Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/QmdhaMtHTN_hz0nBfvQHAkwJ7Rc.roa
File: QmdhaMtHTN_hz0nBfvQHAkwJ7Rc.roa (raw, json)
Hash identifier: sO6rcS+cSDwbjSCT0RMv1rZcc5PoQJvTaSR3U1N9VEo=
Subject key identifier: 42:67:61:68:CB:47:4C:DF:E1:CF:49:C1:7E:F4:07:02:4C:09:ED:17
Certificate issuer: /CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Certificate serial: 019F41B1E07A53EB6F3FE7FC7D408CFE52CC
Authority key identifier: 45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/QmdhaMtHTN_hz0nBfvQHAkwJ7Rc.roa
Signing time: Wed 08 Jul 2026 12:26:43 +0000
ROA not before: Wed 08 Jul 2026 12:26:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 144.124.208.0/24 maxlen: 24
144.124.210.0/24 maxlen: 24
144.124.211.0/24 maxlen: 24
144.124.212.0/24 maxlen: 24
144.124.213.0/24 maxlen: 24
144.124.214.0/24 maxlen: 24
144.124.215.0/24 maxlen: 24
158.94.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:b1:e0:7a:53:eb:6f:3f:e7:fc:7d:40:8c:fe:52:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4593b9ac0a486b0037765d605c8b1c8104046f0a
Validity
Not Before: Jul 8 12:26:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42676168cb474cdfe1cf49c17ef407024c09ed17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:4b:69:b1:0d:cc:05:d9:a7:4d:17:ac:5e:79:
d4:aa:d9:bf:0c:38:2f:67:c7:d3:4b:50:70:59:ca:
c4:ab:42:20:f9:1a:43:b3:56:60:e6:03:62:ce:96:
aa:af:db:7c:58:08:8d:52:5a:62:2e:05:2b:bc:01:
87:a2:00:ec:be:40:7d:3c:06:cf:bf:8d:96:4d:1a:
c3:49:65:12:a6:aa:d4:44:f7:cd:3e:b5:00:8f:d1:
60:dd:bd:6a:0c:30:c6:2a:91:8d:ec:b7:fb:e0:e0:
5e:2d:e2:24:39:e5:3a:7f:1e:13:97:16:fa:7c:59:
d0:76:19:07:70:61:55:4c:c4:d8:0d:20:5a:25:a2:
b7:1e:5f:93:a5:37:e8:87:43:76:39:36:b4:2c:58:
a6:22:48:ff:28:46:27:2a:ff:03:43:ac:da:fb:d2:
79:1d:57:9a:41:c5:c5:82:80:75:26:b1:96:c2:58:
12:4b:4b:9b:0d:3f:7a:69:db:d3:b0:2f:4d:c1:3a:
8e:eb:aa:56:7d:81:4e:76:18:e9:64:c0:64:81:ca:
b3:a1:27:27:e4:dc:7f:18:0e:7d:62:21:db:8c:c7:
7b:75:fb:1e:1a:8c:cd:1b:c0:39:a6:20:f6:17:98:
4e:0e:f0:e1:3f:89:f0:41:c2:8a:54:e4:41:26:f4:
0f:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:67:61:68:CB:47:4C:DF:E1:CF:49:C1:7E:F4:07:02:4C:09:ED:17
X509v3 Authority Key Identifier:
keyid:45:93:B9:AC:0A:48:6B:00:37:76:5D:60:5C:8B:1C:81:04:04:6F:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZO5rApIawA3dl1gXIscgQQEbwo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/QmdhaMtHTN_hz0nBfvQHAkwJ7Rc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/05b0d2-16ba-4d71-a218-43e6bff9a25e/1/RZO5rApIawA3dl1gXIscgQQEbwo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
144.124.208.0/24
144.124.210.0-144.124.215.255
158.94.212.0/24
Signature Algorithm: sha256WithRSAEncryption
19:8b:dc:6c:c3:97:20:6b:54:1f:36:21:5d:24:e6:84:43:83:
3a:dd:f2:18:e4:81:c2:a8:d2:c4:da:07:b7:c2:b2:ed:04:1b:
c4:37:f0:a7:55:ed:8f:c2:69:2b:c7:ed:e1:7c:a9:47:63:6b:
75:22:e7:dd:c0:1e:35:93:e9:84:d6:4e:d0:82:51:58:5d:6b:
0c:0c:e7:19:8c:09:1c:1e:58:88:5e:3d:6b:fe:5f:d6:ff:a9:
e3:ea:98:d0:40:e4:f4:08:8b:6f:b5:d3:f6:6b:e0:df:77:bd:
5b:25:94:9e:66:e6:2b:18:84:a5:e9:f8:04:e3:c5:89:a6:3e:
21:82:19:77:89:de:78:fa:2f:c8:7a:17:8d:6e:6f:84:b1:97:
b3:52:04:ee:69:8d:8e:1d:9f:bd:43:e5:3a:10:37:b3:0c:ae:
40:4d:50:10:29:76:18:c8:55:68:8e:a4:b8:65:92:ca:b2:4f:
8c:49:01:80:95:bb:76:b5:70:56:f6:88:ab:34:94:c4:5d:eb:
62:56:c2:fb:2f:37:92:c8:35:df:41:f9:44:f9:97:74:0f:69:
57:db:59:e3:75:5c:e8:6a:a5:c6:dc:09:3b:32:94:25:d1:3b:
57:e0:8d:74:35:ee:43:fd:80:b6:4b:b6:0e:a3:e0:45:81:96:
8c:3a:cf:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:45 2026 by rpki-client