Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Q1Sod-1h_3eWme0YBSqOjC9Wjf0.roa
File: Q1Sod-1h_3eWme0YBSqOjC9Wjf0.roa (raw, json)
Hash identifier: TmsuDA+EcJQ5h7x0/3o+6Y5e5gXpTw64W55eIWj6FK8=
Subject key identifier: 43:54:A8:77:ED:61:FF:77:96:99:ED:18:05:2A:8E:8C:2F:56:8D:FD
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019FC710D009F50BB4205A7E581340D1132D
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Q1Sod-1h_3eWme0YBSqOjC9Wjf0.roa
Signing time: Mon 03 Aug 2026 09:59:55 +0000
ROA not before: Mon 03 Aug 2026 09:59:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219077
IP address blocks: 91.191.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:10:d0:09:f5:0b:b4:20:5a:7e:58:13:40:d1:13:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Aug 3 09:59:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4354a877ed61ff779699ed18052a8e8c2f568dfd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9b:7f:34:de:b9:7a:73:80:37:99:c4:7a:8c:
39:d8:a8:7d:ab:e9:10:09:c1:82:d1:c6:48:6a:a5:
98:14:9e:e0:5b:26:bf:65:e0:e7:80:dd:c1:6f:f0:
c5:68:b2:c5:0f:0a:ac:80:6e:96:71:15:1f:07:8f:
f3:33:48:7d:04:39:58:f2:29:ff:c0:25:55:74:6c:
7e:ba:8e:14:8c:6a:fe:41:f4:80:fc:5b:1e:11:14:
0e:d9:84:59:38:33:c7:04:22:cf:e2:82:2c:f3:6b:
34:13:2a:86:06:8f:0c:27:47:c9:87:2b:09:3b:6e:
b5:99:bb:08:a0:ae:90:e1:97:46:66:9c:72:08:79:
15:25:47:93:e6:77:e1:ed:07:76:ca:79:3b:4d:14:
c4:f5:7a:de:7c:fe:31:f6:75:ff:71:ab:f6:15:34:
9d:f9:23:66:86:2a:37:a9:8d:d3:eb:25:72:85:e3:
25:65:dc:18:5f:7f:75:27:59:be:c9:fe:54:0b:06:
27:61:d8:ba:1e:1c:d4:73:87:3c:90:92:ce:ee:76:
43:26:cc:6a:ac:24:c2:50:f6:99:2b:b9:3c:95:04:
54:81:fb:cd:f2:66:e0:40:d9:a1:4d:78:33:77:88:
60:bf:3b:4b:20:45:be:f3:dd:e5:10:a8:47:79:96:
78:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:54:A8:77:ED:61:FF:77:96:99:ED:18:05:2A:8E:8C:2F:56:8D:FD
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/Q1Sod-1h_3eWme0YBSqOjC9Wjf0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.191.185.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:e6:a6:33:e3:aa:b2:57:e1:aa:c7:67:b4:6c:cd:35:d2:0e:
f4:cb:95:31:45:5a:9d:a9:89:80:66:a7:3e:dc:26:0f:44:35:
8f:ea:04:ea:8f:8b:82:76:9c:85:f7:e9:a2:d8:e5:8c:c3:6f:
be:6a:f7:3f:e8:a8:d8:b7:7c:99:b5:56:1f:c5:df:8a:fb:f7:
21:d3:b9:b4:ed:30:94:4e:6f:22:ff:d3:16:19:ac:4e:03:31:
cc:77:ec:cf:de:d0:c1:2a:46:42:16:01:0f:17:f1:42:79:fe:
cb:85:58:21:81:5d:e7:3f:29:ef:f0:bd:81:c0:ab:9d:73:19:
9a:8b:ea:27:3d:ca:6c:2f:8d:9d:b1:25:8d:5e:d7:e2:25:94:
de:66:86:ba:ef:ca:0b:aa:32:c1:3a:71:7e:96:2b:e3:3d:ae:
0a:6d:76:79:42:fe:07:3b:ba:7f:5d:05:79:98:f8:81:10:7a:
09:68:31:40:df:34:45:8a:da:bc:d8:7f:c6:04:97:b0:04:7b:
36:db:1a:1b:04:80:c0:2b:fc:f3:20:6e:69:f2:0c:03:6f:d8:
6f:c8:c3:1e:da:b5:9e:c1:b2:55:a6:b2:f6:93:3a:6a:96:4f:
81:09:c6:df:a0:9c:e2:52:62:d3:88:64:bc:3c:f6:8e:c0:e1:
1e:26:33:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:30:33 2026 by rpki-client