Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/qTb31r8RTfOgjeoi1MeaaWdtDGY.roa
File: qTb31r8RTfOgjeoi1MeaaWdtDGY.roa (raw, json)
Hash identifier: qEExmYsCQn80r95BiYPec8LiloIbmDtILrOgw1Ud1kc=
Subject key identifier: A9:36:F7:D6:BF:11:4D:F3:A0:8D:EA:22:D4:C7:9A:69:67:6D:0C:66
Certificate issuer: /CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Certificate serial: 01A0581873B3A2C44C01AD0BFDBF50A47D20
Authority key identifier: 59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/qTb31r8RTfOgjeoi1MeaaWdtDGY.roa
Signing time: Mon 31 Aug 2026 13:53:12 +0000
ROA not before: Mon 31 Aug 2026 13:53:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5511
IP address blocks: 62.217.7.0/24 maxlen: 24
62.217.8.0/23 maxlen: 23
62.217.10.0/23 maxlen: 23
62.217.12.0/23 maxlen: 23
62.217.14.0/23 maxlen: 23
62.217.16.0/23 maxlen: 23
62.217.19.0/24 maxlen: 24
62.217.21.0/24 maxlen: 24
62.217.23.0/24 maxlen: 24
212.180.3.0/24 maxlen: 24
212.180.4.0/24 maxlen: 24
212.180.12.0/22 maxlen: 22
212.180.22.0/24 maxlen: 24
212.180.26.0/24 maxlen: 24
212.180.29.0/24 maxlen: 24
212.180.37.0/24 maxlen: 24
212.180.44.0/24 maxlen: 24
212.180.46.0/23 maxlen: 23
212.180.64.0/20 maxlen: 20
212.180.84.0/24 maxlen: 24
212.180.94.0/24 maxlen: 24
212.180.96.0/22 maxlen: 22
212.180.101.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.mft
rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Sep 2026 19:01:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:18:73:b3:a2:c4:4c:01:ad:0b:fd:bf:50:a4:7d:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5954b6183e459748c89ee5431b8f31de692ae3b7
Validity
Not Before: Aug 31 13:53:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a936f7d6bf114df3a08dea22d4c79a69676d0c66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:41:80:0d:11:46:ec:48:a7:4d:0c:14:5a:
3c:16:02:d6:49:9f:fe:62:c6:b5:7a:8d:ec:6d:ee:
e8:f6:fd:25:28:2f:c3:07:d8:87:de:a2:2b:10:15:
d1:d7:d4:fb:94:58:27:1b:c1:9c:2e:04:79:f8:b2:
bc:bb:7a:ef:2a:0b:86:2d:91:a1:0d:55:c5:bb:90:
db:24:f6:82:d7:6a:cb:b9:9e:7e:be:92:70:f3:21:
54:78:ad:3c:13:14:df:06:f7:5c:ca:f8:49:b4:46:
56:94:a0:4e:5d:e4:dc:55:a9:2a:35:cc:2f:17:00:
ea:b2:ed:62:53:f6:bf:91:83:8d:ed:90:07:2f:96:
b5:ad:b5:79:10:8c:e9:e1:a3:92:f6:1b:7f:5e:b6:
6b:0b:5b:a2:ec:1d:c2:f4:ef:89:23:3a:14:30:55:
28:ab:04:5c:85:dc:33:3b:f1:56:7e:2d:3b:04:ca:
75:51:cb:f9:67:49:80:90:54:ab:42:1d:34:0e:e9:
cf:26:4d:23:cf:5b:1d:34:9b:39:16:c3:c8:05:52:
80:d4:97:f2:d9:9a:36:82:c6:32:8e:39:f0:6f:0a:
b8:d6:a5:f9:ac:f9:d4:ec:01:bb:71:9a:3a:14:28:
8d:46:2d:2e:7e:af:c0:a3:04:d5:38:b0:3a:1b:25:
39:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:36:F7:D6:BF:11:4D:F3:A0:8D:EA:22:D4:C7:9A:69:67:6D:0C:66
X509v3 Authority Key Identifier:
keyid:59:54:B6:18:3E:45:97:48:C8:9E:E5:43:1B:8F:31:DE:69:2A:E3:B7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WVS2GD5Fl0jInuVDG48x3mkq47c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/qTb31r8RTfOgjeoi1MeaaWdtDGY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7de65c-90f5-4def-b873-d2adeed755d8/1/WVS2GD5Fl0jInuVDG48x3mkq47c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.217.7.0-62.217.17.255
62.217.19.0/24
62.217.21.0/24
62.217.23.0/24
212.180.3.0-212.180.4.255
212.180.12.0/22
212.180.22.0/24
212.180.26.0/24
212.180.29.0/24
212.180.37.0/24
212.180.44.0/24
212.180.46.0/23
212.180.64.0/20
212.180.84.0/24
212.180.94.0/24
212.180.96.0/22
212.180.101.0/24
Signature Algorithm: sha256WithRSAEncryption
64:9a:fe:1c:79:65:0b:f0:71:eb:41:46:1a:66:0f:83:17:44:
4a:11:e9:65:8c:cf:16:4c:d2:94:f5:ff:97:44:f6:47:28:11:
21:da:87:ef:86:7e:70:d1:68:f0:af:1a:87:19:a2:a4:51:1e:
d3:ef:b3:82:d8:88:60:7c:10:59:1c:f4:a9:e6:e0:7b:d8:14:
ee:d2:36:96:27:d2:66:32:cf:91:ab:2b:67:78:b7:6e:9a:ba:
8a:d0:85:a0:b2:72:15:92:a1:0d:af:01:fa:6f:54:c4:76:29:
39:8d:10:cd:d4:71:44:ac:5b:f7:85:45:90:39:cc:43:53:a2:
3e:24:04:58:3a:d4:5b:c8:6d:78:29:a0:32:08:d9:d8:1a:5c:
b7:2b:80:a5:1c:13:40:83:ac:6e:96:a5:be:8e:af:12:37:7d:
8d:b6:b8:c4:e6:fc:4c:42:cd:ea:d8:76:b5:dc:8e:a2:7f:58:
ff:b0:a1:38:43:bb:ba:b6:76:84:26:75:2a:12:11:2a:ff:8a:
b1:c2:a5:af:47:46:e4:21:9f:4c:7e:2a:23:5f:11:92:ed:63:
b3:c7:d8:87:98:08:86:3b:9f:82:af:29:60:52:f0:36:5b:89:
21:4b:e7:2e:9d:c9:64:f5:aa:02:35:6e:f7:84:52:61:b3:f8:
dc:54:c0:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 02:52:45 2026 by rpki-client