Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/fQJoi9VmahZMLPAgWWHCQXxzRFo.roa
File: fQJoi9VmahZMLPAgWWHCQXxzRFo.roa (raw, json)
Hash identifier: 3BErSNNs12ADzxlVSrs4Lfopc7Z4y5cEw9FkgvYYI8M=
Subject key identifier: 7D:02:68:8B:D5:66:6A:16:4C:2C:F0:20:59:61:C2:41:7C:73:44:5A
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 019DA0D6BD848FBCB56C1D61AFBC54090752
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/fQJoi9VmahZMLPAgWWHCQXxzRFo.roa
Signing time: Sat 18 Apr 2026 13:45:20 +0000
ROA not before: Sat 18 Apr 2026 13:45:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213073
IP address blocks: 2a03:5840:100::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 02:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a0:d6:bd:84:8f:bc:b5:6c:1d:61:af:bc:54:09:07:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Apr 18 13:45:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d02688bd5666a164c2cf0205961c2417c73445a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:39:43:93:5f:07:26:3a:ef:44:20:ae:4a:20:
57:9f:55:f3:59:05:40:35:1d:95:c8:58:17:72:53:
eb:fe:42:f4:df:58:e3:72:15:34:ff:6f:35:42:4f:
35:07:a5:27:f7:56:b0:2b:9f:22:97:5b:82:98:73:
26:53:8d:d1:41:d5:06:43:d5:53:bf:4a:cd:37:c8:
ca:d7:79:96:f9:4e:c7:6d:43:94:e1:f8:ad:68:2f:
ce:ac:d2:3c:d2:0a:ca:45:d0:9e:1f:12:64:ba:90:
1c:12:05:9f:d9:02:fd:aa:ce:3a:5a:e3:6d:96:e0:
1b:30:7a:36:60:17:61:22:b7:2c:8e:50:60:29:e6:
af:39:6d:16:0a:fc:f3:97:57:87:b9:c3:46:9f:78:
15:b4:82:c0:0c:ca:0c:0e:42:e3:3c:38:e6:e2:fe:
80:c5:3e:73:31:4e:8a:cc:2a:fd:42:44:41:af:7e:
06:6f:39:9d:ce:a8:e5:00:41:7f:6f:9a:5d:4c:78:
f5:2a:de:7e:a0:9c:f6:53:4b:b2:d3:ad:00:06:d5:
b7:43:a0:aa:98:7c:b9:92:4a:3e:57:eb:40:bb:79:
84:c6:60:7d:64:30:77:9e:98:f0:3a:17:c4:14:93:
15:c6:8a:87:93:78:bc:5a:5f:90:f9:f1:e0:d6:e4:
e1:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:02:68:8B:D5:66:6A:16:4C:2C:F0:20:59:61:C2:41:7C:73:44:5A
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/fQJoi9VmahZMLPAgWWHCQXxzRFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:100::/44
Signature Algorithm: sha256WithRSAEncryption
27:96:25:58:6b:aa:5f:37:6f:7a:7b:23:1d:a3:92:64:2e:1c:
a0:bb:bd:d6:d8:ef:f5:79:61:b6:73:81:da:37:91:7f:d1:0b:
1e:70:49:71:64:86:c4:fb:a5:24:c1:93:e2:80:77:30:71:bc:
41:fe:8e:87:12:5b:4f:53:38:53:fd:92:54:0c:54:9c:41:ab:
d4:88:94:1b:d0:af:c2:e6:bc:dd:18:3f:98:b8:f6:49:06:da:
f3:03:54:7d:85:c0:78:a5:be:2f:25:03:54:6a:18:97:82:f7:
6f:c6:b3:8f:3e:8a:94:77:db:57:15:17:ef:75:5a:84:ae:78:
9d:dd:be:74:6e:d0:7a:f7:78:14:9c:fb:a7:43:2a:bb:f4:42:
7b:db:61:07:1c:e5:bb:0c:20:a2:a5:cc:52:63:58:7b:06:81:
c3:55:36:ef:cc:b8:6f:af:ed:65:5e:88:50:a6:62:71:b4:1a:
cb:5f:5b:77:78:02:ee:9c:7c:18:b2:b0:ad:b6:45:85:6a:ec:
f2:df:49:e2:8e:c8:ca:c7:a4:25:b2:b2:06:97:03:e6:ea:c1:
e8:6c:d7:a0:01:79:a5:7f:ff:4d:98:d4:9f:e9:16:a5:11:76:
f0:45:b4:af:26:6c:b0:b3:f1:f4:e2:2d:84:9e:e5:3a:8b:54:
51:67:5d:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 12:34:55 2026 by rpki-client