Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/S_QgEETqx9KpPIRwcQVFMEL7LF8.roa
File: S_QgEETqx9KpPIRwcQVFMEL7LF8.roa (raw, json)
Hash identifier: jH5TQpwCqfRzsGNl3XVhiPbeVJA/1Lpq6VQ1p2H+ADo=
Subject key identifier: 4B:F4:20:10:44:EA:C7:D2:A9:3C:84:70:71:05:45:30:42:FB:2C:5F
Certificate issuer: /CN=c05c7cea74e73e9a301e4e56d1a3eab6c5618142
Certificate serial: 019F236928E3044143FE534F6339F2BCAC2C
Authority key identifier: C0:5C:7C:EA:74:E7:3E:9A:30:1E:4E:56:D1:A3:EA:B6:C5:61:81:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wFx86nTnPpowHk5W0aPqtsVhgUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/S_QgEETqx9KpPIRwcQVFMEL7LF8.roa
Signing time: Thu 02 Jul 2026 15:18:41 +0000
ROA not before: Thu 02 Jul 2026 15:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 141.64.0.0/16 maxlen: 16
195.88.209.0/24 maxlen: 24
2a12:e140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/wFx86nTnPpowHk5W0aPqtsVhgUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/wFx86nTnPpowHk5W0aPqtsVhgUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/wFx86nTnPpowHk5W0aPqtsVhgUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:28:e3:04:41:43:fe:53:4f:63:39:f2:bc:ac:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c05c7cea74e73e9a301e4e56d1a3eab6c5618142
Validity
Not Before: Jul 2 15:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4bf4201044eac7d2a93c84707105453042fb2c5f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:fb:3e:53:fe:33:4e:f0:a0:45:3a:3b:be:b3:
d8:19:b7:9a:12:d2:60:0b:b5:3e:63:a6:f4:89:b7:
61:f9:f7:85:df:b7:2a:d9:93:64:4f:d2:23:8c:c1:
56:2f:06:a3:0e:1f:f0:49:de:82:7d:81:a0:11:33:
93:23:da:c1:d1:de:6d:79:5a:78:e4:09:7f:22:06:
58:c5:67:87:02:57:9b:42:a0:67:85:84:ee:65:71:
80:e0:89:df:a1:1e:16:fd:82:7e:1e:b2:59:b4:61:
bd:3a:a6:8e:1d:15:22:7d:1f:1f:f5:03:55:7b:98:
8d:19:30:0d:15:21:3b:83:c1:fb:bb:80:60:80:c2:
67:2c:a4:c6:d8:58:f1:3c:c9:68:32:2f:06:c0:bb:
04:45:1c:79:38:81:70:52:ea:8f:b9:c1:4b:66:82:
07:8c:22:20:2c:f0:b2:49:e8:f2:64:a7:e4:16:b5:
9f:7d:df:4a:a1:e0:80:72:a3:2c:d7:02:06:9f:23:
dd:02:96:30:de:1a:1d:19:87:48:1c:fe:8c:92:3d:
25:f4:80:02:3b:e2:28:3e:8f:61:9e:e4:a2:65:04:
57:f7:4d:31:f3:07:2a:2f:17:2e:45:83:fe:69:dd:
50:cc:2f:5e:06:ed:66:91:16:21:be:7c:1f:61:52:
c5:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:F4:20:10:44:EA:C7:D2:A9:3C:84:70:71:05:45:30:42:FB:2C:5F
X509v3 Authority Key Identifier:
keyid:C0:5C:7C:EA:74:E7:3E:9A:30:1E:4E:56:D1:A3:EA:B6:C5:61:81:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wFx86nTnPpowHk5W0aPqtsVhgUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/S_QgEETqx9KpPIRwcQVFMEL7LF8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/454412-c062-4b45-a644-a038ef1eff39/1/wFx86nTnPpowHk5W0aPqtsVhgUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.64.0.0/16
195.88.209.0/24
IPv6:
2a12:e140::/29
Signature Algorithm: sha256WithRSAEncryption
63:97:d1:09:eb:ee:d1:26:9a:c0:55:bb:05:fd:61:28:95:36:
16:1b:c4:5a:b2:5d:f2:89:48:b7:ec:9a:82:a5:4c:f8:68:49:
2d:95:3e:08:87:cb:7f:28:33:f8:d2:ca:98:01:5e:3f:79:13:
7c:e1:c5:2f:08:54:a9:f0:ac:75:3d:49:16:89:97:20:e9:19:
8d:a4:33:21:7d:a8:6c:ff:c6:41:18:f8:e9:d4:11:4e:be:b6:
7b:6f:a0:a1:08:c0:85:1e:b6:fa:d6:92:5e:7a:2c:7b:21:0f:
97:ae:fc:12:7d:be:be:ce:f5:a0:a4:37:a9:3b:48:1d:bc:17:
c7:ee:a7:0b:8f:01:ae:ec:fd:ff:c4:cc:34:19:43:5a:79:85:
8e:8e:9d:62:27:0f:59:15:86:14:0d:f0:b4:4a:91:c0:25:4b:
f9:5f:33:8e:55:1e:47:40:80:2c:f1:81:43:e4:fe:3e:8d:9e:
ea:62:7c:12:48:ac:be:dd:36:1b:98:7e:0e:3b:d5:6d:77:79:
10:67:cc:db:18:df:63:56:cb:ce:bc:9f:dc:66:11:dd:f4:ad:
13:10:ce:c8:87:0b:06:73:92:d4:b1:9d:d0:3a:ad:06:3f:46:
a3:df:81:67:c4:8c:87:56:e2:d9:0f:ed:e2:df:a1:5f:9d:9b:
e6:0a:38:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 27 07:00:52 2026 by rpki-client