Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ql7rOmZ_btr3d4A37f2Df8JDM0E.roa
File: ql7rOmZ_btr3d4A37f2Df8JDM0E.roa (raw, json)
Hash identifier: /SRzz/yYDf39iuJ35shny0PsFk2f1QMbJVc74yAIIqU=
Subject key identifier: AA:5E:EB:3A:66:7F:6E:DA:F7:77:80:37:ED:FD:83:7F:C2:43:33:41
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 019F5F97AE968BEB481B1EC3C4A0B5E36180
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ql7rOmZ_btr3d4A37f2Df8JDM0E.roa
Signing time: Tue 14 Jul 2026 07:46:43 +0000
ROA not before: Tue 14 Jul 2026 07:46:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 77.246.212.0/22 maxlen: 22
88.80.137.0/24 maxlen: 24
88.80.141.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 06:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:97:ae:96:8b:eb:48:1b:1e:c3:c4:a0:b5:e3:61:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Jul 14 07:46:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa5eeb3a667f6edaf7778037edfd837fc2433341
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:58:1c:99:55:51:83:67:7a:e6:eb:26:a5:c6:
b6:7c:6f:5d:a6:b8:37:fd:0f:0f:52:30:1a:13:40:
c1:a8:f0:19:13:52:24:a3:aa:7a:cc:6e:58:98:4d:
30:25:32:69:d9:bd:a9:37:32:0c:f2:4b:fd:86:a0:
11:a5:19:d2:15:d2:f8:01:4b:15:53:18:e5:46:68:
26:43:55:79:71:4b:a7:43:29:e2:2d:72:1c:ed:ad:
74:ca:49:6d:eb:fc:00:05:dc:22:95:e7:78:95:70:
91:e6:34:71:6c:b9:3e:ee:a2:4f:e7:ab:4e:cd:11:
f7:61:58:62:f2:43:3d:b6:33:e6:91:72:a6:29:19:
b2:42:a7:2f:55:27:fc:15:13:28:f8:f0:d2:a1:51:
e0:a3:e7:a6:0a:0e:31:15:84:08:49:2c:de:50:bb:
30:94:b0:ea:23:b6:ad:05:2a:bc:24:3b:e1:92:20:
ae:99:ef:23:c6:01:b1:6f:8f:3d:45:40:ed:b5:74:
2f:36:4a:2e:ea:c7:39:ac:05:d8:a9:be:e7:31:d2:
9d:a4:62:57:44:e6:3c:a6:05:34:23:ba:ae:04:39:
b2:20:7f:d5:3b:c6:70:6c:3f:6d:cc:47:e6:14:63:
0c:69:78:21:81:6d:93:02:1d:41:ec:d9:94:37:61:
93:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5E:EB:3A:66:7F:6E:DA:F7:77:80:37:ED:FD:83:7F:C2:43:33:41
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/ql7rOmZ_btr3d4A37f2Df8JDM0E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.212.0/22
88.80.137.0/24
88.80.141.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:c2:92:5f:18:6c:3a:7d:0f:50:d3:13:73:0d:2e:68:8b:4f:
b0:9d:54:54:b8:88:72:8c:be:02:67:79:27:09:71:1c:85:6b:
e5:a8:9c:2b:2d:ca:7c:ba:9d:ab:6f:4d:f7:b6:33:13:d8:14:
89:9e:fa:1a:68:6e:36:93:8b:8a:41:64:cc:17:65:ae:94:3d:
38:f1:74:cc:c0:7a:33:c5:ce:c9:4e:1d:a7:b3:ed:77:3c:0e:
84:04:b1:1c:99:67:01:7e:a7:b6:b1:09:93:a5:f9:3f:5f:ee:
6d:7a:7b:36:8c:2c:ac:d3:d3:64:4b:e7:92:18:1a:5f:ef:07:
75:2f:48:53:4c:e6:21:38:c3:d8:72:72:b4:6d:a8:8e:ca:cc:
6f:dc:62:5b:c3:46:f7:a0:b9:04:35:13:ad:1d:38:b5:c9:19:
66:57:02:7e:dd:5b:3a:ef:6f:31:41:c1:49:fb:b8:4f:34:5d:
fa:10:79:ef:c3:54:2b:b9:39:88:d5:74:68:6d:ff:86:e9:4d:
38:3c:87:92:50:84:b8:89:ec:65:cc:a9:04:d8:76:33:94:3e:
e1:13:0c:00:94:53:19:f1:51:2e:13:a0:a7:52:b8:7d:4b:78:
f0:df:31:27:a5:43:e7:99:40:c8:9b:5e:24:56:e7:37:25:68:
4f:2c:f2:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:26 2026 by rpki-client