Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/x_QvBoOIA6vBeIKgjoFBOXwgqa0.roa
File: x_QvBoOIA6vBeIKgjoFBOXwgqa0.roa (raw, json)
Hash identifier: YumGg/rjGkeZiLzIodCSXvp8gqP2A52SQH7tSRPZWGo=
Subject key identifier: C7:F4:2F:06:83:88:03:AB:C1:78:82:A0:8E:81:41:39:7C:20:A9:AD
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019F23687C4CC0BF1E34EBF36A7DAD455389
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/x_QvBoOIA6vBeIKgjoFBOXwgqa0.roa
Signing time: Thu 02 Jul 2026 15:17:57 +0000
ROA not before: Thu 02 Jul 2026 15:17:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138195
IP address blocks: 194.126.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:7c:4c:c0:bf:1e:34:eb:f3:6a:7d:ad:45:53:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 2 15:17:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c7f42f06838803abc17882a08e8141397c20a9ad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:8a:7b:1b:b9:f9:bf:27:59:bb:e5:37:55:36:
af:37:b9:d6:bf:0d:3c:77:29:84:33:bf:07:05:94:
29:41:e6:14:0e:f3:22:98:c8:3d:f5:45:52:f9:7b:
c5:42:2b:1d:ba:13:5f:73:0d:07:a5:37:19:bf:7b:
3e:59:ae:a7:4e:c7:e5:60:07:a2:69:8a:2c:37:42:
c2:ae:1a:a1:dc:bf:58:a7:89:d2:e7:e4:2b:f6:2e:
26:4e:e2:91:1b:4e:65:e0:02:e1:a7:2e:df:2b:1e:
af:86:c2:16:b6:5b:36:4d:5e:d3:c5:89:94:b1:49:
c8:ed:19:f5:14:f2:59:79:ee:b4:fe:0d:ad:35:12:
3d:38:a6:bb:02:4d:7c:49:35:74:25:c3:16:b3:a5:
4c:dd:c3:0b:ad:f8:94:9a:7a:9b:61:57:a2:67:9d:
b7:4d:f1:1f:3c:15:aa:85:68:1d:09:73:ed:31:79:
43:ae:28:27:2e:39:05:b7:bc:c4:f3:09:f8:2b:8a:
28:f8:e2:47:90:aa:e3:d4:28:4f:77:56:51:8f:87:
ba:93:50:d5:7d:86:2b:5d:18:51:7b:b3:ce:aa:da:
6d:7e:5a:28:f6:c9:6a:4d:4e:28:49:c3:aa:01:66:
95:ba:ff:60:8f:00:72:65:7f:d3:50:5c:c1:85:86:
8a:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:F4:2F:06:83:88:03:AB:C1:78:82:A0:8E:81:41:39:7C:20:A9:AD
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/x_QvBoOIA6vBeIKgjoFBOXwgqa0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.126.215.0/24
Signature Algorithm: sha256WithRSAEncryption
06:2c:2e:bf:30:01:14:a5:f1:2e:70:f5:88:47:88:d1:58:80:
50:cb:5c:6f:d5:8a:0d:a3:57:2f:7c:93:1e:48:98:41:7f:98:
cb:ae:fd:09:05:df:13:9c:24:51:69:55:97:3c:61:49:a4:4d:
4f:60:2d:a9:f2:4c:e6:f1:37:73:72:1d:c4:1e:78:4d:d4:e6:
2b:f8:4e:59:a6:39:b5:d4:c1:66:71:20:36:09:6b:db:6a:3a:
9a:6c:da:55:72:60:be:3a:6b:03:4a:83:f3:31:54:ee:a6:36:
1d:a3:3a:05:05:00:16:a3:6d:9a:1e:30:3f:33:65:06:8c:23:
77:70:a8:d9:a4:e1:0a:3a:54:c8:92:9e:5a:71:69:9c:38:38:
36:66:26:d5:a8:e1:49:6a:12:62:68:6d:b6:7f:af:86:22:30:
ac:b6:b0:fa:c7:1b:4b:21:99:0f:2c:75:25:13:e4:b9:4e:15:
91:12:db:1f:91:e9:e3:4b:c6:8f:6f:57:02:aa:dd:c9:c9:fc:
22:66:60:eb:f1:4b:c2:15:83:75:18:36:3d:22:7b:3d:3c:e4:
81:02:80:d1:21:b4:97:76:9e:09:0f:19:cd:ca:40:e0:b0:d8:
c7:3b:29:49:81:44:b5:2f:b0:6d:c1:4d:96:c9:ac:87:06:9e:
f4:d4:06:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 17:46:54 2026 by rpki-client