Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/qFtoQ-QNEZBOlGg5Hw0XQm8FprU.roa
File: qFtoQ-QNEZBOlGg5Hw0XQm8FprU.roa (raw, json)
Hash identifier: BHTOhbeyRhHn5M5QF+3tIed+5QF7XzVqNgni0TdcShk=
Subject key identifier: A8:5B:68:43:E4:0D:11:90:4E:94:68:39:1F:0D:17:42:6F:05:A6:B5
Certificate issuer: /CN=b72945f57103153a07854e74e227f2aec1c5f430
Certificate serial: 019F1D979EFBA55E4ACC189A7B05117E6069
Authority key identifier: B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/qFtoQ-QNEZBOlGg5Hw0XQm8FprU.roa
Signing time: Wed 01 Jul 2026 12:11:43 +0000
ROA not before: Wed 01 Jul 2026 12:11:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154408
IP address blocks: 212.16.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Jul 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:97:9e:fb:a5:5e:4a:cc:18:9a:7b:05:11:7e:60:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b72945f57103153a07854e74e227f2aec1c5f430
Validity
Not Before: Jul 1 12:11:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a85b6843e40d11904e9468391f0d17426f05a6b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:83:30:03:a2:e5:4d:6d:0d:3f:c7:fa:2e:d9:
41:21:b0:29:b4:c4:e7:6e:87:44:02:18:2a:9f:fd:
b2:57:62:14:12:89:cf:19:01:ac:e4:d6:50:9d:e4:
26:d7:71:59:26:9c:a0:af:e0:91:0d:40:f0:dd:e4:
33:f7:2f:27:2e:e6:9c:59:18:6e:bc:70:ce:90:1b:
f3:26:06:c7:18:42:34:77:33:3c:28:1a:6c:5f:b6:
84:cf:18:ec:11:88:1a:3e:3b:4a:ea:56:cf:79:d1:
c4:2c:d9:5b:ff:de:15:62:f9:e6:9c:ad:e4:14:45:
ba:72:6a:e0:92:9f:66:ad:bf:66:95:44:d6:6e:fa:
4d:1d:41:5c:b9:b6:35:c6:1e:b3:95:cd:29:60:a8:
f6:9a:0a:8f:05:d3:83:e4:bd:32:1a:a3:a4:22:75:
94:75:43:95:a4:3f:9a:9b:5d:91:25:85:b1:1c:5d:
c0:08:4f:3b:52:4b:86:a0:27:c8:ca:1a:c4:e8:41:
a5:e5:16:68:99:85:bb:ae:11:ac:86:95:a0:09:ff:
e6:7b:e8:31:88:06:d3:f9:5e:84:de:76:8e:84:94:
39:6d:5a:74:89:66:2e:c2:19:34:fd:f5:8f:55:e7:
50:2c:20:fa:e7:08:2d:ee:63:b3:31:ce:80:ee:42:
68:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5B:68:43:E4:0D:11:90:4E:94:68:39:1F:0D:17:42:6F:05:A6:B5
X509v3 Authority Key Identifier:
keyid:B7:29:45:F5:71:03:15:3A:07:85:4E:74:E2:27:F2:AE:C1:C5:F4:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tylF9XEDFToHhU504ifyrsHF9DA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/qFtoQ-QNEZBOlGg5Hw0XQm8FprU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/61/5f6906-3fb0-4dff-8d01-2a09cc53a805/1/tylF9XEDFToHhU504ifyrsHF9DA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.16.93.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:d1:e5:e8:e7:2c:52:a2:c6:27:0e:ee:d3:75:e3:19:46:9f:
62:25:b0:e3:54:0a:0d:1a:81:38:bd:53:16:41:49:83:31:f7:
ea:a0:a0:7f:5f:12:0a:c0:9a:82:19:92:f7:c3:92:e8:21:d1:
6e:c4:0f:ff:7c:82:35:39:70:d5:65:44:32:61:c3:5b:6a:e8:
8b:84:05:b6:15:46:0c:4e:35:2f:14:98:c1:d4:dc:81:46:83:
34:f2:55:14:da:85:6e:7f:b7:4a:0b:fe:5e:f6:32:e3:00:10:
06:66:54:6d:b1:61:ae:76:42:9b:41:54:08:13:8f:88:22:10:
df:c4:03:1c:a8:53:17:47:69:d4:ca:d5:6a:6c:df:e0:2f:d9:
65:05:3e:27:4e:3e:23:20:af:cb:8d:ab:49:93:a3:69:43:d4:
46:15:31:93:14:ec:f6:e7:58:f0:a4:f5:54:c6:4a:e5:2f:bc:
66:0d:f1:95:15:bd:e5:8a:a9:03:4f:a4:c9:2f:59:b3:8b:c9:
e9:8c:52:26:8a:a0:49:4d:dd:bd:11:49:80:3f:13:67:37:e4:
30:06:3a:49:c0:37:cc:e6:c4:6a:05:13:0b:cb:b7:94:88:20:
63:ab:e0:68:2c:18:a1:5e:7e:20:89:cc:ff:53:d5:37:24:0d:
d4:b9:16:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 10 15:46:23 2026 by rpki-client