Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/_QGC9bzXQgUQnvKg65WHq3KuPR4.roa
File: _QGC9bzXQgUQnvKg65WHq3KuPR4.roa (raw, json)
Hash identifier: 9yWz5L2iR2vS/TJpjDLezXolMQ6rUEcEFagthqiB/iI=
Subject key identifier: FD:01:82:F5:BC:D7:42:05:10:9E:F2:A0:EB:95:87:AB:72:AE:3D:1E
Certificate issuer: /CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Certificate serial: 019F23693A5DECDA45D95101AEFD2D5DE922
Authority key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/_QGC9bzXQgUQnvKg65WHq3KuPR4.roa
Signing time: Thu 02 Jul 2026 15:18:46 +0000
ROA not before: Thu 02 Jul 2026 15:18:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212259
IP address blocks: 200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:3a:5d:ec:da:45:d9:51:01:ae:fd:2d:5d:e9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Validity
Not Before: Jul 2 15:18:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd0182f5bcd74205109ef2a0eb9587ab72ae3d1e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:52:6f:b0:15:ca:6a:80:6e:b3:0d:d2:e5:
2b:88:3f:b6:7f:cb:0d:a6:d7:2a:d3:43:2c:20:20:
99:6e:5a:92:70:a4:d6:06:a8:90:80:25:97:d6:ac:
96:25:c7:33:4c:76:81:83:82:9c:c5:b5:6e:14:ab:
e4:37:d6:b7:90:b2:76:6a:b9:e2:3e:f2:dc:28:2a:
9b:11:af:06:13:d0:de:92:59:0e:cd:45:bc:e0:26:
45:65:a8:4f:16:aa:dc:f4:8f:b1:52:dc:23:bc:44:
69:6a:5e:42:fd:81:96:40:f9:0f:20:5f:36:c1:2d:
6d:72:d4:2f:3e:f0:f1:25:da:08:2e:2e:d4:ff:c2:
58:04:dd:33:32:16:d3:92:36:3d:d8:28:89:ab:41:
07:76:e9:7d:60:3e:59:ca:b4:30:26:d5:ca:ed:7d:
39:b5:54:e3:39:83:b9:a6:a8:d9:85:c6:c1:6d:6c:
b9:53:8a:62:3b:52:c6:38:b8:d3:15:ed:08:ef:c0:
e7:02:5b:79:4f:20:80:44:10:7d:b3:6e:4e:ff:af:
fa:6b:82:de:9a:c4:57:d9:13:c0:31:f4:1d:b6:18:
ee:3b:33:11:58:09:5a:78:9e:3c:2b:d1:77:1d:f3:
c8:fe:f9:a0:5f:fd:de:b8:26:70:46:60:3d:0b:ff:
a2:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:01:82:F5:BC:D7:42:05:10:9E:F2:A0:EB:95:87:AB:72:AE:3D:1E
X509v3 Authority Key Identifier:
keyid:B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/_QGC9bzXQgUQnvKg65WHq3KuPR4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
5f:cb:29:c8:91:40:65:5b:58:9b:86:4c:67:2d:fa:2c:37:88:
fa:9c:c3:53:c2:4c:70:1d:25:2d:23:d0:b1:07:4d:dc:06:a0:
29:fd:82:d5:42:63:12:24:83:b1:9b:4a:9e:14:ae:2e:ef:ad:
fd:46:28:15:ed:ff:1a:72:7e:01:3b:7c:0d:6c:59:39:6c:54:
ee:72:c2:5e:66:03:b3:e6:5b:28:a0:72:2d:1b:d8:53:47:78:
4b:41:19:3b:8c:18:19:e8:08:74:66:98:70:1f:78:e4:d3:e7:
17:f4:66:7d:ab:f5:0b:ad:70:45:96:0f:6f:51:e7:bb:46:a9:
fc:1e:9c:50:f5:e6:d7:29:70:ff:38:d1:c3:a4:87:74:38:79:
62:9d:ae:6d:5d:6c:96:95:c6:43:d0:89:5a:d9:6c:07:d2:d3:
0b:c4:c4:40:f8:73:42:66:32:c0:ce:fc:fd:87:44:6e:c7:11:
88:37:cf:c9:a4:f2:63:be:f5:e9:9d:91:be:f6:58:51:3f:d3:
14:e9:45:7c:32:0f:40:0c:6a:19:11:cb:5d:d2:ad:a2:47:65:
19:03:4d:7f:d2:32:d1:91:00:12:52:23:ef:7d:26:db:2a:5b:
0e:02:7a:62:63:87:f9:af:46:10:df:8e:8e:1a:70:60:50:aa:
2a:cd:b9:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 02:21:47 2026 by rpki-client