Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/qZg3vuSLjrxt2okeYN8jOZEzgyM.roa
File: qZg3vuSLjrxt2okeYN8jOZEzgyM.roa (raw, json)
Hash identifier: 5PbHk2X8krzBF8kEH0yjcg64xwxwW6OFin9CiO9Dif4=
Subject key identifier: A9:98:37:BE:E4:8B:8E:BC:6D:DA:89:1E:60:DF:23:39:91:33:83:23
Certificate issuer: /CN=ae02cd8026c60c3c883648a0bff7116cf26707d6
Certificate serial: 019F236856ABFCCF6FA3C227071BFD8A898E
Authority key identifier: AE:02:CD:80:26:C6:0C:3C:88:36:48:A0:BF:F7:11:6C:F2:67:07:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rgLNgCbGDDyINkigv_cRbPJnB9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/qZg3vuSLjrxt2okeYN8jOZEzgyM.roa
Signing time: Thu 02 Jul 2026 15:17:48 +0000
ROA not before: Thu 02 Jul 2026 15:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198949
IP address blocks: 147.235.0.0/24 maxlen: 24
147.235.69.0/24 maxlen: 24
147.235.101.0/24 maxlen: 24
147.235.185.0/24 maxlen: 24
147.235.186.0/24 maxlen: 24
147.235.187.0/24 maxlen: 24
147.235.188.0/24 maxlen: 24
147.235.236.0/24 maxlen: 24
147.235.237.0/24 maxlen: 24
147.235.239.0/24 maxlen: 24
147.235.242.0/24 maxlen: 24
147.235.243.0/24 maxlen: 24
147.235.244.0/24 maxlen: 24
147.235.245.0/24 maxlen: 24
147.235.246.0/24 maxlen: 24
147.235.247.0/24 maxlen: 24
147.235.250.0/24 maxlen: 24
147.235.251.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/rgLNgCbGDDyINkigv_cRbPJnB9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:56:ab:fc:cf:6f:a3:c2:27:07:1b:fd:8a:89:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae02cd8026c60c3c883648a0bff7116cf26707d6
Validity
Not Before: Jul 2 15:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a99837bee48b8ebc6dda891e60df233991338323
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:18:18:8a:20:8d:e7:b3:5c:9a:aa:73:d6:87:
36:49:53:64:bc:9e:d9:e3:07:3f:21:c1:94:45:0c:
2f:63:fc:15:e8:c9:34:94:f9:c4:f7:1f:7f:25:e8:
4a:f0:1d:81:35:58:ff:96:e6:c7:c4:ac:97:75:d1:
ab:21:c4:41:3d:81:7a:6e:b0:16:0d:2e:0e:1b:01:
ac:25:61:13:45:e2:69:6c:4b:67:6e:f6:ec:2e:1f:
f3:2e:eb:f5:fb:d9:d7:2e:44:13:b7:a7:6e:6d:7e:
53:e4:52:d5:96:29:df:63:cc:09:1d:ab:e2:cc:2f:
34:a7:55:66:0c:6f:48:b2:1f:82:2c:c6:5a:29:50:
c0:b4:75:17:f5:0c:a1:db:85:76:01:3a:02:8d:5f:
59:d9:ee:eb:8b:4d:69:4e:84:a6:96:b1:b1:c9:7c:
f1:00:23:ca:ba:a8:5c:9f:ff:bf:51:32:af:e0:8c:
e4:4b:80:d2:11:c6:eb:eb:80:a6:01:c8:0d:cd:a0:
55:9e:b9:61:f8:e0:0c:0f:4c:25:9c:aa:4a:ba:9d:
5e:bb:3a:66:ae:0c:9f:cf:a8:99:b2:bb:26:61:23:
20:21:3f:38:ef:f0:68:ca:d7:ce:16:2b:9c:a4:cf:
fa:b3:76:c7:e1:56:bf:66:08:99:f5:35:1f:13:c3:
cd:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:98:37:BE:E4:8B:8E:BC:6D:DA:89:1E:60:DF:23:39:91:33:83:23
X509v3 Authority Key Identifier:
keyid:AE:02:CD:80:26:C6:0C:3C:88:36:48:A0:BF:F7:11:6C:F2:67:07:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rgLNgCbGDDyINkigv_cRbPJnB9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/qZg3vuSLjrxt2okeYN8jOZEzgyM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/739b81-3cd3-469c-b954-3553b4ed6794/1/rgLNgCbGDDyINkigv_cRbPJnB9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.235.0.0/24
147.235.69.0/24
147.235.101.0/24
147.235.185.0-147.235.188.255
147.235.236.0/23
147.235.239.0/24
147.235.242.0-147.235.247.255
147.235.250.0/23
Signature Algorithm: sha256WithRSAEncryption
56:b4:d6:a7:f3:64:a1:f5:99:ea:d0:f9:7d:df:a5:31:c4:de:
3b:75:f1:7c:9c:91:d9:f5:8e:c5:53:55:b9:a7:33:fe:bb:71:
f4:75:4d:15:f9:97:32:a1:3c:a0:2f:a3:be:ca:17:e9:34:56:
b7:02:0e:bc:2d:10:b6:d4:6f:09:c6:bf:99:ee:09:d4:72:10:
1d:d0:a7:ec:02:83:c6:13:70:ef:9f:0d:88:9d:9b:35:22:fb:
1c:eb:76:be:99:49:c9:44:a4:68:9b:1d:cc:37:5f:12:4f:87:
f3:45:3a:a7:af:b5:33:4e:10:84:1a:00:76:63:bc:df:f4:63:
f7:6f:ec:cc:7d:e5:26:be:a9:a8:05:3a:a9:12:5e:fc:d2:07:
0c:60:6e:52:00:6d:b7:7c:47:85:99:e3:ae:6f:2c:72:a4:0d:
c0:be:65:e4:5d:c8:5e:90:cb:30:f4:35:e8:b5:c4:e4:e5:ec:
01:06:59:b8:05:0b:c5:8a:ad:18:99:a1:28:e6:da:64:26:20:
2c:12:74:3c:cc:e6:f7:77:a5:b9:15:06:ee:32:17:f1:1c:0e:
d9:e8:9e:1a:06:86:f0:77:a7:96:9d:9a:68:95:d3:62:fa:1b:
ca:ac:9f:53:62:a5:5d:46:fa:5a:6c:35:2d:19:4b:d0:8c:f5:
7d:0f:e9:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:58:53 2026 by rpki-client