Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/qlL1-2GE4mI2X1dDUfos4HRXWvs.roa
File: qlL1-2GE4mI2X1dDUfos4HRXWvs.roa (raw, json)
Hash identifier: i+Jf31leqYMzbHVciGj/LtFowlyeXRnwp7vb+MtFGeg=
Subject key identifier: AA:52:F5:FB:61:84:E2:62:36:5F:57:43:51:FA:2C:E0:74:57:5A:FB
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019F662325C2C83252B2B199917730070E6B
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/qlL1-2GE4mI2X1dDUfos4HRXWvs.roa
Signing time: Wed 15 Jul 2026 14:16:46 +0000
ROA not before: Wed 15 Jul 2026 14:16:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219201
IP address blocks: 185.191.143.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:23:25:c2:c8:32:52:b2:b1:99:91:77:30:07:0e:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Jul 15 14:16:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa52f5fb6184e262365f574351fa2ce074575afb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:6c:20:d5:26:b8:36:27:2d:c0:a7:c6:60:ac:
87:ba:82:80:92:bc:4d:67:54:77:b7:e1:b4:6c:7e:
76:52:1b:11:ac:5f:ef:7c:9b:81:80:98:f3:68:40:
39:50:cf:8d:4d:7b:1e:27:ba:62:8c:6c:59:12:df:
33:63:df:af:41:83:21:9f:d3:7d:1b:56:1e:4a:ab:
ea:d4:44:25:19:3c:f7:26:e1:53:40:e2:4a:1d:84:
74:72:9c:e5:bb:a7:b7:b1:fe:4d:0e:20:a4:27:04:
fd:68:39:d3:70:23:86:35:27:52:5a:44:e9:70:f8:
d3:6c:11:c0:6a:22:c4:97:98:e3:5e:b3:e8:0c:d2:
8d:cd:ea:67:f1:0a:dd:42:6f:4d:52:b9:21:6c:71:
26:ad:97:ca:c6:e2:7c:71:e0:46:9e:51:0f:68:b1:
07:2c:70:81:49:24:37:76:a0:06:58:49:d3:5b:f8:
46:d1:25:a9:ec:4c:74:fc:3b:39:3d:82:8c:fb:18:
7f:b1:e5:48:4d:72:88:93:7b:31:92:0c:24:6d:2e:
9e:95:5f:1e:13:fb:20:68:f9:84:61:df:fa:ea:15:
d9:9a:46:a5:b9:e2:fe:bb:74:d4:18:d2:b1:9a:ef:
70:b4:dc:8e:dd:fb:ca:08:ea:49:ec:0d:46:12:f0:
2a:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:52:F5:FB:61:84:E2:62:36:5F:57:43:51:FA:2C:E0:74:57:5A:FB
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/qlL1-2GE4mI2X1dDUfos4HRXWvs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.191.143.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:34:3b:b5:94:45:e6:4f:5e:50:bb:89:dd:7b:bc:43:3a:db:
ff:0f:24:79:38:b9:4d:59:15:7c:8a:eb:e9:57:09:cb:7b:0d:
14:ab:19:76:7e:5b:2e:2b:3c:1e:41:2b:78:1d:2a:5e:c5:09:
6f:17:61:95:f6:cd:0e:ed:7f:f7:32:6f:15:d3:2b:29:66:ff:
0d:84:07:58:18:92:9c:1e:86:65:9a:b8:c3:b2:d0:92:18:9f:
9a:61:27:58:d2:0d:6e:f3:e1:b7:6a:b7:97:75:02:6c:42:92:
7e:a8:9c:c5:0f:1e:dc:13:85:ce:68:41:7c:48:13:0a:fd:f0:
a7:ce:12:4a:87:f5:d7:73:1f:d2:4d:13:9c:44:17:65:98:b6:
3c:5f:27:e8:9e:22:ef:a0:17:df:e0:89:b0:f1:a5:5a:49:ca:
71:bd:8d:fd:59:1b:11:a5:35:8d:c3:6d:0a:a7:ea:80:76:9c:
cb:2e:b6:40:68:e1:57:85:4f:33:a6:49:7c:82:a7:e1:79:0e:
6e:3e:b6:3f:e0:c3:ef:fe:ca:94:67:71:84:64:44:cd:89:15:
0c:56:89:1d:58:18:ff:0d:c0:a2:d4:fa:74:17:1c:5a:37:82:
2f:2b:28:e0:08:d4:db:f3:73:68:3f:0e:12:49:6f:cc:40:87:
b2:32:af:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:53:27 2026 by rpki-client