Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Q7LyKVEMN7MD3j_rGDP3wMxBW44.roa
File: Q7LyKVEMN7MD3j_rGDP3wMxBW44.roa (raw, json)
Hash identifier: Npm3+vHEJUHCkKGTJXyMlc5Q420bCCx/ZQCNXWtFn1A=
Subject key identifier: 43:B2:F2:29:51:0C:37:B3:03:DE:3F:EB:18:33:F7:C0:CC:41:5B:8E
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368BA2C9A49435FD4C4EA802221C591
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Q7LyKVEMN7MD3j_rGDP3wMxBW44.roa
Signing time: Thu 02 Jul 2026 15:18:13 +0000
ROA not before: Thu 02 Jul 2026 15:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46370
IP address blocks: 213.130.159.0/24 maxlen: 24
213.218.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ba:2c:9a:49:43:5f:d4:c4:ea:80:22:21:c5:91
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43b2f229510c37b303de3feb1833f7c0cc415b8e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:44:e7:93:6e:69:b3:b9:f6:fc:78:32:13:d4:
e4:da:81:12:68:11:4f:59:88:e5:9f:91:4b:1b:00:
c5:0b:64:3c:54:8e:c7:56:b8:a1:13:a5:54:fe:54:
7a:35:f2:57:3a:26:ab:f3:bd:26:8d:b3:02:15:7f:
15:5e:73:7e:6f:0b:c2:35:0f:87:54:37:58:96:95:
aa:7d:72:a7:d9:18:4b:f9:60:ae:5e:d7:f1:10:c6:
60:76:e0:37:74:78:51:1a:6c:6d:b3:8a:79:33:9e:
36:2a:5c:03:d7:a4:da:70:b2:42:99:82:12:3d:87:
30:45:ef:4e:e8:81:c3:ed:5a:ee:08:fa:d8:a6:11:
f1:71:d1:2f:31:64:df:b7:98:d5:d5:ce:95:4c:05:
6c:41:8e:d7:43:04:7a:5b:e1:41:bb:72:ee:e3:21:
55:98:31:ac:ac:ca:35:2b:85:5a:c0:72:ab:15:dc:
2f:8d:17:93:0a:ef:16:e0:fd:3a:68:89:e6:fc:86:
c6:27:9f:0b:95:9e:57:38:9e:6f:07:60:85:2c:35:
ef:bf:25:4a:58:8d:db:9f:52:e1:21:aa:dc:5f:76:
cc:b2:94:96:ca:5b:ed:6c:59:95:9a:09:40:04:a4:
11:36:88:16:79:93:4b:db:a7:60:fd:8f:34:d3:c1:
0a:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:B2:F2:29:51:0C:37:B3:03:DE:3F:EB:18:33:F7:C0:CC:41:5B:8E
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Q7LyKVEMN7MD3j_rGDP3wMxBW44.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.130.159.0/24
213.218.209.0/24
Signature Algorithm: sha256WithRSAEncryption
72:ab:91:4a:64:b1:0f:5f:a4:72:1c:7c:1d:c3:b5:2c:46:41:
da:37:4b:89:08:25:80:ab:b4:a3:47:94:f3:90:9d:a9:75:90:
3d:8a:fc:33:ee:52:ff:8e:a4:37:0a:a7:00:cf:21:0a:65:d1:
18:4c:2a:16:5c:44:ed:0d:77:53:cf:61:23:d7:ce:dc:7d:67:
45:c2:0a:c3:9a:3c:5a:83:ae:7d:4f:c7:27:db:1f:0c:6b:3a:
81:9a:2e:dc:d4:af:59:40:4d:dd:28:e9:34:df:2f:05:c3:85:
67:1e:68:48:ae:a6:19:91:96:d9:e5:1c:87:ea:23:f2:e2:60:
5a:c5:fc:60:cd:5c:90:e1:a5:a3:63:15:2a:43:12:93:c7:22:
8e:38:84:b7:49:3c:0a:b4:a7:fa:7b:47:54:97:10:4f:2c:45:
09:be:4d:62:c9:45:ca:b4:19:3f:58:ec:6f:de:cd:6d:18:5a:
8f:c0:5d:6e:e9:f6:d9:8b:c3:da:f1:9a:91:94:c0:bf:c9:88:
24:59:7c:fa:95:e6:dd:8d:5f:0c:f6:87:1a:d0:b2:f9:7e:66:
a8:25:f9:6d:53:2b:b7:38:c9:5f:ba:0b:ae:ee:f9:93:57:74:
6e:64:3c:12:a2:f9:0a:ac:f4:b6:e4:72:a2:9d:ec:55:93:f7:
8a:7d:b3:70
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaLosmklDX9TE6oAiIcWRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2IyZjIyOTUxMGMzN2IzMDNkZTNmZWIxODMzZjdjMGNjNDE1YjhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr0Tnk25ps7n2/HgyE9Tk2oESaBFP
WYjln5FLGwDFC2Q8VI7HVrihE6VU/lR6NfJXOiar870mjbMCFX8VXnN+bwvCNQ+H
VDdYlpWqfXKn2RhL+WCuXtfxEMZgduA3dHhRGmxts4p5M542KlwD16TacLJCmYIS
PYcwRe9O6IHD7VruCPrYphHxcdEvMWTft5jV1c6VTAVsQY7XQwR6W+FBu3Lu4yFV
mDGsrMo1K4VawHKrFdwvjReTCu8W4P06aInm/IbGJ58LlZ5XOJ5vB2CFLDXvvyVK
WI3bn1LhIarcX3bMspSWylvtbFmVmglABKQRNogWeZNL26dg/Y8008EKfQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEOy8ilRDDezA94/6xgz98DMQVuOMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUTdMeUtWRU1ON01EM2pfckdEUDN3TXhCVzQ0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQA1YKfAwQA
1drRMA0GCSqGSIb3DQEBCwUAA4IBAQByq5FKZLEPX6RyHHwdw7UsRkHaN0uJCCWA
q7SjR5TzkJ2pdZA9ivwz7lL/jqQ3CqcAzyEKZdEYTCoWXETtDXdTz2Ej187cfWdF
wgrDmjxag659T8cn2x8MazqBmi7c1K9ZQE3dKOk03y8Fw4VnHmhIrqYZkZbZ5RyH
6iPy4mBaxfxgzVyQ4aWjYxUqQxKTxyKOOIS3STwKtKf6e0dUlxBPLEUJvk1iyUXK
tBk/WOxv3s1tGFqPwF1u6fbZi8Pa8ZqRlMC/yYgkWXz6lebdjV8M9oca0LL5fmao
JfltUyu3OMlfuguu7vmTV3RuZDwSovkKrPS25HKinexVk/eKfbNw
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:56 2026 by rpki-client