Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Q7e8ol7QD4OzN7NIk0PJfZgUmPA.roa
File: Q7e8ol7QD4OzN7NIk0PJfZgUmPA.roa (raw, json)
Hash identifier: kzwqhqLiC3d8ekzcvzDNXp3fsCTVhHTppPhF+lv3B7s=
Subject key identifier: 43:B7:BC:A2:5E:D0:0F:83:B3:37:B3:48:93:43:C9:7D:98:14:98:F0
Certificate issuer: /CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Certificate serial: 019F6B757180B7998DD4B361558D29160CA6
Authority key identifier: EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Q7e8ol7QD4OzN7NIk0PJfZgUmPA.roa
Signing time: Thu 16 Jul 2026 15:04:46 +0000
ROA not before: Thu 16 Jul 2026 15:04:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213243
IP address blocks: 5.56.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:75:71:80:b7:99:8d:d4:b3:61:55:8d:29:16:0c:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eb349af2af111361b29fcfef2e043d5be75e3f98
Validity
Not Before: Jul 16 15:04:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43b7bca25ed00f83b337b3489343c97d981498f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:dc:b2:0b:f2:76:63:ef:b5:8f:0c:ef:ce:f9:
98:70:35:7c:f7:90:d2:17:91:b9:05:e3:3e:6f:a5:
62:16:b5:d2:4a:41:a5:9f:65:60:c4:20:13:b6:e0:
b8:f5:bc:12:af:63:07:78:3e:dd:ef:e8:a8:6f:63:
95:0d:ff:c4:c8:e5:22:ab:02:c2:e1:bf:b4:da:22:
62:90:f9:62:07:49:cd:88:6c:be:f1:55:52:3c:f1:
9e:07:51:cd:19:d9:f9:1b:23:df:34:01:37:23:11:
ee:d9:cd:f1:48:05:f9:74:d2:f1:ba:f8:7f:ad:be:
9d:1d:bb:ec:65:b9:c7:5a:9f:86:d4:8c:31:d2:54:
08:ff:1a:01:8e:62:ab:44:01:ee:9d:b6:6e:db:26:
b0:26:b4:9f:5b:b9:69:f2:f5:52:92:59:b4:e4:de:
88:7c:6c:8d:cf:d6:73:c3:74:8f:06:a7:8b:a1:3f:
66:79:9d:66:01:3b:de:0d:cd:a4:77:fc:5d:0f:3e:
a7:8f:34:02:35:fa:a4:21:51:06:cd:7c:41:db:d5:
5f:93:4b:50:ff:99:91:c8:46:7e:1f:56:09:4a:c2:
1e:07:f9:1f:85:8c:41:ce:48:e9:b5:ae:78:88:70:
d2:24:bf:b9:1c:ed:de:dc:8d:62:a5:a7:4d:b0:dd:
2f:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B7:BC:A2:5E:D0:0F:83:B3:37:B3:48:93:43:C9:7D:98:14:98:F0
X509v3 Authority Key Identifier:
keyid:EB:34:9A:F2:AF:11:13:61:B2:9F:CF:EF:2E:04:3D:5B:E7:5E:3F:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/Q7e8ol7QD4OzN7NIk0PJfZgUmPA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/3cb147-a7c3-44e9-adc8-9cd662bc8320/1/6zSa8q8RE2Gyn8_vLgQ9W-deP5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.56.29.0/24
Signature Algorithm: sha256WithRSAEncryption
59:bd:c1:a4:bb:d6:bb:c1:bf:1c:99:7c:4d:ec:58:03:fa:2f:
d8:d9:da:5d:b7:47:73:95:75:79:d8:9f:34:7a:ea:1f:25:5c:
95:fc:e6:77:0e:15:87:2c:e1:70:35:78:89:82:20:e1:3d:97:
2c:96:f0:45:74:d5:52:ad:48:a3:86:f1:77:fe:d8:28:06:51:
52:3d:f2:05:9c:0f:ff:23:71:cd:0b:a6:ef:3d:ec:07:3e:db:
0b:3d:fb:3f:42:63:e0:49:07:a3:4a:da:d4:79:14:ba:9e:48:
7c:fb:ae:aa:07:73:80:86:9a:2b:dd:a5:9b:d2:bd:27:18:f2:
29:51:10:25:54:5c:68:02:05:aa:7f:44:63:73:57:6e:68:d9:
ea:4e:ee:b7:bd:b8:ee:d5:00:b5:44:57:ee:ee:a4:fc:31:5f:
e8:14:da:55:1a:b0:c7:c0:76:53:e4:ef:0f:25:0a:15:11:35:
c5:59:ad:a9:16:fb:6c:03:52:4b:b6:68:d0:ab:85:f3:37:21:
70:66:05:f1:bb:b4:30:a6:67:e7:0a:67:2a:56:56:90:d1:61:
16:66:0b:69:0d:52:2a:5c:69:45:b8:10:65:80:6e:54:c2:54:
6b:df:f5:d2:57:b6:99:a2:4c:24:29:74:09:a2:f5:02:bf:79:
c9:13:7b:ab
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9rdXGAt5mN1LNhVY0pFgymMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGViMzQ5YWYyYWYxMTEzNjFiMjlmY2ZlZjJlMDQzZDViZTc1
ZTNmOTgwHhcNMjYwNzE2MTUwNDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2I3YmNhMjVlZDAwZjgzYjMzN2IzNDg5MzQzYzk3ZDk4MTQ5OGYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxtyyC/J2Y++1jwzvzvmYcDV895DS
F5G5BeM+b6ViFrXSSkGln2VgxCATtuC49bwSr2MHeD7d7+iob2OVDf/EyOUiqwLC
4b+02iJikPliB0nNiGy+8VVSPPGeB1HNGdn5GyPfNAE3IxHu2c3xSAX5dNLxuvh/
rb6dHbvsZbnHWp+G1Iwx0lQI/xoBjmKrRAHunbZu2yawJrSfW7lp8vVSklm05N6I
fGyNz9Zzw3SPBqeLoT9meZ1mATveDc2kd/xdDz6njzQCNfqkIVEGzXxB29Vfk0tQ
/5mRyEZ+H1YJSsIeB/kfhYxBzkjpta54iHDSJL+5HO3e3I1ipadNsN0vyQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEO3vKJe0A+DszezSJNDyX2YFJjwMB8GA1UdIwQY
MBaAFOs0mvKvERNhsp/P7y4EPVvnXj+YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgt
OWNkNjYyYmM4MzIwLzEvUTdlOG9sN1FENE96TjdOSWswUEpmWmdVbVBBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC8zY2IxNDctYTdjMy00NGU5LWFkYzgtOWNkNjYyYmM4MzIw
LzEvNnpTYThxOFJFMkd5bjhfdkxnUTlXLWRlUDVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABTgdMA0G
CSqGSIb3DQEBCwUAA4IBAQBZvcGku9a7wb8cmXxN7FgD+i/Y2dpdt0dzlXV52J80
euofJVyV/OZ3DhWHLOFwNXiJgiDhPZcslvBFdNVSrUijhvF3/tgoBlFSPfIFnA//
I3HNC6bvPewHPtsLPfs/QmPgSQejStrUeRS6nkh8+66qB3OAhpor3aWb0r0nGPIp
URAlVFxoAgWqf0Rjc1duaNnqTu63vbju1QC1RFfu7qT8MV/oFNpVGrDHwHZT5O8P
JQoVETXFWa2pFvtsA1JLtmjQq4XzNyFwZgXxu7QwpmfnCmcqVlaQ0WEWZgtpDVIq
XGlFuBBlgG5UwlRr3/XSV7aZokwkKXQJovUCv3nJE3ur
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:45 2026 by rpki-client