Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rQsXiacgHXDDFLaZG1uFHNfj2SM.roa
File: rQsXiacgHXDDFLaZG1uFHNfj2SM.roa (raw, json)
Hash identifier: GzGgtl97rGCxDFVxF4SCV4M//pKi68c0OLgYOkocI0g=
Subject key identifier: AD:0B:17:89:A7:20:1D:70:C3:14:B6:99:1B:5B:85:1C:D7:E3:D9:23
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019FD5F50D890ED5D9D39041EF07BA11CE1A
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rQsXiacgHXDDFLaZG1uFHNfj2SM.roa
Signing time: Thu 06 Aug 2026 07:23:54 +0000
ROA not before: Thu 06 Aug 2026 07:23:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 162.35.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d5:f5:0d:89:0e:d5:d9:d3:90:41:ef:07:ba:11:ce:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Aug 6 07:23:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad0b1789a7201d70c314b6991b5b851cd7e3d923
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:2c:11:8b:80:68:ae:48:b2:0c:5f:8a:df:08:
51:f4:2d:ca:98:3f:1b:64:88:98:c0:15:41:e4:4f:
f5:c7:02:a2:55:08:99:87:ed:c6:ad:1f:67:2c:bd:
85:e3:de:d3:30:b5:66:16:6d:fa:e1:08:5f:68:f4:
ee:f6:62:81:bc:69:f1:6d:bf:64:c6:7f:19:72:61:
e9:0d:12:8c:d1:83:ae:c7:b9:13:64:8d:20:ba:57:
7b:bb:ae:c5:f7:dc:45:5d:79:6d:70:98:dd:83:02:
e5:cb:1b:83:9d:b2:70:c2:41:4b:cb:95:66:cc:bb:
25:6f:2f:6d:fd:e8:72:f2:74:55:1f:0f:bd:8a:45:
b9:5b:e7:e6:9d:81:98:22:eb:5f:ca:44:91:b0:1e:
05:30:10:03:63:ca:e7:b6:c8:5e:2b:de:7e:d2:85:
57:98:00:70:52:30:b0:50:c1:9d:41:ad:28:b6:bc:
35:6e:bc:30:48:43:68:47:5e:7c:60:94:98:ac:60:
cf:38:8e:07:b5:3d:94:6d:d6:6a:26:f6:ee:e2:f0:
14:da:45:0a:9b:3c:57:b8:b3:1c:af:76:0e:5e:64:
8b:8e:d7:b5:a2:8d:71:a9:c2:2f:af:63:25:0e:46:
54:72:de:34:57:60:30:53:b9:08:29:fb:97:5f:3a:
3f:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0B:17:89:A7:20:1D:70:C3:14:B6:99:1B:5B:85:1C:D7:E3:D9:23
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/rQsXiacgHXDDFLaZG1uFHNfj2SM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
162.35.231.0/24
Signature Algorithm: sha256WithRSAEncryption
78:ae:58:8a:aa:60:25:b9:35:4b:27:d7:10:00:9f:06:9d:68:
2f:b5:b8:60:0b:5f:75:98:59:bd:43:e8:e0:44:11:41:2b:aa:
a3:70:25:62:89:48:63:10:22:2b:d3:a7:6f:ce:39:94:cc:10:
c7:c8:34:89:02:8f:23:01:5f:5c:48:48:06:a8:4c:62:36:f4:
77:a6:70:15:b2:d0:18:09:4c:ec:b9:d0:15:76:de:55:6e:05:
ba:61:1a:40:bc:66:61:85:05:48:cf:a0:98:0e:cb:b2:38:db:
de:e5:aa:9e:3d:22:4f:5e:64:01:ad:60:53:4c:b3:3d:88:e0:
b1:05:10:99:d9:11:de:0b:0c:4a:e8:19:a3:ff:e8:69:ee:2f:
ad:fb:4a:be:d0:fc:6e:d3:81:f1:fe:4d:e1:f2:8d:7f:ee:75:
ae:ff:68:9f:35:62:40:c8:27:6f:c7:d0:85:1a:ac:9f:d3:83:
af:cb:37:47:2e:e7:87:85:70:54:e9:ab:3b:c6:6b:dc:80:c2:
f2:2d:ea:b5:f9:66:af:a1:2e:df:ec:98:8d:d5:0a:e1:41:8d:
f3:5b:31:d8:9f:47:a9:fc:5f:8f:25:ee:0b:0a:67:dc:fc:02:
ad:d4:19:8b:0a:27:e4:bc:63:cd:dd:10:1e:37:29:ee:82:43:
1c:10:dc:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 13:57:12 2026 by rpki-client