Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/qXgX-MgGakZBvHLGFfMng5J68aM.roa
File: qXgX-MgGakZBvHLGFfMng5J68aM.roa (raw, json)
Hash identifier: tdETsvPamgqJs8d2zdVQ7bKa0GNEeta7JZJxdAHdr5I=
Subject key identifier: A9:78:17:F8:C8:06:6A:46:41:BC:72:C6:15:F3:27:83:92:7A:F1:A3
Certificate issuer: /CN=aca77c708af0ba1f81549c9f87089559390167a5
Certificate serial: 019EF937A71A0FE3AEC0A1919B3FE573F37C
Authority key identifier: AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/qXgX-MgGakZBvHLGFfMng5J68aM.roa
Signing time: Wed 24 Jun 2026 10:40:34 +0000
ROA not before: Wed 24 Jun 2026 10:40:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6453
IP address blocks: 2001:4c68:201::/48 maxlen: 48
2001:4c68:202::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f9:37:a7:1a:0f:e3:ae:c0:a1:91:9b:3f:e5:73:f3:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca77c708af0ba1f81549c9f87089559390167a5
Validity
Not Before: Jun 24 10:40:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a97817f8c8066a4641bc72c615f32783927af1a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:28:8a:e0:5f:85:93:af:74:bc:db:30:01:e5:
e1:31:2d:9a:12:84:ce:1f:4c:45:e2:71:ef:c1:e4:
d1:41:b8:9b:a7:6a:d2:53:e6:8d:f9:60:5a:3b:2f:
08:d5:a3:97:95:79:6b:34:7c:c7:11:29:89:2d:a3:
14:92:b8:15:e6:bd:97:c5:4c:d5:bc:b0:6e:6a:f9:
93:48:c3:6f:98:cb:b5:60:4d:45:98:78:f4:c6:9a:
1e:78:03:34:3b:5a:dc:62:a1:e7:c9:13:93:6f:f6:
80:0e:66:2a:9f:69:e7:98:ff:47:dc:27:96:56:ed:
6a:86:27:65:60:82:51:4f:78:8c:94:3b:a8:6a:7f:
d9:d4:da:39:8a:56:f2:22:61:c8:7e:3f:a2:93:9b:
ec:54:c9:c5:fd:bc:05:c9:21:57:11:a0:f8:3f:f7:
cc:f9:5c:24:bd:4b:c7:1f:99:58:82:cb:5c:70:8a:
a0:5a:09:22:40:62:b6:6a:ab:26:7b:ff:e1:6d:7d:
46:05:ae:ac:e7:48:77:33:9d:79:ae:a6:84:c6:d6:
4d:e2:a6:e4:40:2b:53:bf:6b:31:49:53:5c:83:be:
a0:24:3a:93:47:86:6e:0b:ba:c6:c2:b0:ca:f5:cb:
77:2a:1a:c8:88:e3:b0:48:59:7b:42:7b:ce:1b:19:
2a:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:78:17:F8:C8:06:6A:46:41:BC:72:C6:15:F3:27:83:92:7A:F1:A3
X509v3 Authority Key Identifier:
keyid:AC:A7:7C:70:8A:F0:BA:1F:81:54:9C:9F:87:08:95:59:39:01:67:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/qXgX-MgGakZBvHLGFfMng5J68aM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/8fe7d8-017b-41aa-a91f-28b19e3fd4a6/1/rKd8cIrwuh-BVJyfhwiVWTkBZ6U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:4c68:201::-2001:4c68:202:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
73:85:9f:20:20:21:93:27:a3:52:1c:50:0f:17:df:cf:14:af:
7f:8c:85:6c:55:ea:c3:43:5b:d3:b3:b7:7c:cd:c5:3d:4e:0a:
5d:44:5b:ca:c2:f8:98:c2:0f:b6:59:2b:d0:84:8e:bb:70:64:
3d:08:8b:04:1f:42:00:77:4d:67:39:89:92:13:01:55:d6:dc:
1e:13:b1:bd:56:8f:c1:5b:27:48:a9:0b:64:4b:dc:3c:4a:90:
0c:4f:9a:03:dc:8c:91:02:02:67:7e:49:fe:99:ee:cb:7c:17:
d7:c0:db:5e:2c:30:f0:3a:50:d8:ed:ae:a4:93:75:d6:8b:60:
28:fa:3d:15:41:94:42:a0:fa:5d:d9:4c:65:49:88:3d:96:6d:
b8:71:fd:27:d3:e7:d7:ff:9c:d7:6f:04:ba:ee:60:ac:b7:8e:
e9:8b:2a:2c:6a:13:78:ed:9e:60:1e:6f:0e:58:e2:31:64:58:
a1:bd:dc:ec:20:b3:2d:b5:b7:2b:be:fa:6a:15:c1:dc:c2:f6:
98:56:55:c5:35:21:f3:f1:2e:39:87:02:fb:17:35:ad:67:dd:
ba:7f:4f:f8:38:c7:aa:f9:22:f0:e5:58:e2:30:a1:9b:14:3b:
e2:82:a5:8a:72:cc:14:cf:21:51:e2:78:92:5f:ff:3d:d7:f9:
c6:c4:d9:81
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Jun 29 12:41:45 2026 by rpki-client