Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QV8uMwMeiqvbvc5btmeGFJShTGA.roa
File: QV8uMwMeiqvbvc5btmeGFJShTGA.roa (raw, json)
Hash identifier: 6Ri2QcS9jkJknwJiYRrUeUel+FK0KP2oVcls7xEf6as=
Subject key identifier: 41:5F:2E:33:03:1E:8A:AB:DB:BD:CE:5B:B6:67:86:14:94:A1:4C:60
Certificate issuer: /CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Certificate serial: 01A05E9BCE2FF3DCED4C275B0969E5808FB5
Authority key identifier: 7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QV8uMwMeiqvbvc5btmeGFJShTGA.roa
Signing time: Tue 01 Sep 2026 20:14:24 +0000
ROA not before: Tue 01 Sep 2026 20:14:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198584
IP address blocks: 45.87.248.0/24 maxlen: 24
192.156.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5e:9b:ce:2f:f3:dc:ed:4c:27:5b:09:69:e5:80:8f:b5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d559aafbfc0931242e1d637298cf1dd223e4c26
Validity
Not Before: Sep 1 20:14:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=415f2e33031e8aabdbbdce5bb667861494a14c60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:77:6e:aa:7f:61:9f:43:4b:84:a1:d2:2e:b1:
ac:66:79:1d:cb:43:25:e3:fc:c5:b1:cf:80:ec:9f:
2d:b8:11:c1:eb:46:41:fd:ea:b3:c8:ab:cd:ee:69:
8b:52:2b:99:6f:3f:bf:e4:d9:9a:3c:2d:36:dd:3f:
b7:a9:86:f6:99:68:59:b1:e0:4b:c2:af:ca:ae:d0:
5e:a0:2e:a5:1e:81:1c:55:c6:36:d5:78:5e:a8:0e:
e8:c9:28:1f:d2:47:97:fe:f9:47:f2:1e:e6:41:70:
50:3a:64:c4:59:b5:15:e5:d5:d0:58:21:cc:21:7f:
37:00:ae:b9:c9:95:5f:66:a5:28:5e:ba:c2:bd:fd:
15:a5:a0:4d:9b:13:a8:89:6f:9f:7d:9e:59:3c:85:
50:0b:7d:99:f9:da:58:32:1b:73:ff:a6:4a:76:0b:
dc:e3:8d:4d:5b:73:dc:5b:9e:7e:2e:37:9e:66:f6:
d7:6f:01:b8:81:27:b1:43:97:01:25:80:e9:ad:de:
ef:fc:97:c7:93:f9:86:1e:5a:d4:53:4a:fa:c2:fd:
88:37:e1:b1:d1:bb:34:f7:47:c3:aa:4c:ff:88:33:
b6:f4:20:f6:cc:4f:be:ff:2b:c0:17:6a:91:2b:f1:
4e:a9:6f:81:87:6a:27:e6:c7:7b:58:5e:47:7a:77:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5F:2E:33:03:1E:8A:AB:DB:BD:CE:5B:B6:67:86:14:94:A1:4C:60
X509v3 Authority Key Identifier:
keyid:7D:55:9A:AF:BF:C0:93:12:42:E1:D6:37:29:8C:F1:DD:22:3E:4C:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVWar7_AkxJC4dY3KYzx3SI-TCY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/QV8uMwMeiqvbvc5btmeGFJShTGA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/49adc6-ba89-403f-ada9-8c5007c2a4b6/1/fVWar7_AkxJC4dY3KYzx3SI-TCY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.87.248.0/24
192.156.217.0/24
Signature Algorithm: sha256WithRSAEncryption
bc:e1:6f:80:ca:1c:29:b0:e9:03:03:2f:87:43:8a:eb:bd:79:
c6:c1:4b:7b:81:6b:dc:54:97:1c:35:e2:04:2e:a0:3c:20:d2:
b3:2e:89:36:e1:79:68:7c:98:61:bd:c7:71:1f:7e:18:e3:ea:
c4:24:2e:57:6e:8f:5a:74:72:89:48:46:15:eb:69:8e:c1:7a:
93:58:20:94:99:e5:dc:1f:1f:f2:64:e6:5d:a7:73:81:9f:49:
c8:42:98:aa:8c:2a:59:3a:fd:2f:6a:e3:f4:8a:a7:c2:58:31:
20:0d:f6:a9:f6:14:49:1f:bc:bd:83:41:8f:ee:da:cc:54:d7:
91:c9:bb:94:a9:16:d3:c7:f8:12:ca:87:76:53:d0:36:39:15:
fc:27:2d:86:0d:1f:ed:d2:58:07:b5:41:7e:d7:e3:ed:43:40:
2b:a2:a3:28:a5:65:e4:06:0a:81:b4:96:d9:08:9f:f4:0e:0b:
4e:72:86:e2:da:e9:2e:be:61:db:76:c8:dd:b3:2e:11:c0:39:
cf:32:2b:2b:5a:61:a6:1a:32:06:9d:c9:eb:7a:12:f6:5c:d1:
15:01:21:83:34:ab:79:09:16:d3:ef:43:1b:64:eb:f9:ce:3c:
8c:c9:20:72:2a:af:95:6b:ef:a6:05:0c:ca:25:eb:b8:7d:fb:
f0:ce:54:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:51 2026 by rpki-client