Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Q0njCBRA3BVY0cJ5naPPOWCy8yc.roa
File: Q0njCBRA3BVY0cJ5naPPOWCy8yc.roa (raw, json)
Hash identifier: 67k9tNC44xH4CzKW/R1wkK6TTuaHcIG+PPan/RwuwpA=
Subject key identifier: 43:49:E3:08:14:40:DC:15:58:D1:C2:79:9D:A3:CF:39:60:B2:F3:27
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F2368FFFA4FE9DC9A8CDE9A55803BD16C
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Q0njCBRA3BVY0cJ5naPPOWCy8yc.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47299
IP address blocks: 195.65.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ff:fa:4f:e9:dc:9a:8c:de:9a:55:80:3b:d1:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4349e3081440dc1558d1c2799da3cf3960b2f327
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:eb:6d:c8:b4:78:58:c6:05:ac:64:23:f7:51:
c3:b2:12:f4:3c:01:3a:27:09:e3:41:92:d7:5c:0a:
1d:9d:bc:dd:dd:d8:fe:c7:df:d4:ce:0c:31:11:16:
6a:02:6a:64:f6:e1:f7:27:d6:22:2b:91:1c:d6:0d:
20:6d:05:79:31:74:c7:b0:5b:6e:35:f1:07:07:17:
a4:33:95:e6:91:f2:c4:24:61:27:74:2c:2e:c2:bb:
e6:5e:ad:c5:64:d6:87:f1:2e:5e:f8:84:aa:79:76:
e7:51:c3:7a:13:40:8d:4f:db:5e:47:23:e6:b1:ac:
32:f8:6e:89:5d:85:3b:0f:03:19:c2:e1:6f:c1:e5:
5d:d4:5b:cf:72:df:9e:ef:5b:1a:b2:10:00:63:37:
1a:e6:23:d3:c1:c1:0a:08:02:a6:a0:de:3b:b3:73:
b6:0c:9c:7e:24:8a:d4:ad:48:0c:13:9d:8e:3b:a9:
16:b6:bd:d7:2b:3a:ee:7f:ef:61:7c:34:1f:3b:c9:
9c:ad:10:2b:ae:7f:a5:03:d9:06:8c:12:16:3f:c4:
f7:42:61:5c:7f:91:63:09:62:b1:27:95:75:04:e2:
9e:bf:e4:8a:21:1b:13:db:6a:f5:83:e9:a4:67:8e:
08:db:12:e8:c4:ca:54:fc:c6:a9:60:c0:b0:1b:d8:
71:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:49:E3:08:14:40:DC:15:58:D1:C2:79:9D:A3:CF:39:60:B2:F3:27
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/Q0njCBRA3BVY0cJ5naPPOWCy8yc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.65.37.0/24
Signature Algorithm: sha256WithRSAEncryption
94:e2:a1:ed:47:e9:15:89:84:8e:65:9b:be:a8:ec:ec:bb:93:
70:fb:02:5e:51:ad:fa:d0:42:7c:47:4b:7a:a2:f9:2f:63:63:
db:d0:1a:51:b4:bd:57:10:59:d3:d9:cd:ae:e0:7c:53:eb:0f:
2d:28:ad:41:d3:eb:dc:9d:69:2d:f9:b1:84:09:86:13:15:7e:
78:2d:d3:38:f9:18:44:5b:6e:87:20:57:bf:ee:80:86:7e:6a:
e2:5b:d7:06:42:1c:89:35:61:01:49:dc:48:a3:dd:5a:e7:ec:
46:c6:fc:00:6d:52:03:df:d9:8a:7d:1e:0c:bb:a0:31:bc:f7:
bf:99:a1:f1:29:9d:e7:1c:5b:98:c7:f1:dd:f4:fd:66:24:88:
88:3b:5c:dc:ed:4c:5f:7e:6e:d5:75:81:72:4b:69:11:b7:18:
16:55:18:00:05:34:09:b4:2a:28:9d:4d:d5:ba:de:3c:a4:44:
7a:07:6b:b3:31:de:b3:f1:6b:59:11:dd:28:7f:9b:08:be:9f:
63:26:9e:69:31:c9:1b:a7:5e:4c:0f:6f:9e:8a:13:51:8b:0c:
74:77:c1:d3:94:af:85:6c:75:25:88:f4:7e:07:52:69:e8:29:
4d:c2:90:5f:ed:4d:91:41:22:2b:03:e5:f4:83:ce:66:a1:6c:
a8:9e:fd:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:55:47 2026 by rpki-client