Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/nqjEED_CDPZlYI6-L69dtEKf0YA.roa
File: nqjEED_CDPZlYI6-L69dtEKf0YA.roa (raw, json)
Hash identifier: Z0BAi8q6X2llUNO1mxSzOF3Vs0/hSR2lV4VlcJ+fceE=
Subject key identifier: 9E:A8:C4:10:3F:C2:0C:F6:65:60:8E:BE:2F:AF:5D:B4:42:9F:D1:80
Certificate issuer: /CN=dfbbd6e23463c2cfe792c36e0890f03918ef4776
Certificate serial: 019F2368F9F64DA6334498248B6C4EA8E5C5
Authority key identifier: DF:BB:D6:E2:34:63:C2:CF:E7:92:C3:6E:08:90:F0:39:18:EF:47:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/37vW4jRjws_nksNuCJDwORjvR3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/nqjEED_CDPZlYI6-L69dtEKf0YA.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209635
IP address blocks: 185.185.78.0/23 maxlen: 23
185.185.79.0/24 maxlen: 24
2a0f:a0c0:fffe::/47 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/37vW4jRjws_nksNuCJDwORjvR3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f9:f6:4d:a6:33:44:98:24:8b:6c:4e:a8:e5:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfbbd6e23463c2cfe792c36e0890f03918ef4776
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ea8c4103fc20cf665608ebe2faf5db4429fd180
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:8c:1a:16:4a:d2:a7:2b:35:4c:73:a6:f8:fd:
6f:ce:00:04:78:9c:a8:9a:51:70:e0:6a:79:f3:9c:
c1:b7:e3:af:29:3e:e0:5d:95:8d:6c:2c:ac:64:21:
20:ed:26:18:00:8e:10:1a:ce:db:1c:fe:da:c1:a8:
05:27:94:28:f8:5e:29:a3:67:03:11:48:c6:d8:6f:
b9:c9:7e:e6:e2:4e:01:12:bb:de:b2:9d:43:e4:16:
d6:5a:d3:94:f1:b1:06:b5:6d:f0:c6:ef:42:10:af:
2b:50:00:68:5b:07:69:d4:b5:32:a7:25:49:a4:45:
5a:66:fd:aa:1f:19:51:c5:18:f7:28:00:a1:03:53:
33:8f:69:35:cf:5b:95:45:96:2b:bb:e9:6d:9f:7c:
3e:7a:2c:24:74:fd:89:c0:01:0d:c7:de:05:56:45:
97:95:ff:b9:34:0d:9b:14:d5:4d:93:f2:75:46:73:
9f:e2:f8:55:dd:70:42:db:7f:8b:f9:2f:36:59:9d:
be:6c:46:f7:3d:46:73:ad:5d:75:b1:ef:65:5f:01:
f1:ff:57:51:a8:3e:1d:7d:b9:0a:cc:3a:31:3e:f3:
63:39:ae:74:5f:b8:fd:69:f7:2d:7b:88:6a:bb:e5:
83:53:ee:28:a8:12:f7:4d:f7:d2:b6:37:f5:47:36:
9d:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A8:C4:10:3F:C2:0C:F6:65:60:8E:BE:2F:AF:5D:B4:42:9F:D1:80
X509v3 Authority Key Identifier:
keyid:DF:BB:D6:E2:34:63:C2:CF:E7:92:C3:6E:08:90:F0:39:18:EF:47:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/37vW4jRjws_nksNuCJDwORjvR3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/nqjEED_CDPZlYI6-L69dtEKf0YA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/757fc5-8029-4828-8547-62e260313e4c/1/37vW4jRjws_nksNuCJDwORjvR3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.185.78.0/23
IPv6:
2a0f:a0c0:fffe::/47
Signature Algorithm: sha256WithRSAEncryption
28:83:a5:74:30:14:40:8d:85:bc:26:02:04:9a:97:68:43:e5:
8e:68:0b:66:2d:95:e3:e5:6d:72:8f:3d:f6:b7:99:c4:10:19:
43:39:a3:64:c1:4a:96:d5:07:cc:13:59:7f:bb:cd:6e:ad:f9:
68:a6:77:33:d7:d9:e9:4f:96:32:cb:a3:8b:7e:c1:92:02:a0:
02:93:7f:a8:f5:4c:6b:88:66:6d:59:5c:6e:c0:79:1d:3e:4c:
33:83:a3:46:d5:6c:cc:11:8f:d9:da:6e:9d:68:e8:06:c8:1c:
9f:6a:b8:d3:62:09:e4:c0:1d:6f:95:e2:28:6f:c9:75:56:ef:
02:ef:b1:57:9b:72:d0:a2:1f:03:e7:4e:28:c5:b6:fd:6e:6e:
79:c9:63:69:a4:cb:27:77:8f:cd:ef:a0:38:76:17:c5:02:60:
6a:47:fb:a1:a3:82:06:18:07:93:51:67:4b:d7:ce:e9:32:51:
cd:01:00:ba:93:f2:d0:0a:58:5a:7e:d1:23:b9:e8:5f:a3:e7:
96:87:fa:33:fd:4b:c8:55:e0:2d:58:45:11:c0:15:01:6c:15:
7f:ba:00:25:b3:f6:fd:0a:d0:d0:2a:ef:c9:ce:1c:3b:c9:1b:
91:d8:72:40:34:9d:e4:5c:d3:97:2f:ba:7d:48:4e:c5:08:b5:
21:01:f6:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:59:13 2026 by rpki-client