Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dQm-Q0GKSyu83Ie1LIcjb_lJhjY.roa
File: dQm-Q0GKSyu83Ie1LIcjb_lJhjY.roa (raw, json)
Hash identifier: SPuDNA2QPMcEv2C5b0tGNl6jCbTJEv3EhISFyknoGl8=
Subject key identifier: 75:09:BE:43:41:8A:4B:2B:BC:DC:87:B5:2C:87:23:6F:F9:49:86:36
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019E83733D40EA6DA2F174BFD6E8E9F925F1
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dQm-Q0GKSyu83Ie1LIcjb_lJhjY.roa
Signing time: Mon 01 Jun 2026 13:50:28 +0000
ROA not before: Mon 01 Jun 2026 13:50:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208979
IP address blocks: 31.148.171.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:73:3d:40:ea:6d:a2:f1:74:bf:d6:e8:e9:f9:25:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Jun 1 13:50:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7509be43418a4b2bbcdc87b52c87236ff9498636
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:2e:b7:e8:db:89:e7:e0:d8:c0:d2:64:63:f4:
44:98:52:8f:7a:c8:74:00:ba:a8:b1:0e:c0:d1:49:
dd:48:db:2c:a9:a4:9a:52:1b:df:e7:65:ff:61:3c:
5f:83:98:6d:1c:85:78:f1:9c:68:e2:fd:65:6a:65:
bc:58:01:11:e4:ab:0b:68:69:27:b9:40:69:68:98:
5b:ae:4a:92:b4:fc:d2:04:35:d3:03:c1:5e:2c:6e:
f4:58:96:85:b2:40:c3:d2:63:ac:7f:cc:03:90:f4:
29:02:62:ce:5a:00:a5:fc:6e:29:79:0a:33:d6:de:
29:73:d7:35:75:ad:f0:5a:67:e3:29:d6:3c:d8:2b:
aa:b6:e9:67:9a:1f:4c:b7:a8:9f:09:b7:40:88:1a:
0f:5c:48:f7:9b:bf:4f:3f:23:da:e4:a6:76:9a:99:
96:dc:60:17:95:7e:bc:f1:b1:78:8e:41:60:8f:e0:
94:ed:01:1f:09:c1:e8:f8:4a:ad:7d:b1:67:f8:58:
6a:93:38:85:80:69:1b:a1:74:18:1c:44:91:5d:85:
d2:89:4b:54:18:67:a9:bb:c1:e3:0e:0a:55:9d:db:
68:a4:42:6f:b6:6c:88:10:34:72:6d:38:5f:e5:30:
24:2c:0c:94:d6:9f:6d:7e:41:2a:1b:bd:dc:ec:74:
5c:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:09:BE:43:41:8A:4B:2B:BC:DC:87:B5:2C:87:23:6F:F9:49:86:36
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dQm-Q0GKSyu83Ie1LIcjb_lJhjY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.171.0/24
Signature Algorithm: sha256WithRSAEncryption
95:f7:e4:ca:36:2b:e0:b0:b3:b1:23:3b:92:e6:28:84:bc:d0:
a4:0b:cc:0e:13:d1:48:fe:cf:54:b3:0d:ad:ab:57:50:9c:27:
76:d9:45:bb:16:a3:e7:9d:aa:cf:dd:78:66:95:b8:50:94:ce:
13:b2:2d:89:9c:47:fa:a8:97:06:b7:44:44:dc:7c:fe:90:85:
f7:ab:a0:76:f0:54:f7:9e:df:45:7b:94:c0:ee:da:d7:9f:af:
d1:60:cd:f4:47:f7:ed:18:76:90:17:2d:39:b7:ab:a8:5b:60:
81:4f:fa:51:4b:ca:b2:a1:ec:6f:74:72:53:59:bd:45:06:24:
8c:18:ca:ca:7d:a8:a7:ad:93:e4:72:c7:59:fe:fa:ff:45:7e:
78:be:45:0b:a4:c9:d2:2e:05:15:e5:7b:c0:3c:43:65:c9:30:
4f:67:7e:61:9a:1b:ca:28:5a:c5:30:4b:03:7c:ce:b3:e9:10:
bc:65:ca:d0:1e:f6:60:48:40:30:d7:75:fe:3b:71:46:ba:58:
9f:22:cf:79:4c:d5:68:05:d3:e4:cd:ef:73:b9:65:b1:77:10:
86:55:66:78:95:28:a1:4d:c2:4b:93:72:c4:db:fd:51:47:a1:
8f:cb:b2:eb:0f:a0:c4:7e:bb:0c:26:c1:ae:c5:76:df:38:09:
be:6f:c3:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 18:55:22 2026 by rpki-client