Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/qxmuKnCScG35t9KmOSHJWjVEeHk.roa
File: qxmuKnCScG35t9KmOSHJWjVEeHk.roa (raw, json)
Hash identifier: l4aVY/GZALLrpBoztXxSp01HQYtPNQ2CkGtCTxyYKIc=
Subject key identifier: AB:19:AE:2A:70:92:70:6D:F9:B7:D2:A6:39:21:C9:5A:35:44:78:79
Certificate issuer: /CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Certificate serial: 019ED6F25DBC61FCC1F271A9E714CCCA385B
Authority key identifier: 62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/qxmuKnCScG35t9KmOSHJWjVEeHk.roa
Signing time: Wed 17 Jun 2026 18:57:48 +0000
ROA not before: Wed 17 Jun 2026 18:57:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44477
IP address blocks: 45.145.0.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d6:f2:5d:bc:61:fc:c1:f2:71:a9:e7:14:cc:ca:38:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6222e1c2a5315334b66d80f78d5b50b42e480b9c
Validity
Not Before: Jun 17 18:57:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab19ae2a7092706df9b7d2a63921c95a35447879
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:df:80:69:5b:9a:ab:0d:c2:63:8e:1a:c8:ec:
a8:1d:62:5b:46:1c:15:49:89:98:f6:51:ea:a6:f4:
31:2f:7b:1a:87:a2:e0:d0:ad:02:a8:ac:43:96:4e:
86:a0:fb:ec:ce:a6:2e:a7:03:3f:46:a2:ec:5c:ef:
f0:71:31:dc:1c:f7:fa:9f:d5:bb:5d:7b:99:b2:c3:
b2:0c:1d:c4:bb:ad:fa:70:34:0f:37:ca:1c:ee:2d:
29:df:44:67:36:f4:c2:04:b7:49:af:67:49:0b:c5:
4a:1f:d6:6a:c2:cf:68:13:b3:95:aa:cc:c4:29:35:
4c:0f:b6:62:99:c3:61:c3:a4:94:8c:40:d7:36:16:
ed:d2:eb:2e:f3:c0:aa:a3:bd:91:c1:02:4f:8e:e2:
cf:78:42:62:e8:5d:c2:87:63:09:31:28:19:ec:60:
1e:04:c3:58:b0:8f:03:04:c9:98:6a:c2:66:03:77:
a5:da:74:85:02:cb:90:89:e0:36:14:8d:74:06:dc:
5c:46:98:7f:e5:9f:25:6d:04:c5:c4:dc:77:22:bb:
04:2b:b4:c0:80:34:3a:89:84:34:b2:1f:14:19:19:
53:27:3c:f0:4a:f5:d7:18:0e:2f:3f:c8:26:a4:8f:
df:5b:c7:5b:7f:22:31:02:44:4b:6f:52:29:f7:ad:
8b:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:19:AE:2A:70:92:70:6D:F9:B7:D2:A6:39:21:C9:5A:35:44:78:79
X509v3 Authority Key Identifier:
keyid:62:22:E1:C2:A5:31:53:34:B6:6D:80:F7:8D:5B:50:B4:2E:48:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YiLhwqUxUzS2bYD3jVtQtC5IC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/qxmuKnCScG35t9KmOSHJWjVEeHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/999b97-c731-4192-85f1-573701c84833/1/YiLhwqUxUzS2bYD3jVtQtC5IC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.145.0.0/24
Signature Algorithm: sha256WithRSAEncryption
51:09:56:fb:8b:8e:77:d6:0e:0b:61:59:f7:ca:66:96:ef:ab:
85:35:2c:57:68:ab:39:5b:a4:ac:68:23:24:aa:ab:ac:b5:51:
90:08:56:ef:c1:32:78:30:af:13:37:29:10:ab:aa:33:bc:d0:
6c:f4:e6:ec:89:89:a7:84:62:90:69:3d:7c:13:b1:e9:9d:9b:
91:0b:f1:e1:7b:36:06:f0:b8:00:2f:f7:22:2e:5f:e1:74:48:
9f:fa:bc:ac:fc:e0:f8:3e:8c:74:1b:94:82:58:9e:db:85:fc:
76:39:73:7a:f8:69:30:fb:14:c5:dc:6b:cf:ae:b9:fa:e9:a5:
f5:5e:19:cc:10:b1:e2:40:c5:b0:05:60:a3:e9:9c:3a:0e:59:
60:51:9e:0f:0e:7c:20:01:10:1e:e3:bd:4b:70:15:4e:59:91:
58:55:a6:c6:51:e1:56:d8:94:99:70:3b:66:15:19:7f:3e:44:
9f:47:35:0b:bf:45:e1:6e:e1:78:54:7f:22:e7:b7:64:91:42:
48:75:26:8c:34:94:c6:c0:37:d8:fa:71:3b:2a:f9:c9:97:7a:
6f:54:80:83:8b:7a:0a:2d:ee:63:61:1e:fd:c3:ff:00:e1:ef:
ef:00:f7:bc:ef:ee:a9:06:97:ff:f0:6f:c9:01:a1:d9:af:89:
b2:af:18:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 09:07:27 2026 by rpki-client