Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/DQ1yVesejJpDnZvd2JLWH_7gAEU.roa
File: DQ1yVesejJpDnZvd2JLWH_7gAEU.roa (raw, json)
Hash identifier: iuHd9st9MGEOE3UuhPG4vRJ6eBtZs6iPypxGkfqTQSM=
Subject key identifier: 0D:0D:72:55:EB:1E:8C:9A:43:9D:9B:DD:D8:92:D6:1F:FE:E0:00:45
Certificate issuer: /CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Certificate serial: 019E72817424442BD9FC363D9581B6C77C7D
Authority key identifier: B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/DQ1yVesejJpDnZvd2JLWH_7gAEU.roa
Signing time: Fri 29 May 2026 06:52:26 +0000
ROA not before: Fri 29 May 2026 06:52:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41689
IP address blocks: 5.63.11.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.mft
rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 20:26:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:72:81:74:24:44:2b:d9:fc:36:3d:95:81:b6:c7:7c:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6c167dfa9882b2aa8f84595f58a97c305ca43c5
Validity
Not Before: May 29 06:52:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d0d7255eb1e8c9a439d9bddd892d61ffee00045
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:bf:44:3b:d6:54:23:88:91:34:31:2f:0b:f0:
7f:b9:2a:13:2b:a7:11:e7:04:c9:13:ea:79:1d:dd:
08:ca:e1:a5:e0:9b:ad:7d:b7:83:a6:b7:f1:5b:26:
4e:c6:66:bc:c2:fb:9a:b6:5f:02:dd:e1:78:d7:14:
25:1f:a1:f2:94:e7:b0:4e:39:36:53:c6:59:e8:07:
a1:fb:ca:3d:91:31:8f:cc:90:dc:c5:a5:2b:31:6f:
1e:64:6b:c4:b4:f0:75:c7:bb:02:9d:4a:88:64:ea:
f6:73:e3:35:d9:cb:78:58:b0:c6:de:e0:7c:1b:a5:
cb:cd:25:7e:e1:a3:38:d7:c8:79:ea:11:9d:68:d8:
62:c1:cc:ae:df:a6:6a:29:fb:a0:02:c8:48:b3:2f:
57:9c:c5:fb:e2:a0:55:ef:f5:38:67:1c:4e:5d:b8:
b8:e1:5e:e6:69:d7:a1:c9:c7:26:ab:ee:9b:6f:99:
06:78:bd:91:20:7f:85:0a:97:c0:99:c0:37:30:d2:
11:ed:97:89:9d:b9:10:e9:68:e9:08:3a:d8:53:69:
74:05:d5:03:cf:d2:a6:a8:fb:29:bd:7a:fc:a6:3a:
55:c5:98:b1:32:cf:50:c3:eb:fe:87:8a:b3:9e:d9:
67:ef:c8:d9:8a:83:44:8a:f0:8b:88:27:6d:c6:ac:
80:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0D:72:55:EB:1E:8C:9A:43:9D:9B:DD:D8:92:D6:1F:FE:E0:00:45
X509v3 Authority Key Identifier:
keyid:B6:C1:67:DF:A9:88:2B:2A:A8:F8:45:95:F5:8A:97:C3:05:CA:43:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tsFn36mIKyqo-EWV9YqXwwXKQ8U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/DQ1yVesejJpDnZvd2JLWH_7gAEU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/73beeb-6a05-4cca-86be-acfc3d2c2522/1/tsFn36mIKyqo-EWV9YqXwwXKQ8U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.63.11.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f1:9c:0f:1e:55:de:bd:e0:14:df:75:c1:0e:b6:63:94:52:
65:f9:33:1c:a7:03:1f:34:43:1b:3b:34:7a:23:5d:dd:cd:63:
60:24:45:cb:49:4b:da:ac:55:92:2e:75:63:d9:1a:e4:da:df:
c0:27:46:79:3e:bf:b6:20:99:75:0f:c2:71:70:f7:c6:87:e0:
6d:bd:dc:51:ec:f3:72:e1:c2:47:36:ee:bb:95:46:a8:83:6d:
37:af:a0:b9:f4:ca:29:1f:b6:34:24:21:92:dd:6a:0d:4a:87:
da:77:ca:ca:70:88:ef:3d:de:6f:b2:13:e8:d0:3c:18:da:b3:
a2:76:f0:0c:a1:00:1c:2f:8b:10:80:fd:00:51:ef:7d:cc:27:
71:e6:e2:61:d9:0c:c9:1d:a0:10:f7:6c:ed:4c:ab:a2:f9:f5:
69:dc:74:66:a9:2b:ca:d9:f9:26:2b:77:67:c5:c0:ac:52:bc:
c8:ec:d5:c1:95:1d:a7:63:3a:9c:6e:63:e6:15:d5:9b:d6:65:
29:b7:d4:15:f3:cb:1d:51:ee:40:47:a8:b9:f3:43:cd:2b:dd:
b4:ad:58:77:b2:a6:87:ec:0a:74:a8:10:17:99:28:86:12:91:
66:9f:d1:31:48:d6:c6:ac:7a:47:9d:9a:d2:16:db:ca:8d:7d:
76:cb:6a:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 05:31:02 2026 by rpki-client