Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/pNQEQwwSVbDCMLAveVXd1mwHJeQ.roa
File: pNQEQwwSVbDCMLAveVXd1mwHJeQ.roa (raw, json)
Hash identifier: dBVLbfqlR4GtBzx1f02M/qqFPs/aMyQuLiXl/XvXTiA=
Subject key identifier: A4:D4:04:43:0C:12:55:B0:C2:30:B0:2F:79:55:DD:D6:6C:07:25:E4
Certificate issuer: /CN=30019bc81de4aa4eb29f9b47981c17f1a0b2ba72
Certificate serial: 019FE04ADFA9B312C3F62462547B14A2C205
Authority key identifier: 30:01:9B:C8:1D:E4:AA:4E:B2:9F:9B:47:98:1C:17:F1:A0:B2:BA:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/pNQEQwwSVbDCMLAveVXd1mwHJeQ.roa
Signing time: Sat 08 Aug 2026 07:33:50 +0000
ROA not before: Sat 08 Aug 2026 07:33:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210301
IP address blocks: 109.207.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 17:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e0:4a:df:a9:b3:12:c3:f6:24:62:54:7b:14:a2:c2:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30019bc81de4aa4eb29f9b47981c17f1a0b2ba72
Validity
Not Before: Aug 8 07:33:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a4d404430c1255b0c230b02f7955ddd66c0725e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:6c:78:ec:aa:25:7f:81:a3:35:f4:1d:d3:1b:
6a:37:eb:d5:c3:60:8b:c7:f7:97:38:b2:85:55:c2:
04:73:40:62:70:f5:a9:77:ea:21:9f:83:16:aa:a1:
7a:9c:b3:bb:9c:fb:22:03:c1:06:e2:f7:1c:00:23:
c3:f9:b2:ff:17:25:92:44:a6:98:56:86:a1:39:e8:
2d:32:c1:d0:1e:be:d5:7f:08:6a:dd:81:00:63:a9:
21:65:a0:cd:8c:e3:27:ed:66:97:0b:a8:be:95:4f:
a1:32:11:74:96:73:49:f5:0e:26:0f:be:cb:e6:82:
b6:d4:be:a2:02:a7:84:10:49:37:1c:50:30:66:00:
29:e4:49:44:df:09:a3:78:ea:0a:57:e3:4d:c7:6a:
70:95:9c:42:b7:b2:5e:ef:2b:07:72:fa:38:0b:99:
af:91:e3:39:3c:30:bb:8d:87:ed:51:ed:04:0c:4f:
38:42:2a:a2:b9:1d:04:3f:0d:69:8b:50:b4:57:e1:
b4:0f:26:e8:9e:c6:39:c3:bd:56:99:5a:01:e6:f9:
1f:3a:fa:d2:3c:cd:8f:ee:42:56:78:a6:9e:b4:a2:
7f:a6:ab:2c:18:00:03:73:36:63:46:ff:38:e0:92:
e7:a9:9f:8d:3d:c3:34:05:81:4d:5a:d4:62:39:16:
14:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A4:D4:04:43:0C:12:55:B0:C2:30:B0:2F:79:55:DD:D6:6C:07:25:E4
X509v3 Authority Key Identifier:
keyid:30:01:9B:C8:1D:E4:AA:4E:B2:9F:9B:47:98:1C:17:F1:A0:B2:BA:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAGbyB3kqk6yn5tHmBwX8aCyunI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/pNQEQwwSVbDCMLAveVXd1mwHJeQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/20aab3-0e17-4be2-9870-e292d7a7a4b1/1/MAGbyB3kqk6yn5tHmBwX8aCyunI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.207.71.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:3e:51:f4:7e:96:c3:46:7a:56:ac:3f:6c:a9:a7:1f:b8:27:
97:4a:79:54:31:4a:c3:fb:e3:3c:79:5d:84:3a:fa:ae:92:27:
12:8b:86:50:f4:6d:6a:d7:40:aa:b8:93:d2:71:74:d1:e9:49:
f1:94:2d:67:19:47:e5:d4:fa:1a:ca:81:d5:2b:73:ce:8b:bf:
8e:ad:c4:a8:42:0e:48:24:5f:46:f9:3d:55:a7:4c:e7:3d:f5:
88:d4:2e:dd:c9:e2:ce:61:5a:04:f7:24:69:ba:b7:22:e7:d2:
11:ef:ba:25:82:0b:d1:7c:45:48:d2:40:5a:45:f1:6f:81:07:
eb:89:8d:6a:14:f5:5d:d2:93:e9:9c:8c:46:40:1a:ed:69:80:
9b:32:64:a6:9e:34:e7:21:c5:76:cd:28:2c:b3:ec:00:0a:47:
e3:dc:e4:30:60:00:23:b1:56:3a:3e:8f:b6:72:7e:cd:80:3a:
6f:42:10:3c:50:df:8d:d5:c0:fb:1f:ea:40:7e:0c:1c:8f:29:
e9:6f:18:0b:65:aa:8a:3a:a5:7a:2f:e3:ab:4f:b8:bb:17:61:
82:9b:a8:9f:6a:4a:01:4c:7c:c9:6f:b2:cd:9b:30:2f:93:01:
e6:70:4c:f5:36:6d:59:64:57:62:c4:08:f2:a9:16:5b:3f:64:
82:c4:d4:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 03:33:20 2026 by rpki-client