Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Q_KudnNplnM7xTKeRceGVD0U8DU.roa
File: Q_KudnNplnM7xTKeRceGVD0U8DU.roa (raw, json)
Hash identifier: HUQPObGQz5J+hBdukTqmwA22jSbr23qzB77Wm8N/Y5Y=
Subject key identifier: 43:F2:AE:76:73:69:96:73:3B:C5:32:9E:45:C7:86:54:3D:14:F0:35
Certificate issuer: /CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Certificate serial: 01A05915224F68185C96A15FBE42E1122B3F
Authority key identifier: 35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Q_KudnNplnM7xTKeRceGVD0U8DU.roa
Signing time: Mon 31 Aug 2026 18:29:12 +0000
ROA not before: Mon 31 Aug 2026 18:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 157.5.48.0/22 maxlen: 22
157.5.52.0/22 maxlen: 22
157.5.56.0/22 maxlen: 22
157.5.60.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 18:29:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:59:15:22:4f:68:18:5c:96:a1:5f:be:42:e1:12:2b:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35ef79c51e3fa084332064aa0b83608d6e41c12b
Validity
Not Before: Aug 31 18:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43f2ae76736996733bc5329e45c786543d14f035
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:01:09:88:8d:11:0e:43:b5:90:fe:ee:9b:dd:
6e:49:24:46:2e:7e:83:78:a8:5b:36:09:31:bf:d1:
96:63:df:17:36:90:d0:6b:2f:ab:0c:64:c9:c2:89:
91:ac:6d:74:ea:8e:81:a9:e4:1f:9d:a2:65:32:0d:
b1:3d:19:da:64:1c:5f:df:a0:97:f2:b6:f7:45:0e:
21:99:6d:cc:9d:02:5b:42:e2:31:f7:1e:d8:11:64:
7d:81:53:8d:0e:7f:b6:38:ca:b6:b0:e0:1f:8c:86:
3b:0e:52:83:09:41:13:1a:8a:5d:13:4f:e7:e0:0c:
7c:a9:e1:ff:1d:df:ff:eb:29:9f:61:e7:c8:c2:d9:
82:70:0c:02:93:c5:3d:f8:00:c9:2c:3c:23:de:05:
95:b5:ac:87:2f:2b:e5:04:50:f1:b2:3f:db:86:21:
1e:19:5d:7a:df:7e:33:e6:25:0f:f4:d8:f0:5d:66:
5d:15:db:e0:4a:84:85:dd:df:01:88:ed:78:8f:fb:
eb:8f:97:2c:4b:37:4c:53:22:de:85:b0:cb:fa:9e:
d9:95:d0:b0:62:86:18:a9:4c:f4:4d:fa:d9:ba:8f:
b7:bb:68:15:8d:e0:d9:fe:90:19:d8:2d:68:89:fd:
63:61:10:fb:93:3b:d3:b6:fa:ec:5d:57:c6:09:8f:
f9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F2:AE:76:73:69:96:73:3B:C5:32:9E:45:C7:86:54:3D:14:F0:35
X509v3 Authority Key Identifier:
keyid:35:EF:79:C5:1E:3F:A0:84:33:20:64:AA:0B:83:60:8D:6E:41:C1:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ne95xR4_oIQzIGSqC4NgjW5BwSs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Q_KudnNplnM7xTKeRceGVD0U8DU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/d3f0f3-dded-42dc-82e0-e3d9531dfd2b/1/Ne95xR4_oIQzIGSqC4NgjW5BwSs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
157.5.48.0/20
Signature Algorithm: sha256WithRSAEncryption
1a:05:a6:d3:9a:c3:92:4e:bb:05:57:b2:0f:44:f0:63:97:03:
b0:0d:6b:54:65:36:8e:22:4a:fc:f6:10:bf:a7:12:61:64:9b:
85:1f:45:15:94:d7:95:30:e4:89:f1:66:d2:7f:90:b7:8f:43:
7d:82:7b:c4:7a:e3:4c:d0:48:60:18:bb:84:29:8e:e9:7b:bb:
e0:36:99:b9:39:e0:f7:0c:87:65:1c:99:ff:c6:67:61:da:80:
1c:da:f0:e8:7e:28:46:39:ca:82:06:c6:60:6c:16:2f:ae:ef:
32:07:93:15:65:28:4f:d6:00:b2:be:e2:5f:8d:23:cf:19:ae:
9d:20:aa:b4:a3:92:f3:cd:85:0c:0a:f6:1a:f7:d6:48:70:a9:
42:48:d1:7c:f7:8b:f4:f5:b6:bf:b5:b8:53:2b:fd:67:f1:ce:
5c:6e:76:e1:da:da:ad:65:31:0b:f5:76:92:fb:71:61:03:bd:
e9:e9:b3:6b:ee:7e:3b:46:39:89:0e:4d:e7:3f:96:f5:d3:33:
74:11:cc:15:63:95:00:e9:af:f0:c6:57:a1:69:c1:f4:2a:cc:
62:b3:d4:ef:5a:2e:ac:f4:71:3d:29:ec:7e:72:1f:fa:07:1f:
01:92:a9:7f:3f:3d:9b:ad:d8:4e:25:23:b0:3d:e5:c0:c5:ed:
45:80:b1:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:53:15 2026 by rpki-client