Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0qP0P7HE1e2TUXvQu0ZAUHkhIbQ.roa
File: 0qP0P7HE1e2TUXvQu0ZAUHkhIbQ.roa (raw, json)
Hash identifier: 2QIB6wOQYNtGgA2L2EMgO/bmTTk5rVhOvVaL5qt6AAM=
Subject key identifier: D2:A3:F4:3F:B1:C4:D5:ED:93:51:7B:D0:BB:46:40:50:79:21:21:B4
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368A94D3063C31B170BB043D880D8EF
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0qP0P7HE1e2TUXvQu0ZAUHkhIbQ.roa
Signing time: Thu 02 Jul 2026 15:18:09 +0000
ROA not before: Thu 02 Jul 2026 15:18:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 109.176.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a9:4d:30:63:c3:1b:17:0b:b0:43:d8:80:d8:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d2a3f43fb1c4d5ed93517bd0bb464050792121b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:c3:45:b5:5c:02:e3:99:f5:58:2d:2b:55:d6:
57:ae:0b:d6:a8:ce:2c:a5:5e:fb:be:b1:29:04:23:
2c:04:da:aa:f7:48:eb:2c:b5:a0:05:7b:a6:0c:ff:
14:1a:cd:0a:d5:5c:e1:82:4b:67:a4:ac:fc:09:53:
96:52:0e:75:56:22:cb:9f:0e:7a:a1:a6:1b:84:14:
3e:0a:c5:6e:f7:ee:58:84:60:71:b0:96:ea:1c:43:
a9:49:17:6f:b5:d8:b6:f6:75:98:27:10:20:c2:de:
d6:65:b0:bd:9c:4c:76:c8:e9:e0:79:26:e6:99:cd:
0e:7a:dc:f9:aa:70:4f:6d:3b:1f:2e:20:63:0d:d8:
29:ea:95:91:e3:30:8d:ed:3c:28:88:92:92:aa:84:
0a:29:9c:b1:c0:22:b9:5b:7c:8b:98:cb:7d:ff:ad:
38:82:7d:56:40:44:cf:9e:e6:68:7c:41:96:5b:78:
54:3e:58:d0:fc:be:73:8c:0b:6f:08:49:05:e0:5d:
e2:af:12:f0:b1:13:cf:0c:a7:26:a0:9f:f6:02:24:
d1:e6:eb:34:cc:a8:01:7e:40:c6:58:10:48:67:5d:
34:ad:f8:76:71:f1:00:a6:8e:0b:fc:49:49:4a:62:
e2:59:0e:b3:b3:21:8f:f4:d2:65:f5:2c:92:55:25:
d9:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:A3:F4:3F:B1:C4:D5:ED:93:51:7B:D0:BB:46:40:50:79:21:21:B4
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/0qP0P7HE1e2TUXvQu0ZAUHkhIbQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.15.0/24
Signature Algorithm: sha256WithRSAEncryption
76:ba:1c:6f:32:18:ef:27:8c:cd:62:61:cf:be:96:bd:eb:bd:
ae:0b:e9:9e:2f:38:19:3d:66:b2:38:3c:2f:41:b3:bf:5a:3d:
45:f3:3f:dd:b7:c2:2f:db:e7:4b:fd:aa:ee:32:6c:40:7d:6a:
89:3e:fd:21:c1:76:74:57:e4:76:c4:ed:94:6e:35:17:97:99:
6f:56:7f:36:1c:49:2f:82:c1:4d:8d:eb:53:bf:7d:fb:08:bd:
5c:9c:3b:11:b0:6a:e4:89:9c:6e:bc:34:73:6e:8f:7a:83:c2:
c1:fd:a2:9c:8f:59:b0:58:e4:ee:74:b2:8e:35:11:aa:da:49:
5d:d8:0b:f2:3d:f4:ec:3a:97:bc:cc:bd:10:ab:f4:fa:22:e0:
ce:a3:21:88:61:82:76:43:47:26:42:01:f0:db:ac:3e:c2:1b:
35:d6:d8:6f:73:3b:07:8d:c1:32:55:ad:3e:4e:0c:a4:bb:df:
9c:a4:1c:93:fb:a0:50:1d:7f:af:58:68:a8:3c:b3:49:07:0b:
28:29:df:57:fa:f0:b6:6c:66:33:fa:34:70:90:0d:ef:46:12:
b0:2f:c8:70:2f:e1:21:53:fa:57:1b:96:94:9b:11:63:08:10:
5c:a2:e7:89:b7:17:a9:17:00:0b:fc:97:93:5d:14:19:c6:67:
85:db:17:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:16:25 2026 by rpki-client