Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/CQCzVDXazljrHIDpQoZYmXw-po0.roa
File: CQCzVDXazljrHIDpQoZYmXw-po0.roa (raw, json)
Hash identifier: csnCrvPQLiH0NgIq8QQ3R53jMhbeRSXe4EfvPdrCVpg=
Subject key identifier: 09:00:B3:54:35:DA:CE:58:EB:1C:80:E9:42:86:58:99:7C:3E:A6:8D
Certificate issuer: /CN=8d11662beb3257de1c0340e412ed9d1995c0f5ff
Certificate serial: 019F23688F3BFB45E39836980B5CCA97A6B9
Authority key identifier: 8D:11:66:2B:EB:32:57:DE:1C:03:40:E4:12:ED:9D:19:95:C0:F5:FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/CQCzVDXazljrHIDpQoZYmXw-po0.roa
Signing time: Thu 02 Jul 2026 15:18:02 +0000
ROA not before: Thu 02 Jul 2026 15:18:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1299
IP address blocks: 194.59.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:8f:3b:fb:45:e3:98:36:98:0b:5c:ca:97:a6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d11662beb3257de1c0340e412ed9d1995c0f5ff
Validity
Not Before: Jul 2 15:18:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0900b35435dace58eb1c80e9428658997c3ea68d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:10:58:5b:9b:7c:4d:df:81:e5:e2:37:47:4e:
e4:da:0b:af:c0:a8:65:67:e8:4e:d2:bd:c7:52:bd:
f8:b8:f1:3e:84:e5:f2:63:3a:95:d0:d2:a6:85:17:
83:fb:c8:31:fb:21:29:77:fc:2c:57:20:e1:99:59:
5b:73:e7:17:5d:88:3e:52:08:0c:a4:8f:70:c0:9f:
67:a6:fc:8b:fa:2d:16:2a:29:cc:ef:6f:b7:dc:b8:
5d:e8:22:11:3a:66:2a:84:86:67:96:e5:a1:6b:27:
5f:3d:49:d3:29:77:60:8a:de:26:c2:e0:e7:03:2b:
21:9c:c0:ec:3e:44:20:65:56:fb:30:dd:11:d2:25:
db:58:19:ef:e0:6a:12:ef:04:7f:c9:4b:b2:5e:e5:
9a:d4:57:57:66:ef:10:bd:07:26:51:86:18:1f:bb:
6e:01:1e:08:4b:01:6c:2c:30:a0:6f:44:55:a2:f4:
f8:eb:fd:52:1a:70:b3:0e:82:9d:6b:0c:26:4a:eb:
b4:e3:87:f0:11:e6:ed:3a:b0:fd:8f:a8:19:ce:c0:
de:f3:8d:f1:bf:18:48:b0:c6:0e:15:20:f9:e5:31:
c5:4a:1a:a5:ff:3c:fb:39:82:83:3e:fc:21:be:2e:
de:ba:1b:7d:90:26:36:61:3c:0d:af:6d:9e:f8:50:
e5:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:00:B3:54:35:DA:CE:58:EB:1C:80:E9:42:86:58:99:7C:3E:A6:8D
X509v3 Authority Key Identifier:
keyid:8D:11:66:2B:EB:32:57:DE:1C:03:40:E4:12:ED:9D:19:95:C0:F5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRFmK-syV94cA0DkEu2dGZXA9f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/CQCzVDXazljrHIDpQoZYmXw-po0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/7c0274-74c6-4423-9a88-9a300b0a7ed2/1/jRFmK-syV94cA0DkEu2dGZXA9f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.59.13.0/24
Signature Algorithm: sha256WithRSAEncryption
75:37:ea:62:6b:c0:fa:bf:e8:5a:09:a1:13:83:62:29:bf:c2:
30:2a:8f:b2:06:fb:25:7e:a8:88:81:58:1d:9e:4b:4b:9d:5c:
c6:08:15:a6:3b:d1:65:57:94:a2:95:ea:d8:c8:92:ee:d0:02:
1f:15:f0:78:5d:b9:b6:7c:0a:87:fa:ab:a7:d7:26:3a:e9:98:
13:7d:71:35:55:4a:e4:44:0e:3e:03:44:70:15:80:64:39:a6:
38:cb:c7:bd:8b:94:06:6f:51:5c:0e:ce:e1:82:5e:4f:62:24:
68:65:7e:60:bd:38:a5:c2:6c:be:c7:4b:53:b2:72:f1:98:25:
d2:a1:f6:15:27:2b:13:3e:7f:7e:6b:6d:06:98:67:96:12:17:
65:e0:8c:e8:20:04:e7:c9:a2:b6:66:e2:9a:58:0a:21:80:67:
00:17:9c:75:dc:0f:44:6e:59:cd:11:ff:8e:fd:30:3c:ed:74:
ef:0d:ec:55:bd:bf:b3:1b:22:df:bc:bf:70:23:ee:09:3d:5a:
52:17:5d:aa:f4:82:e6:59:54:17:49:a3:67:a5:68:77:93:27:
f7:ca:d4:fa:85:2b:ef:0f:c1:e5:9a:20:9e:9b:17:c0:bb:52:
e3:a6:89:d2:6b:82:ec:eb:a4:93:f5:a1:61:a0:f9:8f:9c:5d:
4c:07:59:82
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaI87+0XjmDaYC1zKl6a5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkMTE2NjJiZWIzMjU3ZGUxYzAzNDBlNDEyZWQ5ZDE5OTVj
MGY1ZmYwHhcNMjYwNzAyMTUxODAyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwOTAwYjM1NDM1ZGFjZTU4ZWIxYzgwZTk0Mjg2NTg5OTdjM2VhNjhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqRBYW5t8Td+B5eI3R07k2guvwKhl
Z+hO0r3HUr34uPE+hOXyYzqV0NKmhReD+8gx+yEpd/wsVyDhmVlbc+cXXYg+UggM
pI9wwJ9npvyL+i0WKinM72+33Lhd6CIROmYqhIZnluWhaydfPUnTKXdgit4mwuDn
AyshnMDsPkQgZVb7MN0R0iXbWBnv4GoS7wR/yUuyXuWa1FdXZu8QvQcmUYYYH7tu
AR4ISwFsLDCgb0RVovT46/1SGnCzDoKdawwmSuu044fwEebtOrD9j6gZzsDe843x
vxhIsMYOFSD55THFShql/zz7OYKDPvwhvi7euht9kCY2YTwNr22e+FDlvQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAkAs1Q12s5Y6xyA6UKGWJl8PqaNMB8GA1UdIwQY
MBaAFI0RZivrMlfeHANA5BLtnRmVwPX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalJGbUstc3lWOTRjQTBEa0V1MmRHWlhBOWY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi83YzAyNzQtNzRjNi00NDIzLTlhODgt
OWEzMDBiMGE3ZWQyLzEvQ1FDelZEWGF6bGpySElEcFFvWlltWHctcG8wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi83YzAyNzQtNzRjNi00NDIzLTlhODgtOWEzMDBiMGE3ZWQy
LzEvalJGbUstc3lWOTRjQTBEa0V1MmRHWlhBOWY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwjsNMA0G
CSqGSIb3DQEBCwUAA4IBAQB1N+pia8D6v+haCaETg2Ipv8IwKo+yBvslfqiIgVgd
nktLnVzGCBWmO9FlV5SilerYyJLu0AIfFfB4Xbm2fAqH+qun1yY66ZgTfXE1VUrk
RA4+A0RwFYBkOaY4y8e9i5QGb1FcDs7hgl5PYiRoZX5gvTilwmy+x0tTsnLxmCXS
ofYVJysTPn9+a20GmGeWEhdl4IzoIATnyaK2ZuKaWAohgGcAF5x13A9EblnNEf+O
/TA87XTvDexVvb+zGyLfvL9wI+4JPVpSF12q9ILmWVQXSaNnpWh3kyf3ytT6hSvv
D8HlmiCemxfAu1LjponSa4Ls66ST9aFhoPmPnF1MB1mC
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:02:48 2026 by rpki-client