Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/qA8oj24sqlvfoBGXYgSYwF71zcU.roa
File: qA8oj24sqlvfoBGXYgSYwF71zcU.roa (raw, json)
Hash identifier: Cr/DGA/L+hU9/pYkGvYfxYiY4E9TnxP9a4+NT8ycZtA=
Subject key identifier: A8:0F:28:8F:6E:2C:AA:5B:DF:A0:11:97:62:04:98:C0:5E:F5:CD:C5
Certificate issuer: /CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
Certificate serial: 01A01384879938CB15872CF5404288E6BCB2
Authority key identifier: 0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/qA8oj24sqlvfoBGXYgSYwF71zcU.roa
Signing time: Tue 18 Aug 2026 06:17:27 +0000
ROA not before: Tue 18 Aug 2026 06:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210429
IP address blocks: 45.133.117.0/24 maxlen: 24
45.133.118.0/24 maxlen: 24
45.133.119.0/24 maxlen: 32
45.142.164.0/24 maxlen: 24
45.148.60.0/24 maxlen: 24
45.148.61.0/24 maxlen: 24
45.148.62.0/24 maxlen: 24
45.148.63.0/24 maxlen: 24
185.46.68.0/24 maxlen: 24
192.109.229.0/24 maxlen: 24
194.147.221.0/24 maxlen: 24
2a12:9080::/29 maxlen: 128
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 18:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:13:84:87:99:38:cb:15:87:2c:f5:40:42:88:e6:bc:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f17bf2498f3682d7183e47f75b28af41c2815b9
Validity
Not Before: Aug 18 06:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a80f288f6e2caa5bdfa01197620498c05ef5cdc5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:8c:e9:d1:6c:d4:d5:ce:a1:94:74:73:d5:25:
40:01:29:05:a4:fd:42:67:42:7d:9c:db:d7:cd:8f:
30:70:0d:e8:41:bb:38:ad:6d:89:05:12:29:30:4f:
12:36:39:d6:41:51:af:38:c0:70:7f:b5:1c:73:55:
a8:aa:e1:06:83:3e:e6:26:36:c4:c0:91:c0:a5:95:
0d:46:92:1b:13:a8:a0:1e:cc:ad:1c:2f:cd:a4:d7:
5a:99:b6:60:53:ba:e9:02:f8:f8:ba:c1:f5:7d:3d:
34:24:8e:b8:22:9e:eb:55:3d:7a:a7:63:0d:ce:32:
06:a3:a2:3a:5e:42:81:04:da:62:c8:fd:75:b8:1a:
43:fc:67:14:cf:ac:7f:92:2d:80:54:60:e2:93:e7:
67:c8:42:77:54:7f:2d:ed:21:a9:0e:0e:d0:bf:27:
1b:aa:e4:a5:2e:07:33:81:01:8a:ae:cb:2c:4f:cf:
19:39:bf:c3:72:18:18:54:fc:4d:5d:e7:58:d0:c3:
ae:47:1a:3c:06:91:51:57:3c:dd:77:58:dc:fb:98:
94:5d:f0:87:37:7e:1c:eb:5c:94:74:9e:89:e9:0a:
0c:90:94:33:0d:62:1e:fa:91:2a:55:83:43:4e:52:
b9:b2:e4:d9:c9:7e:dc:25:ed:53:e5:38:17:1c:47:
ef:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:0F:28:8F:6E:2C:AA:5B:DF:A0:11:97:62:04:98:C0:5E:F5:CD:C5
X509v3 Authority Key Identifier:
keyid:0F:17:BF:24:98:F3:68:2D:71:83:E4:7F:75:B2:8A:F4:1C:28:15:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/qA8oj24sqlvfoBGXYgSYwF71zcU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/7be614-1e6e-4b40-b6dc-a49cbb84f982/1/Dxe_JJjzaC1xg-R_dbKK9BwoFbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.133.117.0-45.133.119.255
45.142.164.0/24
45.148.60.0/22
185.46.68.0/24
192.109.229.0/24
194.147.221.0/24
IPv6:
2a12:9080::/29
Signature Algorithm: sha256WithRSAEncryption
6d:84:27:7f:6f:42:15:6f:bb:60:03:ad:63:84:d1:fe:de:9f:
00:e6:84:68:70:58:02:66:dc:3f:9b:db:69:28:77:f2:bf:bd:
97:83:f6:bc:1e:c8:96:d0:f7:59:bb:55:46:a2:e9:81:28:30:
d3:c4:f7:7f:55:52:d7:76:27:90:cc:dd:5e:ab:c9:3f:80:9e:
d4:5c:34:f6:01:df:73:da:98:06:0d:f3:bb:b9:c5:5c:a6:bf:
5d:91:dd:cf:64:2b:fc:77:49:ed:18:65:3f:5f:9c:ad:53:eb:
93:07:d7:e1:74:ee:b4:51:12:a7:45:80:b4:82:74:f8:87:bd:
54:52:f6:00:7d:6d:0d:d5:83:f4:57:33:83:ef:0d:52:f4:4e:
6f:9c:45:88:ae:34:38:44:04:77:a2:a7:cb:31:75:03:8c:97:
4e:1f:53:8b:e7:f7:73:fe:ec:3d:f0:03:00:af:2f:0b:fc:d3:
d2:ce:ae:63:2b:2c:5c:a3:b2:88:6e:fd:54:47:32:65:54:0b:
fb:e7:82:e3:f9:d0:7c:18:4f:46:4d:42:0c:35:43:c4:bd:6c:
b3:f6:52:0d:d4:2c:40:bd:be:9a:9a:a6:a1:61:bf:e9:be:32:
2d:94:39:9b:49:ec:fa:24:0c:90:86:78:59:0c:07:ef:2b:d2:
c6:a3:cc:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 03:33:30 2026 by rpki-client