Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/IQgQh0oAWz7NWCQNE72hJGi8Ce4.roa
File: IQgQh0oAWz7NWCQNE72hJGi8Ce4.roa (raw, json)
Hash identifier: Iy6WQLvcZBlbUm+xUMal+Ky5A16lmB/IVyKJ/uVkAVk=
Subject key identifier: 21:08:10:87:4A:00:5B:3E:CD:58:24:0D:13:BD:A1:24:68:BC:09:EE
Certificate issuer: /CN=bf84113545d9000760f66062a4221933a2e959d8
Certificate serial: 01A00C2CF412FD2FB96E9473920FAF71FDFD
Authority key identifier: BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/IQgQh0oAWz7NWCQNE72hJGi8Ce4.roa
Signing time: Sun 16 Aug 2026 20:04:27 +0000
ROA not before: Sun 16 Aug 2026 20:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198741
IP address blocks: 2a0e:4001:aff::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0c:2c:f4:12:fd:2f:b9:6e:94:73:92:0f:af:71:fd:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf84113545d9000760f66062a4221933a2e959d8
Validity
Not Before: Aug 16 20:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=210810874a005b3ecd58240d13bda12468bc09ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:a6:ea:15:27:92:2d:cc:aa:90:66:ea:1e:ba:
58:79:18:e3:44:1f:51:9b:7e:87:14:7d:30:1a:07:
8f:e8:06:15:ff:38:71:f8:c0:e5:45:9d:29:6d:96:
99:d1:14:a8:87:26:5b:e1:4e:80:1b:b8:be:b9:e3:
48:5a:f4:7a:42:04:ea:7d:2b:2f:ee:b7:6d:15:35:
6a:66:95:4f:e8:61:d8:db:fb:d7:a2:8e:6c:07:27:
27:a1:a4:4a:f9:4e:2a:2e:cd:2f:52:92:89:f0:da:
89:da:22:e3:51:91:22:f7:8d:d5:58:a8:96:1f:40:
41:ed:d2:b8:5a:e8:3b:ef:a8:47:45:e0:5d:bf:7d:
66:90:31:d5:9f:ad:27:63:d1:4d:23:08:92:df:c9:
bc:40:b4:c5:3e:3e:37:ce:b7:06:9a:c9:b5:ba:86:
22:6d:22:83:1d:b6:c9:c7:9e:da:79:c0:75:7b:4a:
21:7b:83:78:67:d8:f7:a4:b8:cd:86:17:7e:94:0d:
d9:84:24:87:56:46:0a:49:3c:57:0d:75:46:11:ca:
b0:8c:b9:75:c8:48:a8:6d:74:63:af:b2:8b:d5:5d:
ea:56:6e:91:26:e8:36:52:1c:62:f1:2f:24:c5:9e:
2d:f9:fa:49:5d:27:2b:38:ca:02:23:be:69:52:1b:
7d:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:08:10:87:4A:00:5B:3E:CD:58:24:0D:13:BD:A1:24:68:BC:09:EE
X509v3 Authority Key Identifier:
keyid:BF:84:11:35:45:D9:00:07:60:F6:60:62:A4:22:19:33:A2:E9:59:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4QRNUXZAAdg9mBipCIZM6LpWdg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/IQgQh0oAWz7NWCQNE72hJGi8Ce4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/30dc85-2dd8-4b1c-b151-4bd63adc7354/1/v4QRNUXZAAdg9mBipCIZM6LpWdg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:4001:aff::/48
Signature Algorithm: sha256WithRSAEncryption
70:c4:65:1b:5a:fd:81:46:0c:83:82:2e:3f:50:cb:3e:65:26:
26:c7:66:1d:8f:91:ae:e8:51:3b:a2:6e:f0:42:74:13:7e:66:
17:27:97:81:f4:7d:b9:8b:a3:17:92:53:7c:e4:22:65:f3:77:
89:e6:3f:19:c5:e2:64:e6:21:63:60:52:98:00:f8:a6:a8:11:
65:25:10:61:33:2e:38:f3:f7:7a:57:f2:86:05:05:4e:ef:d5:
fa:5c:bf:ee:d5:2e:23:50:6d:44:e8:28:3f:f6:6f:cf:48:9e:
86:37:88:87:7c:6e:3b:b6:e4:09:ff:da:e6:d9:b6:0e:9d:05:
ef:07:83:11:5f:2c:f1:38:ee:fc:3e:0c:fe:87:d5:67:f2:fb:
2c:8b:c3:61:25:3f:4f:84:ae:4f:5c:59:00:1b:f1:dc:0d:55:
d4:35:07:db:a7:8b:9f:89:27:27:c0:dc:57:00:40:04:77:50:
95:75:3f:24:68:92:49:2b:84:ba:86:ee:fc:8f:95:e8:75:48:
e3:d5:28:bf:95:4c:5c:19:33:b4:26:d7:1e:bb:72:07:5d:18:
84:31:6d:b9:98:ce:dd:ac:d8:35:c3:5b:1c:7e:2e:3c:e0:17:
59:ed:61:f6:b0:04:1e:4d:95:e8:52:88:a8:20:28:15:9e:27:
37:6f:fc:a6
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaAMLPQS/S+5bpRzkg+vcf39MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmODQxMTM1NDVkOTAwMDc2MGY2NjA2MmE0MjIxOTMzYTJl
OTU5ZDgwHhcNMjYwODE2MjAwNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygyMTA4MTA4NzRhMDA1YjNlY2Q1ODI0MGQxM2JkYTEyNDY4YmMwOWVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi6bqFSeSLcyqkGbqHrpYeRjjRB9R
m36HFH0wGgeP6AYV/zhx+MDlRZ0pbZaZ0RSohyZb4U6AG7i+ueNIWvR6QgTqfSsv
7rdtFTVqZpVP6GHY2/vXoo5sBycnoaRK+U4qLs0vUpKJ8NqJ2iLjUZEi943VWKiW
H0BB7dK4Wug776hHReBdv31mkDHVn60nY9FNIwiS38m8QLTFPj43zrcGmsm1uoYi
bSKDHbbJx57aecB1e0ohe4N4Z9j3pLjNhhd+lA3ZhCSHVkYKSTxXDXVGEcqwjLl1
yEiobXRjr7KL1V3qVm6RJug2Uhxi8S8kxZ4t+fpJXScrOMoCI75pUht9RQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFCEIEIdKAFs+zVgkDRO9oSRovAnuMB8GA1UdIwQY
MBaAFL+EETVF2QAHYPZgYqQiGTOi6VnYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEt
NGJkNjNhZGM3MzU0LzEvSVFnUWgwb0FXejdOV0NRTkU3MmhKR2k4Q2U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS8zMGRjODUtMmRkOC00YjFjLWIxNTEtNGJkNjNhZGM3MzU0
LzEvdjRRUk5VWFpBQWRnOW1CaXBDSVpNNkxwV2RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKg5AAQr/
MA0GCSqGSIb3DQEBCwUAA4IBAQBwxGUbWv2BRgyDgi4/UMs+ZSYmx2Ydj5Gu6FE7
om7wQnQTfmYXJ5eB9H25i6MXklN85CJl83eJ5j8ZxeJk5iFjYFKYAPimqBFlJRBh
My448/d6V/KGBQVO79X6XL/u1S4jUG1E6Cg/9m/PSJ6GN4iHfG47tuQJ/9rm2bYO
nQXvB4MRXyzxOO78Pgz+h9Vn8vssi8NhJT9PhK5PXFkAG/HcDVXUNQfbp4ufiScn
wNxXAEAEd1CVdT8kaJJJK4S6hu78j5XodUjj1Si/lUxcGTO0Jtceu3IHXRiEMW25
mM7drNg1w1scfi484BdZ7WH2sAQeTZXoUoioICgVnic3b/ym
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:56:25 2026 by rpki-client