Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/Q5a6HBab7XkMUuUmzB37I_bZ51M.roa
File: Q5a6HBab7XkMUuUmzB37I_bZ51M.roa (raw, json)
Hash identifier: usPWG+ZUU2Ik0VUcffT2eLkXW+tgdFOyEMe83evsQaE=
Subject key identifier: 43:96:BA:1C:16:9B:ED:79:0C:52:E5:26:CC:1D:FB:23:F6:D9:E7:53
Certificate issuer: /CN=749304120ce64942efb3896623b386a041dcb364
Certificate serial: 019EF9B0802CBA6367191B771838AF647384
Authority key identifier: 74:93:04:12:0C:E6:49:42:EF:B3:89:66:23:B3:86:A0:41:DC:B3:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/Q5a6HBab7XkMUuUmzB37I_bZ51M.roa
Signing time: Wed 24 Jun 2026 12:52:34 +0000
ROA not before: Wed 24 Jun 2026 12:52:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 185.50.167.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 15:27:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:b0:80:2c:ba:63:67:19:1b:77:18:38:af:64:73:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749304120ce64942efb3896623b386a041dcb364
Validity
Not Before: Jun 24 12:52:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4396ba1c169bed790c52e526cc1dfb23f6d9e753
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:14:3c:ad:4c:d5:5f:19:04:e5:be:bf:f5:4d:
da:86:39:ac:9b:93:87:49:7c:50:c8:98:47:c4:e0:
31:b0:71:8b:b7:80:d8:bd:83:6e:33:63:73:96:48:
b1:ca:22:34:ca:bc:57:e2:c7:27:74:d2:78:48:07:
dc:40:55:0f:04:bc:fd:fb:1e:7c:3f:e3:83:47:15:
5a:c0:49:c8:fd:f3:50:84:80:25:68:64:3d:3b:bc:
8a:1d:a5:2f:80:a3:09:32:0d:6d:c5:6c:83:5d:00:
6e:13:3f:f7:dc:4d:e6:26:a8:e1:68:d4:76:29:a6:
75:6b:5d:7f:e6:1c:dd:b9:17:50:90:1a:9e:ff:e5:
8b:b4:ec:30:2e:ea:71:50:aa:6c:9a:6d:4d:06:33:
7f:95:fa:04:1a:ff:2a:d4:3f:cb:f0:3e:c7:0b:9c:
9d:f8:28:c4:ce:60:06:4b:02:b8:e5:45:ef:c4:1f:
f1:b9:e1:79:4c:2f:9c:da:6c:e2:6e:02:38:73:0b:
29:65:46:3f:2e:79:9f:fe:1f:6a:9f:20:a0:01:4b:
04:59:22:3b:de:9a:cc:14:21:a8:4d:97:24:72:5c:
bc:70:38:44:e3:5e:8a:13:e2:de:dd:db:03:18:f6:
d4:03:d2:d7:29:bb:6b:d6:92:5f:18:50:c1:45:46:
b9:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:96:BA:1C:16:9B:ED:79:0C:52:E5:26:CC:1D:FB:23:F6:D9:E7:53
X509v3 Authority Key Identifier:
keyid:74:93:04:12:0C:E6:49:42:EF:B3:89:66:23:B3:86:A0:41:DC:B3:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJMEEgzmSULvs4lmI7OGoEHcs2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/Q5a6HBab7XkMUuUmzB37I_bZ51M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/b684db-b6b3-48dd-ae92-4308b105417f/1/dJMEEgzmSULvs4lmI7OGoEHcs2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.50.167.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:42:ec:80:05:35:9b:62:74:51:ca:d8:bc:fc:c7:db:a6:64:
01:da:fe:ed:fc:f0:bc:f2:c6:0f:59:46:e6:26:83:0b:a3:cb:
a2:5d:e0:bd:9a:d2:6a:61:82:90:f5:67:64:5c:8e:2d:2c:f9:
dc:66:ca:15:50:47:51:28:50:75:e1:c1:6d:cd:5c:0e:87:6f:
2c:ae:d1:c2:40:ce:c9:76:96:10:4f:d3:70:bd:d5:db:ad:6c:
c6:c3:37:a8:e1:a1:cf:9b:a3:45:f3:9b:8d:f2:f2:bd:05:ed:
9c:36:54:df:7a:f5:9d:2d:9d:57:a4:d1:e9:e0:9a:e9:b0:89:
d9:ff:74:5d:f9:04:fc:5a:82:6e:fb:a5:e9:2c:a9:84:a1:50:
84:7b:47:9f:f2:87:6a:af:cd:50:a2:c8:ef:19:15:1a:5a:9c:
a6:c4:69:40:3f:ea:00:a5:01:e8:4c:b1:82:f3:21:16:2b:6d:
a6:00:a1:44:a1:40:00:75:f8:5b:be:6c:cb:d2:8e:9a:31:b6:
c2:ed:a3:12:a1:65:0e:9e:87:2f:fe:a6:16:4e:b7:49:c0:19:
70:8e:3b:3c:39:21:5a:15:42:19:3e:6a:88:e8:4f:7c:21:74:
57:a8:77:a0:7f:8c:a2:9c:79:63:e4:2d:8e:82:10:50:3b:b6:
53:48:15:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 00:12:03 2026 by rpki-client