Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/dQdXBh5qhRJrah76vMAURqhRRLA.roa
File: dQdXBh5qhRJrah76vMAURqhRRLA.roa (raw, json)
Hash identifier: u4zDNbiSFsql+JVohw4Hy2g3ZEQiG+Bl7RoGzgjhNiM=
Subject key identifier: 75:07:57:06:1E:6A:85:12:6B:6A:1E:FA:BC:C0:14:46:A8:51:44:B0
Certificate issuer: /CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Certificate serial: 019F23684315F4A1073C8777496D0C659230
Authority key identifier: CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/dQdXBh5qhRJrah76vMAURqhRRLA.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49281
IP address blocks: 85.198.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.mft
rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:43:15:f4:a1:07:3c:87:77:49:6d:0c:65:92:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cd13278ebf4f49b424fbd4a9c7007d27476ed307
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=750757061e6a85126b6a1efabcc01446a85144b0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:d3:f1:ce:83:b7:45:62:28:2d:0c:b5:44:70:
dd:8c:47:4e:83:b8:6a:1d:6a:45:d5:92:c2:2c:ac:
18:7f:f8:5c:f1:b9:c9:75:e8:e5:9d:51:98:76:3e:
4d:56:db:f3:ff:84:7e:9e:d9:a8:8b:c5:ae:75:42:
0f:0b:a5:32:f3:3c:8b:8c:c2:eb:13:78:51:1e:af:
1d:73:10:ee:25:6a:0d:fb:0c:3d:d6:86:46:b3:66:
e7:ec:e8:c9:71:f4:ee:82:46:8f:f9:ab:19:63:2f:
e3:bd:c4:3e:b7:f6:a1:e7:70:a4:d6:2a:6e:87:a9:
3d:ae:d3:c0:28:47:bf:a2:49:ae:4f:70:89:f5:7a:
01:7c:67:9e:8e:54:b8:5c:f4:a2:57:4c:97:dd:a6:
85:62:66:ab:96:63:e3:a3:b6:d5:90:c8:c9:d9:41:
af:b8:23:41:7e:af:53:e3:dc:02:49:c6:5c:a7:5f:
6f:ba:a4:2c:d5:41:91:5f:20:45:ae:46:fb:6a:f7:
6b:b8:79:fa:8f:4b:af:f2:51:3e:39:80:ec:09:f4:
69:ce:32:b6:0e:fc:a5:a6:fc:cb:2d:7f:d3:c3:38:
67:f4:3e:b1:1b:2a:a0:81:dc:98:f8:c4:a9:f0:57:
44:4e:24:ae:c8:36:a4:22:bb:b8:82:7e:bb:1b:a8:
d9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:07:57:06:1E:6A:85:12:6B:6A:1E:FA:BC:C0:14:46:A8:51:44:B0
X509v3 Authority Key Identifier:
keyid:CD:13:27:8E:BF:4F:49:B4:24:FB:D4:A9:C7:00:7D:27:47:6E:D3:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/zRMnjr9PSbQk-9SpxwB9J0du0wc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/dQdXBh5qhRJrah76vMAURqhRRLA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/zRMnjr9PSbQk-9SpxwB9J0du0wc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.198.106.0/24
Signature Algorithm: sha256WithRSAEncryption
16:44:b0:5e:6e:5f:82:b8:24:14:8d:a4:c6:ff:a7:53:28:62:
3b:95:a9:29:de:96:ed:05:8a:74:24:4d:f7:0c:45:58:2d:01:
26:2e:a5:bc:74:70:06:ab:df:84:40:f3:5b:0e:72:20:2d:6f:
ff:fa:38:c8:48:10:5e:b1:79:7d:6c:7d:23:22:74:b5:87:a5:
22:e1:7f:aa:db:62:47:0a:0f:1a:ce:c3:9d:16:4a:b3:69:b6:
08:71:bd:a7:2e:20:9a:64:62:ed:c4:76:5e:f0:fd:3c:11:50:
62:0d:92:74:38:ad:05:78:5b:65:80:b8:c1:a2:fe:a5:44:fe:
61:0d:d5:50:cc:b1:5b:5b:0b:d8:d8:63:91:d4:d8:c8:13:2b:
d6:04:76:46:85:03:fd:fb:a2:ef:07:4e:e9:a7:50:bb:99:90:
32:e4:2e:d7:b7:d0:e0:fa:8f:c1:cb:27:c8:a9:18:43:b2:4f:
bb:9c:a0:68:b3:23:83:d6:87:94:4a:bf:4f:4a:ec:06:13:c7:
5c:72:01:21:6a:6d:18:74:2e:7a:d0:29:ea:28:3c:f3:b4:13:
c9:0d:e9:19:1c:f2:9d:17:80:4d:a9:b9:75:9f:8a:81:b1:5b:
ed:43:73:61:9a:01:4b:0f:74:83:56:a5:a1:21:98:65:55:0e:
53:99:e7:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:52 2026 by rpki-client