Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/rqeGtyDTlh1RD0Bl6ekz0kfmROw.roa
File: rqeGtyDTlh1RD0Bl6ekz0kfmROw.roa (raw, json)
Hash identifier: 2K+J256SefSCQUxPHkRrXtSFRiGIJpB2gFkBQ7pPKWE=
Subject key identifier: AE:A7:86:B7:20:D3:96:1D:51:0F:40:65:E9:E9:33:D2:47:E6:44:EC
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A024D0F0DD87945B771E1734134789FA80
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/rqeGtyDTlh1RD0Bl6ekz0kfmROw.roa
Signing time: Fri 21 Aug 2026 14:54:27 +0000
ROA not before: Fri 21 Aug 2026 14:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 15924
IP address blocks: 160.20.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 15:46:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:d0:f0:dd:87:94:5b:77:1e:17:34:13:47:89:fa:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Aug 21 14:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aea786b720d3961d510f4065e9e933d247e644ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:b9:d6:e8:ce:2e:86:49:e8:20:69:8a:b3:a1:
07:22:ad:29:0e:84:51:aa:64:22:42:79:e9:09:a5:
28:d2:ef:16:a1:01:2e:5a:9a:04:3e:dc:79:96:98:
b0:25:82:15:df:8b:35:45:b9:59:8b:aa:31:3f:38:
72:a8:12:3e:de:d7:fe:da:f5:da:fd:13:83:6d:db:
bc:7a:a3:43:61:22:5b:c8:b0:61:82:d1:75:fe:fb:
8c:f8:66:78:be:12:3c:c1:d2:cf:33:79:f6:9b:a7:
4f:5e:7b:8f:f9:38:2d:b8:a9:88:a6:13:58:65:db:
b2:2e:25:4a:0b:a4:81:2f:ac:65:3a:3e:b4:a5:6d:
b3:da:b8:91:43:02:b8:55:d0:9f:13:b4:42:0c:90:
c1:0c:3a:72:22:33:b5:d3:60:4e:54:a5:f8:9c:33:
78:a1:9f:d9:cf:be:3f:55:27:4f:22:59:d2:49:33:
37:56:b3:eb:bc:c5:3b:b6:b6:af:f5:f1:a1:2b:5d:
27:bb:40:12:57:fd:60:07:25:84:e2:98:af:3d:48:
79:04:1c:4e:29:68:8e:0c:57:7d:70:e8:b1:ba:1f:
a2:bf:d3:86:4f:b4:6d:63:fe:71:b9:11:42:45:f6:
44:79:16:62:21:9a:79:81:d9:71:66:0b:48:9a:4d:
5e:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A7:86:B7:20:D3:96:1D:51:0F:40:65:E9:E9:33:D2:47:E6:44:EC
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/rqeGtyDTlh1RD0Bl6ekz0kfmROw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.20.110.0/24
Signature Algorithm: sha256WithRSAEncryption
50:e8:ad:07:ef:20:30:d4:ed:c3:e4:cd:7a:19:96:33:22:24:
d4:d3:1c:0c:59:4a:b8:a4:d4:85:d8:34:32:1c:af:e5:f7:64:
49:f9:ae:b7:3d:1d:08:d8:99:c3:fe:17:42:31:50:8c:3b:d0:
29:93:b9:e2:a9:7f:53:77:33:95:7d:f8:13:e1:94:b9:37:3c:
7c:bc:df:1b:a3:9c:38:00:52:86:48:93:a6:22:c6:6e:5f:fc:
a2:1e:c6:fd:c2:c1:47:84:0f:81:52:e3:2b:6d:06:e0:82:b7:
13:4e:64:8e:3f:51:ef:0f:db:ab:75:5a:d0:15:c8:90:a1:9f:
b9:c0:99:dd:be:15:99:fd:af:72:6a:c3:42:7e:b1:cf:89:4a:
60:73:1e:1e:f6:f4:50:03:61:0d:3b:2d:81:47:5b:46:c1:8b:
02:f4:95:eb:85:fc:a9:3e:fc:da:29:cc:0a:e3:ef:8f:b5:8a:
69:d0:63:17:e3:1b:6b:06:22:bd:a6:f1:32:1a:43:86:30:eb:
10:e1:db:4a:6c:02:59:4e:a1:f4:45:1d:c7:af:8e:cd:18:6a:
03:ca:de:6b:a5:43:56:59:67:3d:c8:64:52:ea:96:b5:ee:b6:
d9:b3:40:10:3f:e6:b2:2e:ef:12:d3:d0:e9:de:62:6e:f6:c3:
ad:a7:da:e9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaAk0PDdh5Rbdx4XNBNHifqAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjYwODIxMTQ1NDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWE3ODZiNzIwZDM5NjFkNTEwZjQwNjVlOWU5MzNkMjQ3ZTY0NGVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu7nW6M4uhknoIGmKs6EHIq0pDoRR
qmQiQnnpCaUo0u8WoQEuWpoEPtx5lpiwJYIV34s1RblZi6oxPzhyqBI+3tf+2vXa
/RODbdu8eqNDYSJbyLBhgtF1/vuM+GZ4vhI8wdLPM3n2m6dPXnuP+TgtuKmIphNY
ZduyLiVKC6SBL6xlOj60pW2z2riRQwK4VdCfE7RCDJDBDDpyIjO102BOVKX4nDN4
oZ/Zz74/VSdPIlnSSTM3VrPrvMU7trav9fGhK10nu0ASV/1gByWE4pivPUh5BBxO
KWiODFd9cOixuh+iv9OGT7RtY/5xuRFCRfZEeRZiIZp5gdlxZgtImk1eQwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFK6nhrcg05YdUQ9AZenpM9JH5kTsMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvcnFlR3R5RFRsaDFSRDBCbDZla3owa2ZtUk93LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAoBRuMA0G
CSqGSIb3DQEBCwUAA4IBAQBQ6K0H7yAw1O3D5M16GZYzIiTU0xwMWUq4pNSF2DQy
HK/l92RJ+a63PR0I2JnD/hdCMVCMO9Apk7niqX9TdzOVffgT4ZS5Nzx8vN8bo5w4
AFKGSJOmIsZuX/yiHsb9wsFHhA+BUuMrbQbggrcTTmSOP1HvD9urdVrQFciQoZ+5
wJndvhWZ/a9yasNCfrHPiUpgcx4e9vRQA2ENOy2BR1tGwYsC9JXrhfypPvzaKcwK
4++PtYpp0GMX4xtrBiK9pvEyGkOGMOsQ4dtKbAJZTqH0RR3Hr47NGGoDyt5rpUNW
WWc9yGRS6pa17rbZs0AQP+ayLu8S09Dp3mJu9sOtp9rp
-----END CERTIFICATE-----
Generated at Sat Sep 5 00:21:16 2026 by rpki-client