Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QJ7HagAe1ZbvjusoFKeqr8OR84o.roa
File: QJ7HagAe1ZbvjusoFKeqr8OR84o.roa (raw, json)
Hash identifier: EanaBVsyXPiwVEYs737iim4te9PpMB2bteY510g7u98=
Subject key identifier: 40:9E:C7:6A:00:1E:D5:96:EF:8E:EB:28:14:A7:AA:AF:C3:91:F3:8A
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019F1C5ADD53CC732D087311ED055363AA31
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QJ7HagAe1ZbvjusoFKeqr8OR84o.roa
Signing time: Wed 01 Jul 2026 06:25:44 +0000
ROA not before: Wed 01 Jul 2026 06:25:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214301
IP address blocks: 80.97.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:5a:dd:53:cc:73:2d:08:73:11:ed:05:53:63:aa:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Jul 1 06:25:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=409ec76a001ed596ef8eeb2814a7aaafc391f38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:4a:05:6f:e9:17:f3:72:ec:50:28:69:2f:ca:
65:06:ad:d2:a0:96:4c:92:76:b5:00:66:ca:fd:2a:
ec:82:b8:bc:53:14:b9:f7:30:de:8f:45:31:b4:16:
e4:96:75:81:82:ff:43:d4:43:98:15:08:bf:17:cb:
c9:d2:27:56:5c:34:0c:7c:72:c2:fe:3e:fb:da:65:
f8:96:38:04:b2:46:93:e2:65:1b:de:ea:76:04:d6:
ba:00:03:b4:66:c0:b3:44:4c:1f:20:13:39:9f:23:
ea:00:45:a3:8c:72:a3:d7:e7:eb:19:0a:7d:5d:e2:
f8:39:e6:d1:11:66:1d:1c:fc:01:66:2a:cd:d3:b3:
63:d8:f4:0f:d9:45:c0:7d:3e:6a:e8:3f:de:e0:33:
9e:9d:d8:e6:04:06:c2:d5:fe:a3:d2:2f:bf:d7:9b:
5c:c8:03:a9:49:b1:d6:cd:e1:17:37:8b:04:d3:5c:
75:70:34:0e:43:32:38:86:dd:cb:aa:72:a1:59:2b:
2c:0c:79:ef:24:ea:85:d7:1b:39:0c:9d:e1:7d:48:
7a:de:98:b7:f9:23:b1:25:62:01:10:3b:a0:0c:1d:
fb:67:a6:41:dc:0c:92:b4:32:c2:9a:79:0b:c5:b4:
a2:37:31:d1:e4:35:b6:32:2a:68:5c:91:54:b4:c9:
04:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9E:C7:6A:00:1E:D5:96:EF:8E:EB:28:14:A7:AA:AF:C3:91:F3:8A
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QJ7HagAe1ZbvjusoFKeqr8OR84o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.149.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:33:cb:62:dd:f0:de:17:39:12:05:28:37:f0:57:65:a8:bc:
2a:18:23:33:71:f5:ee:f1:de:a0:ea:ec:e6:65:66:bf:cf:73:
97:05:0a:8a:3a:46:f5:9d:40:a1:9e:9c:8d:fb:a8:ab:57:97:
37:2e:8a:7c:8c:97:94:6f:e1:cb:06:90:d3:d8:8b:35:2f:c3:
b0:5d:48:47:b8:08:b8:c1:f8:9c:31:72:de:74:0b:07:43:05:
b4:09:a9:70:c8:64:ed:96:04:dc:9e:31:27:99:44:01:cb:e5:
19:00:3c:33:8c:9e:52:6c:e2:83:37:22:42:cf:55:fa:42:ff:
b6:d4:bb:c8:c8:be:26:fa:26:0e:da:fd:48:4a:89:39:9d:4e:
ea:a8:e2:f9:1e:30:de:b5:e7:f3:8c:04:73:12:a8:25:86:ac:
d9:ca:f0:99:9e:63:35:ff:66:f6:3a:61:81:9f:bc:a5:d4:55:
67:ca:12:ab:f3:11:28:bc:e2:90:fb:89:b1:f7:2b:72:a0:96:
e2:d0:09:c6:12:16:37:35:97:fd:65:54:8f:4c:b2:e3:e0:25:
4f:b3:36:f7:b3:52:9e:e8:0f:95:c2:f3:02:f4:d5:8e:03:b4:
1c:cf:f6:a4:d6:85:5a:fb:65:54:da:34:b0:90:4e:c9:1a:a6:
38:1b:54:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:34 2026 by rpki-client