:c2:55:7f:1b:40:4a:d2:57:ca:51:73:26:19:fe:b9:44:
4b:35:ac:d9:df:81:ef:84:40:22:48:ed:78:a0:3a:6d:8e:95:
04:b3:2f:d0:dd:aa:9c:cd:54:af:1c:19:09:74:fb:1c:ec:4e:
4a:39:1d:f5:c2:a0:62:16:ec:25:34:95:85:76:f0:39:92:e9:
ff:ac:7d:4d:c8:84:dc:9f:f9:fe:d0:de:45:02:a0:1e:57:7c:
7c:8c:eb:02:e8:76:19:60:15:b6:35:df:de:47:7d:ad:07:40:
d3:89:88:1b:d9:25:60:d5:31:e7:2e:e1:5b:53:de:11:c4:58:
5d:fc:7a:11:10:ea:d3:8a:96:c4:75:43:0a:18:8d:3b:03:33:
c4:46:32:97:e4:6b:8f:90:72:c1:4e:cd:e3:21:f0:80:0d:c5:
7a:bd:d4:de:d3:7c:8e:93:a8:af:aa:17:3e:fb:2e:51:83:bd:
c0:a8:df:f1:06:c3:98:ca:1d:93:80:cf:a4:a1:5f:dd:42:e8:
00:93:2f:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:33:38 2026 by rpki-client