Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/q-BhPuQnM-Q-h6hN62IefM9bmG4.roa
File: q-BhPuQnM-Q-h6hN62IefM9bmG4.roa (raw, json)
Hash identifier: OIcCu5qI8ffXeo2TrrcMk7ECFhZnyqwj4znnE1b0z/Y=
Subject key identifier: AB:E0:61:3E:E4:27:33:E4:3E:87:A8:4D:EB:62:1E:7C:CF:5B:98:6E
Certificate issuer: /CN=d4a7522d27e62ae23a460143eba6733b79b24477
Certificate serial: 019F236948C64D41B82751F8F30BDA688173
Authority key identifier: D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/q-BhPuQnM-Q-h6hN62IefM9bmG4.roa
Signing time: Thu 02 Jul 2026 15:18:50 +0000
ROA not before: Thu 02 Jul 2026 15:18:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 395954
IP address blocks: 45.81.149.0/24 maxlen: 24
185.202.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 06:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:48:c6:4d:41:b8:27:51:f8:f3:0b:da:68:81:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4a7522d27e62ae23a460143eba6733b79b24477
Validity
Not Before: Jul 2 15:18:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abe0613ee42733e43e87a84deb621e7ccf5b986e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:4a:86:9b:96:1c:21:7e:80:94:cb:74:32:16:
b1:ea:49:0e:3f:91:aa:e2:5f:fc:eb:9d:a9:c9:e7:
43:f5:5f:0b:da:5b:1b:40:84:00:53:17:de:c9:13:
00:81:74:22:7a:0d:95:1b:f8:83:7a:ee:a2:42:4a:
84:6e:b6:19:38:47:32:6c:8f:83:11:50:c3:26:7b:
72:06:df:e0:8a:e2:c4:7c:a4:b7:3a:64:5e:61:e9:
31:84:01:46:2c:b7:d4:7d:59:64:3b:6c:ba:53:4a:
8c:bf:76:7e:eb:f4:23:b2:c0:25:9c:2d:6d:99:12:
99:30:ce:c8:8e:6f:d3:fa:7a:96:e7:a7:4b:9c:19:
9f:dc:5f:66:17:c3:bb:2b:f8:f6:10:da:c7:fb:c0:
19:14:d4:a6:54:c7:82:07:db:fe:03:18:cb:c3:42:
7d:ac:79:60:25:83:e0:f7:3b:3d:0c:68:fb:5f:c5:
22:11:d2:34:f1:34:81:57:50:85:fa:bd:16:81:92:
c7:ae:7c:c4:63:06:10:70:f5:22:50:1f:28:8a:71:
89:29:ad:b9:f2:9a:4a:d4:d5:96:19:f9:ce:c9:b7:
2d:2b:04:e7:94:be:27:2a:6a:21:18:3b:81:25:19:
75:97:4c:e4:59:05:83:db:8f:4f:7d:bd:33:65:3b:
42:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E0:61:3E:E4:27:33:E4:3E:87:A8:4D:EB:62:1E:7C:CF:5B:98:6E
X509v3 Authority Key Identifier:
keyid:D4:A7:52:2D:27:E6:2A:E2:3A:46:01:43:EB:A6:73:3B:79:B2:44:77
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1KdSLSfmKuI6RgFD66ZzO3myRHc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/q-BhPuQnM-Q-h6hN62IefM9bmG4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/207934-9edc-4a89-820e-d8488b3ab42f/1/1KdSLSfmKuI6RgFD66ZzO3myRHc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.81.149.0/24
185.202.175.0/24
Signature Algorithm: sha256WithRSAEncryption
58:13:e7:b0:43:99:7b:eb:60:7d:c7:71:8a:e2:a9:3a:a4:9d:
24:23:4d:2c:c4:ba:d1:bc:08:88:f6:d5:c0:20:ab:6e:6e:d6:
fe:65:77:c8:ba:93:09:05:ee:ba:f3:1a:c8:e1:4f:ff:2b:62:
e9:44:ca:82:60:2f:4e:77:40:9d:1a:1c:e6:b9:ba:55:bb:d9:
5f:18:af:24:82:3f:71:27:9a:70:26:b9:ab:75:47:eb:0e:59:
6a:ee:f9:ac:b6:53:0a:18:eb:21:fc:8e:6b:5c:ce:c2:7a:33:
4d:9d:66:10:51:0d:b0:eb:86:29:b6:10:58:9f:28:bc:87:ba:
9d:32:ae:03:81:da:82:77:ea:80:08:68:4b:a1:9e:17:a1:0e:
c0:d7:c9:2c:ee:42:6c:d3:8c:73:07:d1:f1:4e:8d:41:3c:c3:
a3:bd:bd:ae:1a:9d:18:57:51:cf:e0:32:4f:56:4b:3d:34:0a:
45:27:3c:5b:c4:d3:49:42:71:df:c9:ec:11:76:e2:33:26:bb:
f9:f7:82:9c:71:ce:1c:b8:fc:11:60:f8:53:b5:47:ec:50:8b:
51:b8:98:47:e0:46:54:2c:77:0d:de:4f:13:2f:60:a1:f5:2c:
4b:be:61:3b:bd:d6:d1:5e:4d:0c:42:d6:93:39:32:0b:05:e0:
1c:4b:bd:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 13:59:15 2026 by rpki-client