Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Q_wRUH5CM3pq5IWk5xLhxH0A8Og.roa
File: Q_wRUH5CM3pq5IWk5xLhxH0A8Og.roa (raw, json)
Hash identifier: 01Ux8aDUNQSKglqXVRErcPxacPtRW5W0ifWemruL0Ng=
Subject key identifier: 43:FC:11:50:7E:42:33:7A:6A:E4:85:A4:E7:12:E1:C4:7D:00:F0:E8
Certificate issuer: /CN=3718b734349bf327d9453b96501e44b192e55142
Certificate serial: 019FD1696F3D84FA9605CE26E20B2EFF619B
Authority key identifier: 37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Q_wRUH5CM3pq5IWk5xLhxH0A8Og.roa
Signing time: Wed 05 Aug 2026 10:12:55 +0000
ROA not before: Wed 05 Aug 2026 10:12:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202759
IP address blocks: 185.155.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d1:69:6f:3d:84:fa:96:05:ce:26:e2:0b:2e:ff:61:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3718b734349bf327d9453b96501e44b192e55142
Validity
Not Before: Aug 5 10:12:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43fc11507e42337a6ae485a4e712e1c47d00f0e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f1:51:96:a0:61:99:27:3c:11:a8:21:0a:ed:
e4:9b:99:d3:3c:59:16:5d:88:65:80:6c:7b:09:59:
32:52:21:ef:d3:e3:f2:8c:25:51:07:81:8a:a9:0d:
d6:02:85:19:e5:b9:38:4c:df:26:de:83:d1:4d:33:
60:1b:88:b5:70:82:8b:d4:92:e0:2e:ad:c5:df:d0:
2b:37:ca:41:fc:9d:57:de:45:36:c6:74:8f:7d:c4:
be:2f:ff:08:ed:6d:7a:34:0f:5a:85:c2:38:14:6b:
17:89:ad:78:77:d3:87:f4:73:79:e8:37:55:95:ad:
a0:f5:dc:df:23:0a:57:bb:5b:5d:3f:ef:95:b9:1a:
28:8c:eb:27:cb:f8:e8:8c:b9:4d:a9:e6:24:e0:73:
da:24:f6:4b:8a:a6:20:f7:bd:33:67:5c:6c:c9:e0:
7d:df:66:bb:6a:12:69:93:e4:c7:8a:87:30:2d:50:
fe:59:70:f2:bb:e0:aa:4e:48:61:17:0c:2d:bd:7d:
d5:07:29:7f:2f:50:9f:bd:2d:de:e9:f8:45:d5:03:
dd:e1:92:12:9b:d8:62:29:fc:0a:0d:3b:a5:47:79:
ba:31:4f:1d:c4:92:24:b2:a5:0b:32:69:b3:8e:86:
4d:91:9b:55:13:c4:49:60:2b:cf:b3:2e:6b:09:de:
78:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FC:11:50:7E:42:33:7A:6A:E4:85:A4:E7:12:E1:C4:7D:00:F0:E8
X509v3 Authority Key Identifier:
keyid:37:18:B7:34:34:9B:F3:27:D9:45:3B:96:50:1E:44:B1:92:E5:51:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Q_wRUH5CM3pq5IWk5xLhxH0A8Og.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/7bf8a8-e49c-406e-8eb7-c823cc8f3837/1/Nxi3NDSb8yfZRTuWUB5EsZLlUUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.155.55.0/24
Signature Algorithm: sha256WithRSAEncryption
aa:32:5c:cd:4a:65:98:47:d2:bd:fe:fb:db:f9:0b:3c:42:36:
f6:7b:cf:5c:aa:4e:94:3b:7d:48:4a:9b:9f:2c:08:33:63:ac:
b2:42:b5:35:95:db:6b:37:41:ed:c6:8b:21:58:f4:4a:21:eb:
fc:a3:fe:e8:eb:d9:6c:7a:d8:ff:28:ac:c5:1e:a2:66:1f:13:
d5:52:eb:cb:b0:b3:dc:53:c4:ea:21:d4:9a:65:4a:f8:46:48:
e5:8b:e1:95:d5:c3:c9:6b:39:a3:9b:eb:96:14:f1:07:c1:55:
50:be:37:ef:8a:cb:fa:f1:34:14:81:38:54:44:89:13:18:2c:
05:6f:99:c9:47:b2:de:98:8a:75:f3:03:b5:a8:0a:93:6f:11:
1b:88:01:f8:a5:1a:02:89:5f:8b:50:7d:b2:5c:dd:73:a1:03:
48:71:fa:c5:f8:cc:5c:15:b0:2b:38:7e:8e:48:a2:75:49:52:
12:18:cf:99:73:7a:aa:42:37:04:51:1f:aa:ff:19:6d:8c:af:
c3:9f:f3:7a:a0:4e:8e:63:48:3a:cc:3b:33:7d:0d:ae:28:49:
a7:9c:a8:f1:79:d5:ba:17:54:22:cd:21:9d:2a:13:2f:b9:61:
53:1d:90:88:9b:45:ee:66:00:61:3a:85:5e:3f:e3:41:78:78:
5f:9c:0d:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:11:42 2026 by rpki-client