Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/Q30EU1erGZsCCMuCgL71lzXCsB0.roa
File: Q30EU1erGZsCCMuCgL71lzXCsB0.roa (raw, json)
Hash identifier: yxqrbAXer9RdCmSpvVHPaT1/BGFNWf63zfk7mwlIh/A=
Subject key identifier: 43:7D:04:53:57:AB:19:9B:02:08:CB:82:80:BE:F5:97:35:C2:B0:1D
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019EFEB245C3E1C856D30EB9A48CD268370E
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/Q30EU1erGZsCCMuCgL71lzXCsB0.roa
Signing time: Thu 25 Jun 2026 12:12:36 +0000
ROA not before: Thu 25 Jun 2026 12:12:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205548
IP address blocks: 216.23.80.0/22 maxlen: 24
216.23.120.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:b2:45:c3:e1:c8:56:d3:0e:b9:a4:8c:d2:68:37:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Jun 25 12:12:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=437d045357ab199b0208cb8280bef59735c2b01d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:9d:a2:c0:a2:f9:b0:ff:a2:d3:01:32:e5:08:
d8:6d:6e:cc:ad:99:38:35:8c:54:57:de:5b:17:7f:
34:c9:f1:e4:1a:08:12:b4:b5:41:cc:f6:5c:0e:2d:
a9:66:c5:70:05:ae:f0:96:cd:3d:60:8d:e4:24:9f:
7a:04:dd:e6:3d:0f:c3:0d:3d:fc:f9:dc:66:bd:77:
0c:72:f9:aa:5f:5e:2f:44:f4:3c:86:4c:39:1f:27:
d9:f6:c9:64:5b:c4:ad:36:f1:b8:f7:4e:0f:16:d0:
cd:ed:c1:e9:50:7c:6b:c3:0a:6d:9a:ed:de:3a:2c:
4c:52:81:27:dc:c2:29:af:77:4b:d8:42:60:9b:b4:
ef:14:3a:ef:67:78:1f:20:23:09:e0:a8:31:78:01:
ca:cb:19:5a:6b:72:e2:25:77:ac:13:40:43:b9:9a:
60:e9:1b:82:dc:bb:fb:23:5f:4f:44:44:b1:a4:7e:
8d:a0:92:ae:ed:a0:2d:a3:2c:5a:0b:de:21:8a:81:
ae:12:b4:02:d6:7d:10:63:89:d1:86:62:83:4b:1a:
10:7b:25:70:07:dd:05:76:ca:07:32:5e:5f:49:ea:
b4:28:9a:9a:e2:fd:5c:63:ac:59:f1:7e:1c:18:b5:
4e:18:28:dc:ee:e6:9c:74:78:7c:25:95:1a:ca:22:
14:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7D:04:53:57:AB:19:9B:02:08:CB:82:80:BE:F5:97:35:C2:B0:1D
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/Q30EU1erGZsCCMuCgL71lzXCsB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.23.80.0/22
216.23.120.0/22
Signature Algorithm: sha256WithRSAEncryption
a2:ac:09:22:97:89:72:62:bf:3f:57:00:3b:5e:07:fb:d3:45:
e9:84:3f:23:ff:51:d3:56:bc:56:ca:4e:ca:32:cd:fc:58:e9:
6c:51:ef:5d:2a:a5:0f:0b:24:e1:92:17:75:3a:12:6f:99:5e:
70:d8:a2:45:6f:84:dd:00:37:52:e1:91:7b:fc:2f:ae:34:5d:
0d:30:40:32:0e:6b:a8:f0:76:3c:5e:94:8f:5a:a8:bc:da:d1:
2c:bd:18:d8:ec:7f:33:15:e6:e9:4b:84:b5:08:c0:05:54:09:
54:ad:9f:10:15:74:4b:1a:31:29:ae:3e:e9:85:6a:47:48:db:
b8:2d:2d:c1:3f:b8:9d:57:d6:ef:0a:2a:9f:6f:1d:eb:78:b2:
02:fa:4c:17:f3:ca:d3:f6:93:0d:5b:0c:4d:f7:99:80:36:93:
73:fc:c4:25:12:38:89:0b:e9:c0:d1:9d:43:2f:17:bc:cf:8d:
ae:d8:0d:cc:6c:ce:7a:8f:83:35:4d:f9:3a:ef:dc:17:98:71:
01:54:6e:96:2b:74:18:81:2a:f1:57:c8:c8:06:1e:2d:a9:d8:
0d:ab:96:6b:23:d3:20:52:32:11:20:d8:0f:41:b8:50:be:3e:
14:21:32:16:9e:90:ae:2f:32:ef:50:5c:02:24:54:a4:d0:38:
f5:da:eb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:33:12 2026 by rpki-client