Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/qXmPuHd3nb8bLSzyZFQI4U6JFM0.roa
File: qXmPuHd3nb8bLSzyZFQI4U6JFM0.roa (raw, json)
Hash identifier: dNautjw96sQGI7rO6t5Q8qgWsi+jTcGzqL2ehKz1c2w=
Subject key identifier: A9:79:8F:B8:77:77:9D:BF:1B:2D:2C:F2:64:54:08:E1:4E:89:14:CD
Certificate issuer: /CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Certificate serial: 019FC7BC05674C4A770066F97768A66980E1
Authority key identifier: 17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/qXmPuHd3nb8bLSzyZFQI4U6JFM0.roa
Signing time: Mon 03 Aug 2026 13:06:55 +0000
ROA not before: Mon 03 Aug 2026 13:06:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25182
IP address blocks: 145.58.0.0/16 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c7:bc:05:67:4c:4a:77:00:66:f9:77:68:a6:69:80:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1773db17795d2bf1b4b5345c5b29390dbaf4523e
Validity
Not Before: Aug 3 13:06:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9798fb877779dbf1b2d2cf2645408e14e8914cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:55:2f:95:c4:e5:4d:07:c9:82:21:be:3d:73:
b4:43:4d:38:b6:51:71:f9:94:73:c2:54:6e:f2:8e:
9d:91:28:39:6f:a2:5f:fb:35:b1:66:81:e4:60:08:
61:91:0f:8f:b5:80:9a:ac:1d:93:3f:e5:bf:bb:be:
4a:4c:6b:7d:dc:59:74:10:8d:b5:49:64:1f:ce:e7:
aa:09:ed:42:c7:9e:67:c7:57:67:1b:96:ae:74:b9:
5e:7d:ed:d9:68:18:96:6c:1a:db:9d:3c:41:ab:45:
60:1c:6a:67:55:85:15:5d:4a:a9:86:b0:01:5b:0a:
1f:88:a2:e2:ec:67:f0:8e:a5:74:de:b1:76:58:c6:
97:f3:fb:f2:0a:3f:57:66:d9:78:0a:b9:9a:4a:f2:
c8:1f:d8:38:56:65:a6:88:97:1c:14:0c:19:25:10:
11:86:7b:c7:9c:c0:02:b2:9f:33:9e:0b:2d:14:3d:
4d:24:90:96:2a:04:60:93:26:7d:67:0e:d8:9e:95:
2f:13:86:fb:f1:e5:8b:dc:79:5a:6d:30:aa:44:58:
fc:39:7f:7f:18:6b:42:21:02:6b:59:da:74:50:52:
82:4b:26:aa:79:71:e3:82:95:32:db:95:bf:77:64:
55:0d:36:16:9f:0a:ff:e0:29:7f:98:ef:65:12:d3:
01:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:79:8F:B8:77:77:9D:BF:1B:2D:2C:F2:64:54:08:E1:4E:89:14:CD
X509v3 Authority Key Identifier:
keyid:17:73:DB:17:79:5D:2B:F1:B4:B5:34:5C:5B:29:39:0D:BA:F4:52:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/qXmPuHd3nb8bLSzyZFQI4U6JFM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/f77cbd-893b-4616-9d76-54861f23249d/1/F3PbF3ldK_G0tTRcWyk5Dbr0Uj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.58.0.0/16
Signature Algorithm: sha256WithRSAEncryption
b1:b6:50:bf:f5:dd:5d:d6:31:f1:be:72:c7:5f:ae:15:5e:a6:
53:30:d8:7d:43:d7:03:1d:b8:4d:03:f0:bc:f3:9d:f1:12:6b:
65:b4:1d:14:8e:37:51:d0:a0:1e:43:ce:cf:25:97:79:90:f0:
66:cf:d3:15:96:f2:7b:fe:a6:c9:bc:ca:bf:57:82:4a:6c:5c:
1a:5d:72:a2:88:99:99:d4:bc:e6:39:26:44:81:69:d4:40:e3:
e4:c6:6d:a5:c5:86:3e:41:58:54:18:b4:52:29:76:bd:4f:63:
4a:b5:1f:f9:21:9a:82:d4:b3:62:f5:e0:e6:09:ae:4d:50:a0:
86:be:cb:c3:a0:3b:37:4a:05:f5:61:5d:9f:e8:71:2f:f7:e4:
ec:4b:48:e9:4e:83:75:d9:e6:1c:31:30:24:84:ab:a5:22:be:
54:17:49:ab:42:96:b6:84:48:ca:1e:54:cd:c6:15:4d:fc:ba:
c7:a0:f0:b8:e6:58:42:02:a7:da:23:ec:95:06:ff:26:dc:03:
e6:61:cf:68:83:da:4f:60:58:23:a9:a4:2c:19:3c:55:39:fa:
f6:e3:a1:f4:e7:0b:7a:c8:37:49:fa:6b:02:17:5f:b1:4b:bd:
91:bc:0f:09:1c:82:12:22:e6:34:dc:53:bd:29:91:1e:9b:c0:
18:0c:f5:46
-----BEGIN CERTIFICATE-----
MIIE/DCCA+SgAwIBAgISAZ/HvAVnTEp3AGb5d2imaYDhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE3NzNkYjE3Nzk1ZDJiZjFiNGI1MzQ1YzViMjkzOTBkYmFm
NDUyM2UwHhcNMjYwODAzMTMwNjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTc5OGZiODc3Nzc5ZGJmMWIyZDJjZjI2NDU0MDhlMTRlODkxNGNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5VUvlcTlTQfJgiG+PXO0Q004tlFx
+ZRzwlRu8o6dkSg5b6Jf+zWxZoHkYAhhkQ+PtYCarB2TP+W/u75KTGt93Fl0EI21
SWQfzueqCe1Cx55nx1dnG5audLlefe3ZaBiWbBrbnTxBq0VgHGpnVYUVXUqphrAB
WwofiKLi7GfwjqV03rF2WMaX8/vyCj9XZtl4CrmaSvLIH9g4VmWmiJccFAwZJRAR
hnvHnMACsp8zngstFD1NJJCWKgRgkyZ9Zw7YnpUvE4b78eWL3HlabTCqRFj8OX9/
GGtCIQJrWdp0UFKCSyaqeXHjgpUy25W/d2RVDTYWnwr/4Cl/mO9lEtMBkQIDAQAB
o4ICCDCCAgQwHQYDVR0OBBYEFKl5j7h3d52/Gy0s8mRUCOFOiRTNMB8GA1UdIwQY
MBaAFBdz2xd5XSvxtLU0XFspOQ269FI+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYt
NTQ4NjFmMjMyNDlkLzEvcVhtUHVIZDNuYjhiTFN6eVpGUUk0VTZKRk0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9mNzdjYmQtODkzYi00NjE2LTlkNzYtNTQ4NjFmMjMyNDlk
LzEvRjNQYkYzbGRLX0cwdFRSY1d5azVEYnIwVWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB4GCCsGAQUFBwEHAQH/BA8wDTALBAIAATAFAwMAkTowDQYJ
KoZIhvcNAQELBQADggEBALG2UL/13V3WMfG+csdfrhVeplMw2H1D1wMduE0D8Lzz
nfESa2W0HRSON1HQoB5Dzs8ll3mQ8GbP0xWW8nv+psm8yr9XgkpsXBpdcqKImZnU
vOY5JkSBadRA4+TGbaXFhj5BWFQYtFIpdr1PY0q1H/khmoLUs2L14OYJrk1QoIa+
y8OgOzdKBfVhXZ/ocS/35OxLSOlOg3XZ5hwxMCSEq6UivlQXSatClraESMoeVM3G
FU38useg8LjmWEICp9oj7JUG/ybcA+Zhz2iD2k9gWCOppCwZPFU5+vbjofTnC3rI
N0n6awIXX7FLvZG8DwkcghIi5jTcU70pkR6bwBgM9UY=
-----END CERTIFICATE-----
Generated at Wed Sep 9 03:40:16 2026 by rpki-client