Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/q2983OPzklakgSCjeiVFDoK69Xs.roa
File: q2983OPzklakgSCjeiVFDoK69Xs.roa (raw, json)
Hash identifier: sQVFXTJ4NvpmpUw5zr/gtuq6d3FLh30FaP1gqDZKaWI=
Subject key identifier: AB:6F:7C:DC:E3:F3:92:56:A4:81:20:A3:7A:25:45:0E:82:BA:F5:7B
Certificate issuer: /CN=94166b704843d3d9754095c83a91b493828200a2
Certificate serial: 01A05CFCE3ADC5BC85463EFF41314BAA720F
Authority key identifier: 94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/q2983OPzklakgSCjeiVFDoK69Xs.roa
Signing time: Tue 01 Sep 2026 12:41:12 +0000
ROA not before: Tue 01 Sep 2026 12:41:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64267
IP address blocks: 171.22.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5c:fc:e3:ad:c5:bc:85:46:3e:ff:41:31:4b:aa:72:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94166b704843d3d9754095c83a91b493828200a2
Validity
Not Before: Sep 1 12:41:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab6f7cdce3f39256a48120a37a25450e82baf57b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:d2:3d:b7:a4:2f:0d:98:d2:d2:24:78:c7:0f:
f5:af:fc:ab:64:17:55:4d:33:99:c9:07:d1:69:be:
e3:c7:32:92:c8:bf:d0:bb:de:7b:24:26:47:37:2c:
37:4c:5d:01:b8:4b:4e:0d:0e:65:c7:7a:03:59:31:
ff:bf:ec:fe:ba:40:4d:37:27:fe:c6:6c:df:69:1a:
03:47:0a:0f:f8:b5:c3:ad:ed:5a:b9:16:d9:a7:3b:
89:d8:30:9f:22:af:7e:47:d7:49:05:a5:93:0f:21:
59:79:e8:1f:29:c6:d9:88:a7:d7:0c:97:1d:0a:36:
1f:d2:bf:be:4d:42:ad:5e:44:d6:97:80:d2:fc:22:
7b:69:28:00:a2:69:d5:cd:30:a4:16:91:a1:21:c7:
49:8f:de:3e:92:a1:7a:a4:60:35:27:6f:83:60:cc:
cf:4b:5c:d4:04:51:96:72:54:d4:3c:f7:86:f6:81:
7a:40:cf:4c:4c:1a:c7:de:8c:6c:d3:7f:28:37:f4:
93:36:35:6d:09:49:43:8d:f0:34:b1:c4:45:25:fb:
c3:5e:ff:dd:9b:33:bd:50:a5:62:de:2f:d1:ae:af:
92:d8:66:cd:46:f8:a3:97:da:d6:87:06:49:99:fc:
13:bf:ae:29:2e:cd:3b:88:12:bc:d1:c0:53:ec:27:
01:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6F:7C:DC:E3:F3:92:56:A4:81:20:A3:7A:25:45:0E:82:BA:F5:7B
X509v3 Authority Key Identifier:
keyid:94:16:6B:70:48:43:D3:D9:75:40:95:C8:3A:91:B4:93:82:82:00:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lBZrcEhD09l1QJXIOpG0k4KCAKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/q2983OPzklakgSCjeiVFDoK69Xs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/43ff8f-cd54-4cf1-8aaf-4be18ef128b4/1/lBZrcEhD09l1QJXIOpG0k4KCAKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
171.22.147.0/24
Signature Algorithm: sha256WithRSAEncryption
12:99:35:94:e2:68:05:8b:47:d2:0e:23:c8:2d:90:84:f7:20:
97:d8:61:fb:88:c6:ac:68:ca:8a:3c:fb:cc:30:dd:0f:c1:f2:
af:0d:f1:14:23:f2:cb:ea:7b:0e:86:c2:a7:0c:cb:0b:c6:e7:
d8:de:49:e9:b7:4d:6b:07:0e:d4:35:0b:24:9b:06:55:15:7e:
04:c3:36:c3:75:04:0c:26:5b:4c:f4:2b:61:93:31:93:91:41:
57:ff:b5:27:b3:40:f0:c3:f4:aa:53:06:ac:75:01:2f:49:28:
00:5e:87:3f:48:d4:15:a5:94:e4:82:b7:ec:28:fa:55:e2:2c:
ac:e6:57:af:11:fe:2e:40:7c:8d:a2:30:c0:09:09:e5:ee:29:
f9:7c:76:78:a5:91:f5:c8:3e:02:41:65:a1:7f:24:44:76:39:
f6:5c:c0:a3:47:99:0b:4c:81:55:61:56:65:a8:47:3d:b5:32:
61:3a:0b:2a:1b:b5:97:b5:ef:43:f5:a0:61:01:bd:9f:c4:af:
46:e8:ea:3d:9d:7e:ca:15:26:88:c5:3b:00:f7:ce:0d:cc:06:
86:83:bb:74:02:80:7f:d0:4b:a5:b6:8f:29:ed:bc:f5:fb:91:
7e:ff:c6:78:63:ab:0c:74:dd:c3:d4:e0:a8:cd:d4:e7:35:28:
50:e2:10:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:57:14 2026 by rpki-client