Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/Q7_fgWKsBc4B4O9A9Oysi85FRtc.roa
File: Q7_fgWKsBc4B4O9A9Oysi85FRtc.roa (raw, json)
Hash identifier: jFoA+OD+m0hRjQbafIBz80/kGVUMJlfVN/1TjjfmogY=
Subject key identifier: 43:BF:DF:81:62:AC:05:CE:01:E0:EF:40:F4:EC:AC:8B:CE:45:46:D7
Certificate issuer: /CN=1c94e2f665c3ed5a122c40468cc4c06414703c12
Certificate serial: 019F23685AF23F8BCDFF9241163C73282548
Authority key identifier: 1C:94:E2:F6:65:C3:ED:5A:12:2C:40:46:8C:C4:C0:64:14:70:3C:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJTi9mXD7VoSLEBGjMTAZBRwPBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/Q7_fgWKsBc4B4O9A9Oysi85FRtc.roa
Signing time: Thu 02 Jul 2026 15:17:49 +0000
ROA not before: Thu 02 Jul 2026 15:17:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209441
IP address blocks: 5.253.220.0/24 maxlen: 24
5.253.221.0/24 maxlen: 24
5.253.222.0/24 maxlen: 24
5.253.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/HJTi9mXD7VoSLEBGjMTAZBRwPBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/HJTi9mXD7VoSLEBGjMTAZBRwPBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJTi9mXD7VoSLEBGjMTAZBRwPBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Jul 2026 00:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:5a:f2:3f:8b:cd:ff:92:41:16:3c:73:28:25:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c94e2f665c3ed5a122c40468cc4c06414703c12
Validity
Not Before: Jul 2 15:17:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43bfdf8162ac05ce01e0ef40f4ecac8bce4546d7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:2c:9c:16:5a:dd:98:45:ce:9f:26:dc:8b:a6:
8f:91:77:70:6c:ea:a8:b8:5e:21:1f:9f:e3:c1:4a:
46:11:c4:89:3b:71:96:50:a4:a4:2a:72:e2:3c:17:
2c:c5:ea:33:10:06:c4:0e:23:41:9d:4e:a3:84:94:
51:99:57:be:88:e9:a8:94:09:0e:d7:58:c2:58:5d:
a0:a5:70:a4:46:ef:f3:8c:59:9d:11:6b:c4:1d:01:
37:69:86:d0:7c:e1:76:7e:6b:f1:3c:fd:57:1e:c3:
08:f6:92:09:75:c5:65:e5:ba:39:60:cc:86:46:db:
85:27:0d:13:d2:62:88:f8:84:35:f7:10:c1:fb:39:
5c:3a:9c:e7:bf:b1:50:6e:34:33:bc:16:d2:d2:a2:
51:25:08:5e:9c:37:d1:de:75:70:81:ab:8d:9c:60:
51:c0:14:71:21:f6:1b:87:70:3b:ae:76:e9:ac:5a:
90:3d:cc:ed:3a:1c:0d:a9:8a:1a:b9:05:43:cf:f0:
d9:f0:6e:8b:78:6d:1b:c6:e4:8b:2b:34:c9:e8:bf:
23:00:a4:0f:3a:02:a9:f5:ca:7d:fa:47:a4:04:86:
33:90:ca:0b:6d:8f:8f:45:44:e0:4d:ba:bf:bd:87:
b3:18:93:3e:25:76:76:e8:5a:38:71:1b:c5:dd:9b:
12:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:BF:DF:81:62:AC:05:CE:01:E0:EF:40:F4:EC:AC:8B:CE:45:46:D7
X509v3 Authority Key Identifier:
keyid:1C:94:E2:F6:65:C3:ED:5A:12:2C:40:46:8C:C4:C0:64:14:70:3C:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJTi9mXD7VoSLEBGjMTAZBRwPBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/Q7_fgWKsBc4B4O9A9Oysi85FRtc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/3ba6fc-2d49-4aff-9229-48b957264c26/1/HJTi9mXD7VoSLEBGjMTAZBRwPBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.253.220.0/22
Signature Algorithm: sha256WithRSAEncryption
89:3a:43:d8:b9:41:01:b6:02:f1:8c:3c:79:da:20:d3:cb:fa:
6f:14:ae:72:0e:a0:0b:39:85:39:9b:72:17:fa:42:ee:43:45:
eb:57:b1:3a:74:0a:24:7b:ea:ee:22:eb:53:41:a9:e1:a7:8c:
05:76:17:1b:fb:c5:96:d6:85:2e:d3:d5:0c:df:50:83:6b:3b:
64:aa:38:de:d2:81:0a:c4:c3:b2:a7:85:00:cc:d0:81:c2:8a:
20:d4:24:d8:df:ae:26:ff:c1:39:ff:83:34:07:9f:b6:d0:9e:
51:0d:c3:6b:4e:f8:f4:75:ec:73:66:6f:a7:e1:ae:e9:84:8a:
bb:60:7b:a1:93:f8:04:ad:cb:60:20:e0:21:73:0c:32:3c:70:
bf:c7:ce:ea:80:7a:18:6c:93:83:66:0a:5f:aa:b4:bf:cc:fc:
c1:27:72:cc:54:c1:10:99:be:d1:f6:14:1d:26:50:ce:0c:ca:
f3:37:3a:e4:d3:6d:dc:d8:8a:f5:18:53:fb:ee:f6:8d:16:8b:
8c:7a:dd:0f:43:01:52:71:e5:04:d8:51:24:bb:77:ee:3d:83:
1d:9e:3c:63:88:67:6b:2d:83:b3:34:a1:c3:bd:db:90:61:78:
e3:4f:01:95:b9:b1:48:80:ac:6a:30:a1:c8:de:00:29:1d:6c:
f9:c9:64:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 09:25:14 2026 by rpki-client