Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3f/0fa465-0df7-4472-a970-7ae05f84af7c/1/q49UFqV_kRX5S0jJcOkpEAXQ20k.roa
File: q49UFqV_kRX5S0jJcOkpEAXQ20k.roa (raw, json)
Hash identifier: jB6UXh2yk562ByJ/7r7rk4TdhNq3RxFY9KwF4yoZi24=
Subject key identifier: AB:8F:54:16:A5:7F:91:15:F9:4B:48:C9:70:E9:29:10:05:D0:DB:49
Certificate issuer: /CN=b5c05ccd28c0c527d79e26397e33f5e1537ee2e6
Certificate serial: 01A0D97F9D18058320B98407B6443675A88E
Authority key identifier: B5:C0:5C:CD:28:C0:C5:27:D7:9E:26:39:7E:33:F5:E1:53:7E:E2:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tcBczSjAxSfXniY5fjP14VN-4uY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3f/0fa465-0df7-4472-a970-7ae05f84af7c/1/q49UFqV_kRX5S0jJcOkpEAXQ20k.roa
Signing time: Fri 25 Sep 2026 16:56:54 +0000
ROA not before: Fri 25 Sep 2026 16:56:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219133
IP address blocks: 157.173.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3f/0fa465-0df7-4472-a970-7ae05f84af7c/1/tcBczSjAxSfXniY5fjP14VN-4uY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3f/0fa465-0df7-4472-a970-7ae05f84af7c/1/tcBczSjAxSfXniY5fjP14VN-4uY.mft
rsync://rpki.ripe.net/repository/DEFAULT/tcBczSjAxSfXniY5fjP14VN-4uY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Nov 2026 10:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d9:7f:9d:18:05:83:20:b9:84:07:b6:44:36:75:a8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5c05ccd28c0c527d79e26397e33f5e1537ee2e6
Validity
Not Before: Sep 25 16:56:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab8f5416a57f9115f94b48c970e9291005d0db49
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:77:07:3f:72:6e:97:75:ce:d1:90:5b:48:73:
95:8d:79:88:5d:9e:1f:06:82:c4:01:8e:a0:3a:37:
57:f2:00:4b:e6:1e:46:54:c6:1f:d9:dc:c3:b4:3f:
b6:e1:ea:e7:71:17:33:13:15:c3:76:0b:74:40:1e:
45:a4:aa:b3:00:88:40:2c:9c:26:0e:a6:ed:6e:af:
05:1e:7f:d0:29:bc:a3:4d:33:9a:90:1b:f0:48:56:
94:1e:14:45:78:de:f9:05:e5:e3:ef:5b:a7:30:7d:
6a:21:5d:f4:23:f9:74:e6:cc:70:8e:0e:91:9f:97:
77:57:6e:fc:f1:1a:10:c3:a3:f1:c2:2e:98:4b:1a:
b9:eb:42:b9:36:91:8b:b1:a3:89:5f:3c:66:7f:c3:
27:4b:0d:de:1c:7d:3e:1b:50:d9:65:b4:f4:05:9a:
75:0d:41:f7:a4:74:08:c2:fc:7f:4e:78:60:d6:54:
20:5d:ad:8f:46:ea:d1:f2:bd:d8:c8:ca:73:19:64:
55:68:38:c0:af:9e:f7:56:87:98:5e:9e:56:e8:5a:
39:c9:80:ba:ff:26:31:da:e6:02:14:46:b0:78:ff:
8a:d6:ff:fd:dc:0d:92:cb:a0:95:9f:1c:1e:92:36:
5b:ba:50:12:27:ed:30:3f:58:bc:26:b4:b4:08:42:
e5:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8F:54:16:A5:7F:91:15:F9:4B:48:C9:70:E9:29:10:05:D0:DB:49
X509v3 Authority Key Identifier:
keyid:B5:C0:5C:CD:28:C0:C5:27:D7:9E:26:39:7E:33:F5:E1:53:7E:E2:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tcBczSjAxSfXniY5fjP14VN-4uY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0fa465-0df7-4472-a970-7ae05f84af7c/1/q49UFqV_kRX5S0jJcOkpEAXQ20k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3f/0fa465-0df7-4472-a970-7ae05f84af7c/1/tcBczSjAxSfXniY5fjP14VN-4uY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.173.69.0/24
Signature Algorithm: sha256WithRSAEncryption
56:dc:90:bf:07:9f:54:b6:4d:5d:03:b1:f3:aa:59:2b:b9:b6:
c8:70:79:27:46:3b:90:0d:e6:24:76:14:fa:da:fa:d6:59:1e:
1f:18:d4:a5:fb:18:df:91:53:7d:a8:18:07:d6:25:14:6b:55:
e4:36:59:50:fc:3e:f6:46:47:46:69:0f:d3:e5:a8:64:00:a3:
7f:10:46:81:dd:5a:6e:f9:b0:19:07:bb:e8:fe:54:1b:15:01:
ee:5f:c7:f2:77:84:4e:11:94:29:f5:fd:39:82:23:29:4a:df:
7f:2d:89:fd:b0:f4:c3:e0:53:99:3e:52:e9:34:e3:e4:ef:a1:
da:cd:33:4c:15:dd:a2:02:44:6b:09:43:4f:0e:57:e7:47:87:
8f:59:71:1e:1b:9f:6e:61:18:f8:75:5f:be:43:03:10:74:53:
9c:5a:db:14:05:a5:e3:58:a7:b1:68:45:e9:2f:66:37:f6:9d:
c0:54:21:fd:43:90:45:2c:b2:2c:61:6a:e1:5c:71:0f:a7:15:
56:72:38:b2:21:f5:ac:67:f3:79:b2:72:5f:9b:48:b8:25:ab:
87:7d:cb:fc:ee:30:33:b5:52:19:fa:19:b9:64:12:23:0d:1d:
c5:b5:fa:8f:02:2e:bf:0d:e3:82:ca:f4:4a:75:5c:ed:e7:1d:
13:15:cf:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 1 17:33:49 2026 by rpki-client