Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/DQFgC4bvsfi_pTqBICgk-bE15QA.roa
File: DQFgC4bvsfi_pTqBICgk-bE15QA.roa (raw, json)
Hash identifier: VJQLlTnWDMMy2v/wCXmkMZzMSnBdZIl4sHH+5xo0vAQ=
Subject key identifier: 0D:01:60:0B:86:EF:B1:F8:BF:A5:3A:81:20:28:24:F9:B1:35:E5:00
Certificate issuer: /CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Certificate serial: 019FFF6B44C52BEA7BF0346010CE949C76F0
Authority key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/DQFgC4bvsfi_pTqBICgk-bE15QA.roa
Signing time: Fri 14 Aug 2026 08:37:27 +0000
ROA not before: Fri 14 Aug 2026 08:37:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204244
IP address blocks: 177.177.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:6b:44:c5:2b:ea:7b:f0:34:60:10:ce:94:9c:76:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Validity
Not Before: Aug 14 08:37:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d01600b86efb1f8bfa53a81202824f9b135e500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:93:2b:c4:ab:8e:63:e5:51:19:cb:5b:cf:b7:
24:ba:16:c3:19:d7:ae:5e:5c:31:03:34:25:02:75:
24:a4:bb:5c:a4:44:28:1f:09:63:cf:fe:ba:f6:94:
9d:ec:38:3e:85:94:bf:74:f1:6a:ac:06:e5:52:eb:
72:84:81:a1:c4:65:1f:31:a0:8f:26:0d:f1:7f:18:
1d:a4:10:94:be:c6:a8:fb:86:98:4d:00:b8:45:39:
77:cd:6d:c2:bf:90:53:d0:76:64:bc:e9:9d:4a:5b:
92:dc:9d:ff:d7:91:fb:8b:13:0c:be:46:be:05:5a:
cc:f1:2d:fb:da:3f:16:e4:81:b7:ff:09:33:1d:81:
ac:70:5a:44:27:32:6c:05:e1:4f:31:f1:3b:75:20:
3f:8a:41:98:b2:fb:5d:29:2e:55:b2:a7:b9:c0:ee:
2e:ab:02:84:77:81:cb:e4:d4:98:47:39:11:64:99:
e0:33:16:e6:c4:9d:b5:a1:08:9f:9e:4d:c7:e7:bb:
75:b8:9a:e1:c6:b4:75:56:ec:be:96:4f:90:f7:cc:
60:e6:71:04:dc:d0:08:69:41:69:42:fc:3e:4a:74:
c1:df:05:75:7d:cb:fa:7f:53:5d:32:e4:b1:a0:9b:
93:79:a1:c4:b4:8c:c9:57:6b:a3:d7:55:5d:c9:6c:
2b:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:01:60:0B:86:EF:B1:F8:BF:A5:3A:81:20:28:24:F9:B1:35:E5:00
X509v3 Authority Key Identifier:
keyid:B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/DQFgC4bvsfi_pTqBICgk-bE15QA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.177.83.0/24
Signature Algorithm: sha256WithRSAEncryption
b1:4f:4f:99:dd:b6:7b:f3:66:29:b8:77:6a:17:8a:5e:51:19:
e8:94:c4:75:29:23:72:18:13:2a:71:c0:ea:83:30:ed:ce:75:
06:11:c5:46:60:32:a2:ad:6a:8c:7a:ef:74:a5:39:8c:af:41:
8b:13:f0:f1:81:5d:1c:9d:b2:bb:58:e6:0c:2b:02:6e:c3:3a:
ef:b6:fd:b6:b3:e0:67:3c:88:31:d4:c8:fd:78:74:0e:ac:78:
9b:7a:a4:48:63:15:ca:ac:57:b4:20:c6:d9:3a:76:e0:40:13:
10:f4:f2:2a:44:a7:e8:47:13:03:65:34:85:50:f5:cf:bd:7e:
a7:29:65:4c:6b:c1:5d:56:00:73:6f:6b:5b:87:42:f1:3f:3d:
4e:8d:8f:db:04:f8:9d:bb:6f:94:b0:25:a0:7f:80:94:bd:7a:
1a:3f:af:69:eb:c8:9e:cc:c6:1e:1e:8e:06:5d:44:4d:f6:9f:
83:90:10:6e:ae:42:55:5e:38:26:32:f3:f2:1d:27:d5:8a:fc:
dc:db:4b:56:b4:d2:5f:7e:73:e6:ce:62:34:11:bf:dd:65:80:
52:ef:8b:f6:b0:89:2b:08:ed:af:8f:7e:d3:f1:09:47:df:ce:
ba:6e:84:6b:f3:27:f9:4d:f3:2d:0d:95:91:6a:09:29:09:e9:
f5:7f:2b:ed
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 07:26:21 2026 by rpki-client