Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/QSWjo5_DxLn3VxAudtaPC2FnwM0.roa
File: QSWjo5_DxLn3VxAudtaPC2FnwM0.roa (raw, json)
Hash identifier: 1mFyEckr7ZMS8v3pxO2ED4j5izEiaVLcu9avDOseeO0=
Subject key identifier: 41:25:A3:A3:9F:C3:C4:B9:F7:57:10:2E:76:D6:8F:0B:61:67:C0:CD
Certificate issuer: /CN=acc6e6df87d9996c5a235740ec5e43afd2ded8f4
Certificate serial: 019FCCE9B30ED4F359207B7C6F8867A03962
Authority key identifier: AC:C6:E6:DF:87:D9:99:6C:5A:23:57:40:EC:5E:43:AF:D2:DE:D8:F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/QSWjo5_DxLn3VxAudtaPC2FnwM0.roa
Signing time: Tue 04 Aug 2026 13:14:55 +0000
ROA not before: Tue 04 Aug 2026 13:14:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203140
IP address blocks: 83.175.139.0/24 maxlen: 24
91.231.44.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:e9:b3:0e:d4:f3:59:20:7b:7c:6f:88:67:a0:39:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acc6e6df87d9996c5a235740ec5e43afd2ded8f4
Validity
Not Before: Aug 4 13:14:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4125a3a39fc3c4b9f757102e76d68f0b6167c0cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:3c:61:57:68:5c:1f:f1:bb:18:21:b4:d7:4e:
6b:b0:63:2e:44:ec:45:e3:68:92:8c:bd:8b:81:9f:
4f:df:cb:e2:65:20:84:e5:c4:d1:ac:36:df:1c:0c:
69:69:ae:9c:44:9a:8a:5b:2a:30:6d:c7:1a:16:9c:
d1:d1:3f:45:5e:63:be:d7:27:f5:06:1f:31:2e:23:
ff:94:5a:2a:e1:72:3a:b0:2a:6e:0a:05:5f:46:22:
f6:4e:6e:00:a3:d4:d5:12:c6:28:d6:f9:52:a2:d7:
6a:9a:6a:0e:2c:60:9e:12:60:b2:90:16:39:6e:2d:
11:d0:21:b4:2f:95:d8:8f:c1:e4:54:b1:4f:e1:d7:
20:14:9a:c3:35:43:7e:a7:48:7c:a4:6f:8e:fd:3b:
52:69:69:85:60:16:52:d2:91:ef:ae:6c:d5:36:de:
4c:02:4d:69:c5:11:81:05:08:a3:33:65:e4:2d:28:
e9:2e:85:14:93:ff:46:37:cd:98:7b:41:89:f2:51:
6d:c9:63:e7:7f:d6:dc:19:e2:ca:63:26:8b:e2:f7:
4c:e7:24:44:e3:c6:fd:e1:27:6f:9d:45:75:90:29:
29:80:3e:c5:68:73:4d:ef:96:f9:33:9d:60:e1:03:
69:8e:7b:05:e9:50:a1:22:0c:aa:d6:e7:68:bf:0a:
63:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:25:A3:A3:9F:C3:C4:B9:F7:57:10:2E:76:D6:8F:0B:61:67:C0:CD
X509v3 Authority Key Identifier:
keyid:AC:C6:E6:DF:87:D9:99:6C:5A:23:57:40:EC:5E:43:AF:D2:DE:D8:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/QSWjo5_DxLn3VxAudtaPC2FnwM0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/50278f-5a98-4856-9965-520121c015c0/1/rMbm34fZmWxaI1dA7F5Dr9Le2PQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.175.139.0/24
91.231.44.0/23
Signature Algorithm: sha256WithRSAEncryption
5d:97:d1:0c:d9:d1:b7:85:63:1b:80:c2:04:5c:36:0f:3d:92:
42:3f:f6:18:03:ba:89:fd:a6:75:da:5c:44:0d:d5:9f:2a:d5:
d6:57:e4:a1:d8:77:2f:36:41:3b:cb:4d:75:ef:b2:75:c7:e4:
4a:5c:97:26:d4:43:7e:ef:f7:d5:d1:6a:7d:5a:a8:6a:77:f4:
fb:12:8e:3c:fe:8b:e5:97:9b:37:13:f1:a1:6f:35:1a:04:b6:
af:fd:b4:23:1f:d1:f9:88:ac:86:a1:42:b3:f0:8f:c0:fc:5c:
f8:ed:32:f8:3e:7b:b8:e3:a1:ab:25:2f:e0:0d:30:e9:38:b3:
88:c9:c1:ae:e5:9a:8a:e1:85:87:b1:6e:69:1d:a6:7a:d0:39:
90:ae:73:4a:be:da:9b:78:eb:1e:51:23:78:bc:92:18:76:1b:
74:85:b5:cc:ca:11:f9:16:a0:54:54:80:34:70:ef:aa:26:17:
ad:dc:40:2f:85:1c:6a:5b:8d:93:2d:b3:29:7e:02:9c:c0:b6:
f2:f2:d5:09:f5:11:2a:4a:fa:92:d1:38:b5:ff:0f:0f:62:11:
07:0d:78:d9:de:9c:01:f6:03:a5:63:31:a5:25:fb:82:86:24:
34:40:a9:f6:4b:cf:81:bc:2e:b7:62:a2:49:48:0e:40:83:98:
30:72:27:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 02:24:11 2026 by rpki-client