Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/fQqhOO0FnaFVtEyg6GJLZV0GsXc.roa
File: fQqhOO0FnaFVtEyg6GJLZV0GsXc.roa (raw, json)
Hash identifier: CUNYPNKSF7YckX+bEfY2dM6QKQX4z3XcFfcG2M3cMOA=
Subject key identifier: 7D:0A:A1:38:ED:05:9D:A1:55:B4:4C:A0:E8:62:4B:65:5D:06:B1:77
Certificate issuer: /CN=054ab196a5b113660d401f806b32be66625afbaa
Certificate serial: 019EDF4348B42B2AB1B18C7937D7F2C38F53
Authority key identifier: 05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/fQqhOO0FnaFVtEyg6GJLZV0GsXc.roa
Signing time: Fri 19 Jun 2026 09:43:09 +0000
ROA not before: Fri 19 Jun 2026 09:43:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213915
IP address blocks: 45.151.71.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 20:30:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:df:43:48:b4:2b:2a:b1:b1:8c:79:37:d7:f2:c3:8f:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=054ab196a5b113660d401f806b32be66625afbaa
Validity
Not Before: Jun 19 09:43:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7d0aa138ed059da155b44ca0e8624b655d06b177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:4a:c1:bb:9f:8f:41:69:60:5e:38:c8:7e:e8:
5d:ee:71:9f:1c:d8:17:8e:d9:d6:ed:dc:30:ae:23:
54:5f:de:fb:cb:1e:89:ff:ee:3d:65:aa:87:ed:61:
7e:11:46:f8:00:8b:6e:34:fd:ec:17:ed:1a:68:ba:
45:36:7b:6f:a0:61:87:24:b5:3e:d1:03:98:50:39:
b6:88:ed:da:b5:1b:f6:b4:0b:4b:05:77:04:cb:12:
45:52:9c:4b:87:21:89:f2:21:94:73:5b:bf:de:1c:
41:39:1c:ec:93:6a:91:a8:35:27:96:53:57:f1:5b:
f1:16:47:a3:11:2d:3f:ce:63:70:74:3f:7b:ec:bb:
0d:6a:cd:81:58:13:a0:11:f3:ac:f4:17:d0:85:dd:
dd:f7:28:eb:ff:ba:27:92:e4:86:f8:42:52:1a:94:
c4:4a:1a:b3:54:5d:9e:d1:44:77:b7:5f:29:9f:49:
c9:95:1f:e5:eb:94:be:de:2b:f3:46:66:9f:1b:17:
ff:35:42:b0:d4:5a:c9:9a:63:29:0a:03:0c:7c:9d:
72:2d:f2:58:58:0d:7d:98:75:ca:ef:dd:87:c1:f6:
e4:15:dc:82:3b:e7:02:1e:96:68:e4:12:38:e8:d7:
07:fe:12:f5:7e:cb:00:37:f3:4a:dc:01:fb:4e:03:
7e:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:0A:A1:38:ED:05:9D:A1:55:B4:4C:A0:E8:62:4B:65:5D:06:B1:77
X509v3 Authority Key Identifier:
keyid:05:4A:B1:96:A5:B1:13:66:0D:40:1F:80:6B:32:BE:66:62:5A:FB:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BUqxlqWxE2YNQB-AazK-ZmJa-6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/fQqhOO0FnaFVtEyg6GJLZV0GsXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/dc450f-11a8-4e92-b6e8-d2da517a96fd/1/BUqxlqWxE2YNQB-AazK-ZmJa-6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.71.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:71:75:98:87:95:67:c2:01:36:9d:fe:cf:b6:1c:b9:4b:59:
21:40:b5:b0:d9:3f:65:f8:8e:fd:fb:58:a9:a5:09:06:d0:de:
d3:9e:96:af:66:24:27:8e:e2:50:94:26:e0:b9:e2:23:1a:0e:
b4:d0:c0:06:03:92:5b:42:9d:ce:1d:4e:d7:bd:c2:b3:68:b8:
a2:0f:48:c6:92:79:96:57:36:19:8b:15:7c:06:1a:e2:04:95:
0d:2d:e8:8a:ce:1b:71:55:74:e3:c5:47:95:de:47:c0:0f:c0:
aa:81:68:16:6f:78:68:4d:ea:e2:cc:07:74:d7:3a:0b:d3:8c:
d6:85:c4:6e:15:31:b4:11:93:43:5d:43:b6:65:a2:f6:d8:a3:
e0:ba:43:94:ac:24:07:6a:58:74:e4:ee:4f:98:b7:d7:f5:69:
d1:c8:06:f7:16:f0:52:c7:b6:5e:9a:97:f4:93:17:1a:98:b0:
78:4c:96:63:cb:23:a9:60:b5:40:b9:fd:1c:b9:68:01:e8:c4:
49:fa:e3:8a:4d:55:d1:5d:da:f7:68:6e:a8:00:e9:90:90:c0:
e3:29:bf:1d:a4:22:54:c9:f4:6b:95:36:f4:7c:32:79:15:b7:
32:0a:39:c3:40:96:1f:a9:1d:03:43:fc:b1:70:04:7c:e1:30:
0a:bf:05:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 1 04:32:00 2026 by rpki-client