Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/QVfgi83LjShPxbT24Q_mQFAo_RY.roa
File: QVfgi83LjShPxbT24Q_mQFAo_RY.roa (raw, json)
Hash identifier: iY5GiU+vx7Frdhzr/zDk/O8cw/EgmXY5eK+bqrz6L2A=
Subject key identifier: 41:57:E0:8B:CD:CB:8D:28:4F:C5:B4:F6:E1:0F:E6:40:50:28:FD:16
Certificate issuer: /CN=663c7e368d18110a9287fd77a90e89c6736a78ca
Certificate serial: 019F2368CB3EF78E9D13EBDA3D718B9F78EC
Authority key identifier: 66:3C:7E:36:8D:18:11:0A:92:87:FD:77:A9:0E:89:C6:73:6A:78:CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Zjx-No0YEQqSh_13qQ6JxnNqeMo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/QVfgi83LjShPxbT24Q_mQFAo_RY.roa
Signing time: Thu 02 Jul 2026 15:18:18 +0000
ROA not before: Thu 02 Jul 2026 15:18:18 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208206
IP address blocks: 45.154.20.0/22 maxlen: 24
185.181.12.0/22 maxlen: 24
2a0a:bb80::/29 maxlen: 48
2a0f:9f00::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/Zjx-No0YEQqSh_13qQ6JxnNqeMo.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/Zjx-No0YEQqSh_13qQ6JxnNqeMo.mft
rsync://rpki.ripe.net/repository/DEFAULT/Zjx-No0YEQqSh_13qQ6JxnNqeMo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 23:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:cb:3e:f7:8e:9d:13:eb:da:3d:71:8b:9f:78:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=663c7e368d18110a9287fd77a90e89c6736a78ca
Validity
Not Before: Jul 2 15:18:18 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4157e08bcdcb8d284fc5b4f6e10fe6405028fd16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:cf:6a:24:c4:e0:a9:83:cc:ca:69:d0:f2:dc:
8c:f9:81:bb:dc:00:fb:28:d4:91:27:f7:00:9b:fe:
65:62:98:2e:f0:7f:a6:51:80:6b:cd:bf:b7:ab:57:
0c:43:bb:13:b1:e2:fd:53:2e:6c:18:57:39:33:f2:
3c:ba:13:0b:f6:64:41:3e:36:3f:4d:ae:f8:db:a8:
21:3c:4f:04:35:0c:07:d7:f9:41:4a:5f:15:d4:78:
df:aa:d8:71:22:32:2c:02:20:f7:e9:dc:c8:6e:da:
9a:09:3d:ec:c8:a3:26:3c:ec:54:b0:f3:16:88:61:
ac:bd:21:6c:07:22:6d:90:73:5b:c5:c8:5f:84:7f:
05:66:0d:77:e5:bd:6d:19:bb:28:79:6e:a3:af:4a:
8d:3c:a3:23:e8:6d:3b:c6:3f:f8:24:29:05:c5:f0:
1f:4d:51:7c:9d:a6:c4:98:bc:1c:2d:9c:44:cf:c9:
dc:26:aa:af:4c:82:44:a3:03:3c:c9:2a:60:bc:c7:
2b:fa:e7:a6:69:a4:19:59:6b:08:2c:cf:4b:c5:b6:
c8:74:01:50:de:2d:af:00:6a:58:b8:2f:76:8e:81:
7a:c4:10:1f:08:1a:c0:99:3f:b8:df:59:60:a8:a2:
50:1d:72:ef:e1:ea:85:af:8c:36:df:81:7f:60:5b:
06:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:57:E0:8B:CD:CB:8D:28:4F:C5:B4:F6:E1:0F:E6:40:50:28:FD:16
X509v3 Authority Key Identifier:
keyid:66:3C:7E:36:8D:18:11:0A:92:87:FD:77:A9:0E:89:C6:73:6A:78:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Zjx-No0YEQqSh_13qQ6JxnNqeMo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/QVfgi83LjShPxbT24Q_mQFAo_RY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/a8fe5b-6ace-4236-8a90-e0f5d86e37a3/1/Zjx-No0YEQqSh_13qQ6JxnNqeMo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.154.20.0/22
185.181.12.0/22
IPv6:
2a0a:bb80::/29
2a0f:9f00::/29
Signature Algorithm: sha256WithRSAEncryption
bf:d9:33:05:86:31:8c:45:f6:85:08:b2:15:68:7b:d4:d5:0e:
4d:f7:be:9d:a8:88:38:44:62:00:ce:a8:08:f4:c7:34:be:a8:
99:e7:1c:38:53:88:a9:28:2b:95:ed:cd:20:57:ca:64:aa:ec:
27:52:c2:5a:a4:1d:03:64:10:24:e1:3f:15:89:6b:3f:3c:2c:
19:bb:4f:4d:c7:db:4e:ee:fe:50:7f:7f:7c:30:13:89:22:b5:
1e:d0:1c:50:7a:b1:2b:0f:11:55:a4:a3:7a:4a:e9:2a:e7:9d:
7b:f0:3a:8d:8d:1d:bb:48:aa:88:22:38:32:33:aa:ab:d9:1b:
c9:7c:57:e7:8f:f8:68:62:47:24:2d:75:c8:7e:1e:a1:6f:df:
9f:df:19:ce:2f:a6:13:6a:74:ad:dc:64:30:a8:ca:07:fe:3b:
5e:fc:9c:57:8a:11:fd:63:13:a7:d6:c7:47:a0:75:c1:f3:9f:
46:85:a1:c9:d0:c0:ec:d0:ec:0d:a3:ac:6f:e5:75:43:e5:10:
32:11:52:3d:61:dd:60:e2:b6:e5:c2:5e:5c:e4:7c:53:df:23:
f7:e3:fe:1d:de:5e:90:79:a6:05:3e:cc:bb:02:7f:2a:ad:f1:
a7:21:b7:c1:0b:e9:bc:f3:32:61:8f:f1:ff:60:74:36:b5:70:
bf:22:ca:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 13 05:27:42 2026 by rpki-client