Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/sqHFwo0XB24O-EyLxoiNi9bPLc8.roa
File: sqHFwo0XB24O-EyLxoiNi9bPLc8.roa (raw, json)
Hash identifier: ig6fBlUC0evhdNCNW32iCNTFqWb3AD0R7kCT6EGKt9k=
Subject key identifier: B2:A1:C5:C2:8D:17:07:6E:0E:F8:4C:8B:C6:88:8D:8B:D6:CF:2D:CF
Certificate issuer: /CN=df7484b3f568ea4eaa7bf0cb7c83f5ef663eb170
Certificate serial: 019FDD2277278151D9001044969738000B6F
Authority key identifier: DF:74:84:B3:F5:68:EA:4E:AA:7B:F0:CB:7C:83:F5:EF:66:3E:B1:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/sqHFwo0XB24O-EyLxoiNi9bPLc8.roa
Signing time: Fri 07 Aug 2026 16:50:51 +0000
ROA not before: Fri 07 Aug 2026 16:50:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 766
IP address blocks: 155.210.0.0/16 maxlen: 16
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.mft
rsync://rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:22:77:27:81:51:d9:00:10:44:96:97:38:00:0b:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7484b3f568ea4eaa7bf0cb7c83f5ef663eb170
Validity
Not Before: Aug 7 16:50:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2a1c5c28d17076e0ef84c8bc6888d8bd6cf2dcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:3d:fb:d3:da:f7:bd:3a:0e:44:99:37:66:54:
61:8d:6b:6d:40:03:a9:68:e3:05:3e:1c:7e:f0:89:
1a:b5:18:77:ba:a7:fc:44:71:79:1d:3c:ed:20:d0:
73:96:5d:ad:0a:58:71:73:f5:99:7e:f4:58:06:f1:
3b:d7:95:82:7d:31:ce:4a:1d:c9:5d:51:78:6a:51:
ee:df:b1:4d:b0:0b:47:69:62:86:9d:ac:a8:db:03:
d5:69:38:ac:c9:28:d0:a6:7c:66:13:fa:0d:39:38:
7d:47:9f:32:75:19:91:19:9f:6d:8a:c3:a1:06:e3:
84:2d:b4:73:07:ce:15:5f:16:6a:d1:71:e3:88:c2:
1c:bd:ac:ab:ab:f9:0f:26:fa:11:a5:ce:81:06:e7:
99:32:50:92:2e:69:f7:a6:0b:97:11:af:dc:0e:d9:
a6:6f:46:a5:45:99:e4:30:fe:eb:f8:43:b0:c7:d3:
70:67:23:52:70:cd:3e:93:29:39:f5:03:ee:b3:69:
35:4a:68:ed:4d:cd:82:78:fd:00:01:55:d7:6d:4d:
96:0c:0d:c2:2e:9d:2d:48:32:a9:2f:1c:35:c3:e4:
26:a7:09:c2:ab:91:06:14:a8:28:f7:43:e8:d4:6e:
18:c9:d1:f0:ba:5a:f6:e4:90:e3:8c:7f:e0:f9:d8:
54:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A1:C5:C2:8D:17:07:6E:0E:F8:4C:8B:C6:88:8D:8B:D6:CF:2D:CF
X509v3 Authority Key Identifier:
keyid:DF:74:84:B3:F5:68:EA:4E:AA:7B:F0:CB:7C:83:F5:EF:66:3E:B1:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/33SEs_Vo6k6qe_DLfIP172Y-sXA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/sqHFwo0XB24O-EyLxoiNi9bPLc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/5cc93c-210c-4b08-b1bc-20059242d921/1/33SEs_Vo6k6qe_DLfIP172Y-sXA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
155.210.0.0/16
Signature Algorithm: sha256WithRSAEncryption
0b:a2:41:38:4d:d8:f0:4f:6b:88:90:9a:fc:28:eb:2b:01:c2:
00:22:95:25:7e:ab:3c:b1:5f:44:2b:a3:22:cd:b2:1c:5d:47:
d2:3d:c8:35:92:47:d5:fe:ca:25:e6:6e:fe:c2:c1:6b:ca:7a:
07:d6:f3:9a:fe:62:fb:a6:dd:f6:be:84:cb:9d:65:ca:51:ec:
23:80:ad:db:10:70:0b:4b:6b:b6:1d:4e:a0:3c:64:b6:d1:97:
5c:91:1c:45:8e:69:4a:c0:d0:59:b2:3a:ab:bb:2c:9f:26:c2:
28:fb:c4:54:60:3b:8b:87:d4:b9:22:64:95:6e:5c:50:4b:43:
5a:7c:76:77:0e:0a:49:41:a1:f5:c7:98:b0:3a:73:7d:2b:37:
5b:fe:3e:64:11:fd:b9:2d:0d:17:66:11:af:7c:a6:a0:33:b7:
87:cd:43:d9:14:17:8d:e4:43:fe:04:f3:ca:88:30:45:1f:5b:
5a:bc:38:da:dc:0e:d9:17:9b:88:d3:11:a2:fd:f8:b0:9e:df:
ea:cf:7b:10:e5:26:33:93:a5:9b:98:1d:01:78:c4:30:34:46:
01:49:58:81:49:0a:3f:98:84:e6:c4:e1:dc:f6:f1:d8:34:7e:
31:b4:cc:a8:67:f6:b5:09:60:ee:e2:0f:ce:fe:6b:94:fc:e3:
f1:f2:bd:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 06:51:27 2026 by rpki-client