Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/Qds8QcMRNkZLZIxEq4DIiHLqmf8.roa
File: Qds8QcMRNkZLZIxEq4DIiHLqmf8.roa (raw, json)
Hash identifier: 8W6wOK2I4qsuYzKI/ho+wcaX0Cqt4fg6SETKF3W+ImI=
Subject key identifier: 41:DB:3C:41:C3:11:36:46:4B:64:8C:44:AB:80:C8:88:72:EA:99:FF
Certificate issuer: /CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Certificate serial: 019F3381F8A8D6CA3BD3B41B2C4056D38CD0
Authority key identifier: 7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/Qds8QcMRNkZLZIxEq4DIiHLqmf8.roa
Signing time: Sun 05 Jul 2026 18:19:43 +0000
ROA not before: Sun 05 Jul 2026 18:19:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 45.130.64.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:33:81:f8:a8:d6:ca:3b:d3:b4:1b:2c:40:56:d3:8c:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ca643bb399c6d87adc4c7cba5d2b72fbd00d046
Validity
Not Before: Jul 5 18:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41db3c41c31136464b648c44ab80c88872ea99ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:7e:2a:48:d6:08:1c:3a:b9:f0:13:c9:c2:ed:
bf:d6:2b:75:85:cb:be:f5:2e:75:93:f8:07:32:cb:
db:03:50:60:6d:d0:fa:5c:2b:03:30:62:5d:13:59:
d0:d6:57:87:20:54:09:08:8a:0b:13:d2:8f:66:6c:
fc:2d:5a:bb:75:1a:8a:da:74:3d:38:79:4a:d0:3d:
96:b4:ef:4d:3c:64:a1:4f:c0:9e:23:c5:40:1d:c0:
8b:ca:39:8e:cf:ec:94:66:89:fe:38:09:be:bc:ad:
12:75:ca:b1:39:38:03:79:81:46:6c:16:d2:bf:64:
cf:92:33:9d:e8:e9:f4:1c:15:95:ff:84:f4:b8:d3:
94:4e:4c:0e:79:70:e8:a4:ff:c1:8b:41:74:21:e9:
b7:02:87:67:eb:50:61:35:61:d9:12:43:03:86:9d:
f5:af:fb:84:12:00:b6:8b:7b:e2:3c:e3:f3:93:7a:
43:86:d6:8b:21:93:71:ce:4e:19:52:43:16:fe:b2:
eb:1c:71:4b:fc:78:43:f1:70:89:7a:3f:bf:17:e1:
2e:ad:f3:23:99:f0:d3:ff:86:18:ad:35:dd:f4:1b:
2a:0b:8b:56:8a:43:50:d4:a9:0e:2f:0f:5e:e5:61:
16:02:46:e5:89:6f:61:ba:7a:51:20:3e:22:7d:df:
e6:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DB:3C:41:C3:11:36:46:4B:64:8C:44:AB:80:C8:88:72:EA:99:FF
X509v3 Authority Key Identifier:
keyid:7C:A6:43:BB:39:9C:6D:87:AD:C4:C7:CB:A5:D2:B7:2F:BD:00:D0:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fKZDuzmcbYetxMfLpdK3L70A0EY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/Qds8QcMRNkZLZIxEq4DIiHLqmf8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/c0301d-5801-4ac6-b503-44ea64721c9e/1/fKZDuzmcbYetxMfLpdK3L70A0EY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.64.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:70:ed:8b:c4:04:b1:ac:55:37:35:78:1e:c9:f2:4c:f6:94:
47:09:c7:81:ea:cc:c8:5a:3e:f6:fc:b3:e0:cb:ca:bf:aa:77:
fc:63:d6:a8:6a:64:a5:61:d1:c3:c1:9c:51:36:1f:fe:88:5b:
b2:c3:10:e2:5c:c9:4d:dc:a0:0f:29:d2:83:39:71:d9:f5:01:
e7:03:66:a8:80:39:84:f6:c8:3c:5d:77:0a:0b:c4:20:49:7a:
1b:74:2c:e8:0e:f9:93:c4:d6:21:b0:80:c8:b3:b0:12:00:8f:
80:91:cb:b1:cc:df:1b:e6:4e:61:42:b7:88:a1:29:76:6d:d8:
d7:e1:07:f0:27:c8:aa:3a:b6:f2:0f:29:58:ea:5a:1a:14:3d:
68:a0:b1:89:f8:7c:36:ad:75:ba:a5:7d:a6:ee:ef:20:2f:27:
30:a0:de:98:33:f2:bc:72:2b:06:45:76:f5:51:12:cc:36:7c:
9b:4c:19:18:34:e3:e3:4f:1a:b5:67:b4:f0:08:49:26:12:1a:
d6:7c:1a:0b:a7:32:96:5b:d1:92:49:57:5e:37:08:3e:c1:46:
4e:17:62:b0:4d:51:1f:1d:19:e3:76:9c:d0:8f:63:b1:40:e7:
1b:58:a3:82:26:22:f3:d4:27:c9:b4:25:94:9d:83:7b:e5:34:
80:b0:86:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 13:46:55 2026 by rpki-client