Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/1QPv7Hg00XDN5cnZjgn3hLUFgBM.roa
File: 1QPv7Hg00XDN5cnZjgn3hLUFgBM.roa (raw, json)
Hash identifier: xHzTpfyqfCy0xxbqcTY1JJR6jCXEqmCkWPADjNHWeuA=
Subject key identifier: D5:03:EF:EC:78:34:D1:70:CD:E5:C9:D9:8E:09:F7:84:B5:05:80:13
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 019FEFB6A1675F3ADEC74FA8715ED3303A42
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/1QPv7Hg00XDN5cnZjgn3hLUFgBM.roa
Signing time: Tue 11 Aug 2026 07:25:51 +0000
ROA not before: Tue 11 Aug 2026 07:25:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206766
IP address blocks: 36.255.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 07:01:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ef:b6:a1:67:5f:3a:de:c7:4f:a8:71:5e:d3:30:3a:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Aug 11 07:25:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d503efec7834d170cde5c9d98e09f784b5058013
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:2e:f4:45:9d:fe:74:dc:67:a2:bf:85:20:d9:
7e:a6:fa:ec:3b:72:51:24:be:cf:ec:77:2c:3b:68:
74:a4:2f:ac:ed:5d:54:2f:70:fc:f6:57:62:cf:24:
9f:45:35:b1:7d:88:d7:f5:42:56:dc:0c:52:a1:b8:
87:4e:48:9a:d9:82:ce:d1:a0:32:56:fa:88:ac:1e:
d5:a6:7d:1c:8a:9d:90:2a:a5:ae:6f:39:86:89:94:
8b:c4:45:25:6b:48:d0:f8:16:6d:1d:5b:70:a9:9c:
cc:6e:da:40:23:5a:2a:a9:a4:ef:b5:58:9c:96:90:
57:02:94:0c:2a:59:99:a5:4e:9f:af:ed:fc:31:0a:
c5:d2:c4:10:e4:47:92:9c:4a:b5:d4:ae:5c:98:95:
99:e1:9f:65:5c:46:1c:81:b2:df:82:1a:ce:66:38:
cd:a8:1d:b2:4a:62:ba:c5:92:91:9c:f0:94:70:b3:
c1:82:15:1b:51:64:54:cf:41:c6:6b:4a:d8:4c:a5:
64:01:e0:8d:be:25:4a:36:c0:ad:59:00:d4:c0:60:
8b:cd:d0:5b:79:ac:5b:2a:75:f3:a8:50:be:c8:87:
18:0b:ff:f9:a4:57:33:cf:1b:04:68:bb:b9:1b:f7:
ab:06:95:95:d0:03:8d:d6:bd:f4:03:59:b0:ce:ee:
10:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:03:EF:EC:78:34:D1:70:CD:E5:C9:D9:8E:09:F7:84:B5:05:80:13
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/1QPv7Hg00XDN5cnZjgn3hLUFgBM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.94.0/23
Signature Algorithm: sha256WithRSAEncryption
3f:e1:ae:20:5c:89:b8:c2:a5:7f:21:0d:fa:33:8f:a8:5e:97:
b1:9d:77:bd:06:9a:52:f1:e8:e2:1b:a7:13:16:da:45:74:70:
28:5d:fd:35:4f:d5:0c:fe:4d:be:78:6f:94:63:dc:81:d1:c7:
bd:58:7c:23:91:9f:c6:09:97:70:f1:0c:5a:2b:80:7b:43:e2:
29:59:6c:20:c4:d4:a4:1b:1f:e0:4e:11:0e:35:33:05:03:93:
a6:bd:13:d0:1b:32:f8:6e:3b:bc:46:00:14:ab:92:a4:cf:39:
2f:4a:52:56:e2:1d:b1:a7:54:76:48:e1:60:93:25:0b:b2:f9:
f7:81:46:48:40:c4:7c:98:66:f5:f7:b3:3c:60:6d:d2:97:7d:
7c:ac:91:4a:b1:4b:0d:18:e3:dd:5d:d5:a1:d5:32:c0:a0:80:
57:f7:c8:68:12:ce:5c:ec:83:72:6c:9e:cf:1a:07:28:de:64:
a2:c6:26:81:fd:3e:a0:47:cb:8a:35:f7:11:6e:a1:2b:a2:33:
0e:6f:c7:90:f7:b1:4a:ce:d1:bb:83:05:72:f5:ae:d9:9d:8c:
ed:6c:78:57:1a:bd:b5:2e:7f:83:92:0b:b3:b1:b8:c4:bc:8b:
1a:1a:f1:d1:d1:6f:99:7d:23:e7:66:91:6f:6f:6f:e6:19:ad:
aa:11:46:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 14:18:37 2026 by rpki-client