Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/i44ZsQWX9kFjZrBXqxJShe4F4UY.roa
File: i44ZsQWX9kFjZrBXqxJShe4F4UY.roa (raw, json)
Hash identifier: BxMxpzl8UVGfzxTIfCiqxK6y7sVAleuv4Iaf2OthD/8=
Subject key identifier: 8B:8E:19:B1:05:97:F6:41:63:66:B0:57:AB:12:52:85:EE:05:E1:46
Certificate issuer: /CN=420ff38258629ed50e0b7564c233411581e1df0e
Certificate serial: 019F2368FE631130312E1FED23CC5478F754
Authority key identifier: 42:0F:F3:82:58:62:9E:D5:0E:0B:75:64:C2:33:41:15:81:E1:DF:0E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qg_zglhintUOC3VkwjNBFYHh3w4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/i44ZsQWX9kFjZrBXqxJShe4F4UY.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2631
IP address blocks: 185.150.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qg_zglhintUOC3VkwjNBFYHh3w4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fe:63:11:30:31:2e:1f:ed:23:cc:54:78:f7:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=420ff38258629ed50e0b7564c233411581e1df0e
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b8e19b10597f6416366b057ab125285ee05e146
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:c5:b7:de:16:05:8e:80:bf:2e:a8:40:71:f8:
43:c7:4b:87:46:12:71:0a:6e:a0:6d:21:df:ff:ee:
86:d0:1e:13:a4:72:e1:84:97:4b:e3:09:e9:be:68:
53:1a:e6:54:75:7f:f1:07:e3:96:72:de:8e:9f:c2:
c9:8e:71:40:8f:34:01:af:f5:15:bb:2b:49:28:37:
ad:82:36:6b:d4:b5:31:14:28:2b:b5:ca:ff:93:53:
b8:e0:ef:67:cf:ee:1c:8b:79:c4:10:b3:e1:41:45:
3a:85:e9:61:40:6f:1e:cc:e7:30:bb:61:92:09:57:
bb:48:69:35:60:71:8b:bc:fa:46:ed:82:ca:a1:6d:
7d:d7:79:a2:2f:12:e6:b6:23:9a:c8:79:94:b1:4e:
4b:c0:fe:48:93:e1:70:5d:7f:ba:0a:91:a9:be:b5:
86:29:5f:12:1e:b1:02:64:5e:b3:24:74:3b:60:06:
e6:2d:88:ce:92:9e:a2:a4:df:bc:f8:cf:cd:67:9d:
bd:67:15:dd:54:2f:6f:27:5f:d7:9a:c0:2e:df:fb:
91:ed:e9:63:d5:d9:41:4b:1b:05:cc:ed:b7:0f:c8:
0c:cb:8b:02:96:18:9e:53:a4:8d:3c:0a:bc:29:5c:
d3:77:cc:b3:63:3f:e6:0c:f2:eb:49:8a:8e:ff:12:
34:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:8E:19:B1:05:97:F6:41:63:66:B0:57:AB:12:52:85:EE:05:E1:46
X509v3 Authority Key Identifier:
keyid:42:0F:F3:82:58:62:9E:D5:0E:0B:75:64:C2:33:41:15:81:E1:DF:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qg_zglhintUOC3VkwjNBFYHh3w4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/i44ZsQWX9kFjZrBXqxJShe4F4UY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/6871a0-afb2-45ab-adde-62be1f02ab0c/1/Qg_zglhintUOC3VkwjNBFYHh3w4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.20.0/24
Signature Algorithm: sha256WithRSAEncryption
40:88:fd:39:5f:a3:0a:8f:54:b5:7c:8e:a8:35:a5:93:06:1e:
dd:1a:d5:96:7a:bc:c0:ba:09:be:78:19:84:e7:25:45:95:ee:
7d:22:9c:63:70:61:f0:d5:44:7d:56:08:e4:02:6c:4c:69:5d:
56:0d:aa:fa:37:a0:2a:13:eb:91:68:fd:66:d4:0e:c9:8a:26:
da:df:e3:20:42:f5:a4:08:7c:dd:fb:e1:25:4e:80:ef:09:1f:
61:d1:ce:73:65:76:d7:91:da:5d:62:80:7d:fd:e8:73:b3:44:
f0:8f:91:a1:0e:c6:e3:e6:cb:20:6f:58:71:e8:49:e5:ca:a6:
6f:1d:37:97:e8:d6:02:91:d7:d1:0e:22:a3:84:29:83:71:1a:
57:1a:9c:55:47:5f:b8:4a:8f:55:34:7d:ec:eb:55:09:37:ef:
c8:97:97:dd:af:ea:c9:c0:0b:8b:5a:b0:92:fe:0f:c9:8e:28:
f6:e5:f7:bb:bf:9e:48:da:1d:1e:95:a0:c1:4e:82:53:59:f2:
ad:71:81:55:38:92:8b:ef:de:0f:db:5a:dc:b9:67:5d:26:ad:
94:f8:29:b7:1d:a0:02:bf:47:10:d5:8b:65:7f:60:ed:18:a7:
0c:54:02:ca:8b:6f:82:05:e8:d1:16:0e:8c:ab:ef:33:5c:ac:
81:bf:c7:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 22:11:56 2026 by rpki-client