Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/DQZ4AkhSWkkK-xhDxDLfYVnCs58.roa
File: DQZ4AkhSWkkK-xhDxDLfYVnCs58.roa (raw, json)
Hash identifier: gHk7NFh1F+4NpAWB5nDMuQIc+xH3Ca6SzH/9M8kG9tw=
Subject key identifier: 0D:06:78:02:48:52:5A:49:0A:FB:18:43:C4:32:DF:61:59:C2:B3:9F
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 01A020AAECC14078E4AFC5DC115896DEDFDF
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/DQZ4AkhSWkkK-xhDxDLfYVnCs58.roa
Signing time: Thu 20 Aug 2026 19:34:27 +0000
ROA not before: Thu 20 Aug 2026 19:34:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a01:f040::/29 maxlen: 29
2a0e:d300::/29 maxlen: 29
2a0f:89c0::/29 maxlen: 29
2a10:7ac0::/29 maxlen: 29
2a13:b740::/29 maxlen: 29
2a13:bd40::/29 maxlen: 29
2a13:be40::/29 maxlen: 29
2a13:d0c0::/32 maxlen: 32
2a13:d0c4::/32 maxlen: 32
2a13:d0c5::/32 maxlen: 32
2a13:d0c7::/32 maxlen: 32
2a13:d1c0::/29 maxlen: 29
2a13:dfc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:20:aa:ec:c1:40:78:e4:af:c5:dc:11:58:96:de:df:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Aug 20 19:34:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d06780248525a490afb1843c432df6159c2b39f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:a6:91:a2:f0:54:81:6d:9f:2e:f8:95:76:8f:
11:fa:73:55:f6:5d:40:a0:7d:be:76:b0:88:bd:91:
23:3b:6c:b6:fc:0a:2b:5b:31:81:9f:ce:4c:ff:89:
9f:b4:13:8f:73:bf:d5:2d:69:52:30:7f:2a:62:0f:
b8:fb:24:b1:e9:57:ab:c3:5b:ca:9a:a8:b3:01:66:
56:1e:e7:ca:fe:87:e5:be:cd:6e:65:db:ed:0e:4f:
c8:e1:0f:0f:2a:9d:20:95:d4:85:24:d8:a0:d8:3b:
2b:e5:bf:24:bf:a3:6f:f4:d5:43:23:6e:df:02:a3:
a1:d2:a5:e1:39:85:3d:6d:15:2b:dd:5a:70:8b:ab:
91:8d:40:ee:bb:20:32:f0:8c:27:b2:06:05:c8:9c:
83:e0:b8:3b:68:c4:0b:f2:96:31:cf:d2:c0:35:85:
d8:ae:65:09:ee:9d:43:8f:81:63:71:72:b9:68:5e:
15:3e:d7:8c:8e:0b:26:aa:f5:8f:b4:8c:50:a0:4c:
3b:fd:f4:50:9d:af:79:b1:f2:7c:86:d1:6f:bb:a1:
4b:f5:31:01:09:c3:92:a0:bf:26:1f:c0:fd:1d:16:
1a:37:ec:e1:20:ad:1d:71:01:06:b6:ea:01:ba:ac:
f4:83:dd:d5:37:aa:b4:17:52:64:27:6c:d7:f7:74:
aa:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:06:78:02:48:52:5A:49:0A:FB:18:43:C4:32:DF:61:59:C2:B3:9F
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/DQZ4AkhSWkkK-xhDxDLfYVnCs58.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f040::/29
2a0e:d300::/29
2a0f:89c0::/29
2a10:7ac0::/29
2a13:b740::/29
2a13:bd40::/29
2a13:be40::/29
2a13:d0c0::/32
2a13:d0c4::/31
2a13:d0c7::/32
2a13:d1c0::/29
2a13:dfc0::/29
Signature Algorithm: sha256WithRSAEncryption
71:46:d3:9e:f2:fa:50:40:4c:8a:25:71:34:d8:48:c6:a5:23:
ad:5d:57:00:21:11:23:a3:04:e9:61:97:a1:57:53:58:76:db:
04:3a:38:42:fa:18:d4:48:83:e0:79:36:8e:1c:d2:80:d7:a6:
f2:5b:74:0e:46:a3:cd:70:60:25:cc:87:3d:7e:45:1a:02:88:
4d:50:64:57:7e:ad:af:2b:44:9d:4a:de:85:d1:0f:e0:9b:63:
22:ab:af:ea:9c:a3:1d:b5:7d:8b:44:5a:24:54:fe:66:ca:44:
e5:ba:a3:e6:a8:7b:74:2f:e9:da:b9:09:2a:54:f9:c8:82:ef:
b4:0c:71:b8:88:15:f7:3f:70:6c:47:0c:11:e8:e9:95:0f:6b:
5f:52:d2:b1:4d:4b:e5:90:7b:e8:35:a6:e3:f4:89:77:7d:67:
60:ea:eb:3c:10:35:1c:35:7c:82:fc:04:da:b6:08:67:22:b6:
48:d4:ab:bf:ed:dd:59:fd:f2:0b:d3:5a:20:02:0c:b7:0e:dc:
9d:9b:1f:c9:28:8e:28:db:80:cb:7d:b5:47:7c:1d:31:b8:23:
f4:bc:f2:9b:c1:aa:b0:47:f7:1b:ba:5c:04:b8:cb:e4:f9:8c:
bb:00:1e:6a:4b:7f:27:95:82:4e:0d:ab:1d:05:f7:ac:a0:22:
2f:dc:db:eb
-----BEGIN CERTIFICATE-----
MIIFSzCCBDOgAwIBAgISAaAgquzBQHjkr8XcEViW3t/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU4YWQ2MGRhNTI2NzFlOTA4M2NmMzk4NjRlY2EyYWEyMzI0
MWJlOWUwHhcNMjYwODIwMTkzNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwZDA2NzgwMjQ4NTI1YTQ5MGFmYjE4NDNjNDMyZGY2MTU5YzJiMzlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoKaRovBUgW2fLviVdo8R+nNV9l1A
oH2+drCIvZEjO2y2/AorWzGBn85M/4mftBOPc7/VLWlSMH8qYg+4+ySx6Verw1vK
mqizAWZWHufK/oflvs1uZdvtDk/I4Q8PKp0gldSFJNig2Dsr5b8kv6Nv9NVDI27f
AqOh0qXhOYU9bRUr3Vpwi6uRjUDuuyAy8IwnsgYFyJyD4Lg7aMQL8pYxz9LANYXY
rmUJ7p1Dj4FjcXK5aF4VPteMjgsmqvWPtIxQoEw7/fRQna95sfJ8htFvu6FL9TEB
CcOSoL8mH8D9HRYaN+zhIK0dcQEGtuoBuqz0g93VN6q0F1JkJ2zX93SqUQIDAQAB
o4ICVzCCAlMwHQYDVR0OBBYEFA0GeAJIUlpJCvsYQ8Qy32FZwrOfMB8GA1UdIwQY
MBaAFFitYNpSZx6Qg885hk7KKqIyQb6eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDct
MTFiM2NmM2ZkNGUxLzEvRFFaNEFraFNXa2tLLXhoRHhETGZZVm5DczU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy83YTE5ODgtMjczNi00OWRjLWE5MDctMTFiM2NmM2ZkNGUx
LzEvV0sxZzJsSm5IcENEenptR1Rzb3FvakpCdnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMG0GCCsGAQUFBwEHAQH/BF4wXDBaBAIAAjBUAwUDKgHwQAMF
AyoO0wADBQMqD4nAAwUDKhB6wAMFAyoTt0ADBQMqE71AAwUDKhO+QAMFACoT0MAD
BQEqE9DEAwUAKhPQxwMFAyoT0cADBQMqE9/AMA0GCSqGSIb3DQEBCwUAA4IBAQBx
RtOe8vpQQEyKJXE02EjGpSOtXVcAIREjowTpYZehV1NYdtsEOjhC+hjUSIPgeTaO
HNKA16byW3QORqPNcGAlzIc9fkUaAohNUGRXfq2vK0SdSt6F0Q/gm2Miq6/qnKMd
tX2LRFokVP5mykTluqPmqHt0L+nauQkqVPnIgu+0DHG4iBX3P3BsRwwR6OmVD2tf
UtKxTUvlkHvoNabj9Il3fWdg6us8EDUcNXyC/ATatghnIrZI1Ku/7d1Z/fIL01og
Agy3Dtydmx/JKI4o24DLfbVHfB0xuCP0vPKbwaqwR/cbulwEuMvk+Yy7AB5qS38n
lYJODasdBfesoCIv3Nvr
-----END CERTIFICATE-----
Generated at Fri Aug 21 22:24:51 2026 by rpki-client