Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pq-Jtjho-5Pe6XKaWqlwOINvpkE.roa
File: pq-Jtjho-5Pe6XKaWqlwOINvpkE.roa (raw, json)
Hash identifier: LG1PG+Jq93v/QtWQD93aJ8nfToYhDNa84rgFVd//O4Y=
Subject key identifier: A6:AF:89:B6:38:68:FB:93:DE:E9:72:9A:5A:A9:70:38:83:6F:A6:41
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019F7CD841EDAB41A0101C35F59A994AA272
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pq-Jtjho-5Pe6XKaWqlwOINvpkE.roa
Signing time: Mon 20 Jul 2026 00:06:15 +0000
ROA not before: Mon 20 Jul 2026 00:06:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198810
IP address blocks: 212.135.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:7c:d8:41:ed:ab:41:a0:10:1c:35:f5:9a:99:4a:a2:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jul 20 00:06:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6af89b63868fb93dee9729a5aa97038836fa641
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:58:43:6e:c8:13:06:90:71:fc:2f:b4:79:52:
36:0b:2d:b1:43:5f:46:e5:b1:83:21:56:45:3c:01:
d1:99:d5:c1:f1:49:2b:e9:25:0a:90:c1:cb:ac:a6:
10:51:c8:17:ef:60:fe:ad:02:c4:d7:30:c5:60:6c:
05:64:03:8b:77:40:77:6d:62:42:d8:8a:2c:7c:2b:
f0:a1:1b:8d:1e:5b:4b:1f:94:dc:7b:43:4f:0b:64:
e6:ba:52:b1:2e:3e:08:27:a6:bc:4c:09:c4:85:3d:
b2:25:58:f3:31:a9:1e:a9:d0:ed:f2:09:1f:62:3b:
1c:d9:48:02:1e:98:4d:fb:35:7c:76:95:ac:7d:b1:
45:b9:2f:2e:a9:bd:d2:5f:66:2a:79:ab:ec:d3:91:
3d:ee:82:7a:ba:75:2f:f0:aa:26:97:2e:7c:3b:bd:
27:b1:f2:73:d1:ee:2a:b1:d0:bb:02:51:15:16:3e:
ec:1d:b0:50:cf:d4:3b:ce:94:84:77:b0:8a:a0:46:
d9:13:ab:06:37:1d:96:81:a7:44:b7:c3:11:d1:b7:
9e:6d:c7:35:63:67:56:5e:07:94:ea:da:66:10:ac:
fd:e2:8d:27:fb:f7:5f:47:c4:3b:f4:b1:3f:2c:7c:
6d:76:bb:f7:67:64:cd:ef:86:ee:ea:bd:1a:22:f4:
8d:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:AF:89:B6:38:68:FB:93:DE:E9:72:9A:5A:A9:70:38:83:6F:A6:41
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/pq-Jtjho-5Pe6XKaWqlwOINvpkE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.135.143.0/24
Signature Algorithm: sha256WithRSAEncryption
d5:c7:dc:55:fd:cd:92:d1:2e:38:22:c3:43:2e:2b:5d:dc:95:
29:3f:b0:f8:82:1f:92:1d:ff:17:7d:81:65:4e:dd:53:64:76:
03:b0:23:81:de:e5:32:95:33:ae:4d:db:8b:7f:5b:c4:30:7b:
f7:fb:5b:b2:90:a5:43:ca:00:95:ed:88:27:de:d5:2e:6c:95:
0f:bd:f6:8e:05:f5:ec:95:28:7e:1d:c7:fa:7e:50:ed:41:1a:
22:8d:96:94:ba:38:68:be:11:f6:1f:02:e8:6f:63:04:fc:77:
cc:b8:3d:ac:77:0f:7d:df:c5:19:77:5d:f8:0e:d5:e9:3d:04:
2a:04:5d:b2:22:c6:15:16:bb:48:39:59:3b:14:50:16:6b:97:
d6:e8:5b:0e:ad:1d:70:e7:7a:2a:3c:3c:a6:f8:a1:3f:80:67:
dd:89:96:87:c3:ad:09:13:48:bf:ba:23:8b:1b:d7:69:a1:77:
0d:68:79:8b:18:25:fa:bb:a3:93:62:4e:3a:12:ad:a2:14:9a:
cb:9d:d4:23:1d:52:c5:bf:5e:fc:a5:b2:93:10:8d:d9:0f:26:
b2:2f:38:92:64:10:b6:b1:23:62:5f:72:d4:bb:7c:6c:1b:4d:
65:ea:1c:30:39:15:f4:91:d8:32:d0:51:21:d7:bd:99:7f:dd:
b7:84:70:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:58:59 2026 by rpki-client