Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/kQcRJHwrPUjV6MFCrcBkC_Mkn60.roa
File: kQcRJHwrPUjV6MFCrcBkC_Mkn60.roa (raw, json)
Hash identifier: wZlAb2i6Q85EuSipXQW0wySIWm8YuhMljUtSh1EvtjE=
Subject key identifier: 91:07:11:24:7C:2B:3D:48:D5:E8:C1:42:AD:C0:64:0B:F3:24:9F:AD
Certificate issuer: /CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Certificate serial: 019F2369038A981986F7236EFF4F81AD08CA
Authority key identifier: F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/kQcRJHwrPUjV6MFCrcBkC_Mkn60.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3356
IP address blocks: 45.155.196.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:03:8a:98:19:86:f7:23:6e:ff:4f:81:ad:08:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f44de36ce6543721f27a6893a3b3ab7fff9e1221
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=910711247c2b3d48d5e8c142adc0640bf3249fad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ba:22:76:33:eb:ec:b5:ca:d5:e9:e3:9b:79:
41:d9:0f:90:a2:41:bc:5f:41:3e:87:5d:3d:d6:85:
7a:12:aa:8e:3b:ba:d3:f4:33:18:86:94:5a:5d:11:
85:b4:c1:f2:b6:d7:4a:c8:f1:51:76:45:84:99:be:
4f:0d:6d:57:c0:52:f9:f7:4e:9b:c4:c6:99:de:0f:
62:e6:5d:4a:0c:9a:1e:c7:e0:75:03:fc:e1:00:ca:
5f:1d:db:fe:66:45:cc:1f:ef:32:3c:0f:e2:a1:c9:
06:84:e1:8f:4d:c9:e8:39:c8:3f:31:6f:21:e8:0d:
63:2d:94:97:28:8e:5b:9f:1f:db:3e:58:68:87:b3:
bc:9f:c7:57:a8:f5:9a:0b:c2:a0:f6:db:63:52:da:
db:a1:8a:8a:2b:75:44:33:70:2e:36:2f:f1:70:f6:
81:2b:8a:33:83:80:40:2c:45:33:04:2e:c9:87:38:
6a:f2:33:a2:4f:5b:0e:8a:cf:04:2b:c1:f7:94:81:
d8:c0:1e:a1:85:91:c7:13:be:96:c1:09:61:22:00:
c9:67:34:ad:3d:96:c0:a3:9d:df:be:65:e1:17:0e:
67:35:b5:59:b5:9c:55:8b:0a:d3:30:69:f5:5a:b6:
5d:a3:bd:f0:26:78:24:b3:cb:86:52:7b:e3:33:a1:
c3:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:07:11:24:7C:2B:3D:48:D5:E8:C1:42:AD:C0:64:0B:F3:24:9F:AD
X509v3 Authority Key Identifier:
keyid:F4:4D:E3:6C:E6:54:37:21:F2:7A:68:93:A3:B3:AB:7F:FF:9E:12:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9E3jbOZUNyHyemiTo7Orf_-eEiE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/kQcRJHwrPUjV6MFCrcBkC_Mkn60.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f5/af96df-a4d5-48f9-ac0c-24d8e747c38f/1/9E3jbOZUNyHyemiTo7Orf_-eEiE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.196.0/22
Signature Algorithm: sha256WithRSAEncryption
ba:98:cb:b3:c8:03:58:43:99:53:17:55:b8:22:71:d5:c0:b8:
18:0d:c3:f4:a5:05:e8:b8:c0:c9:17:31:30:44:97:52:ca:e0:
df:b1:b2:65:55:b0:ac:18:f6:ed:df:f4:66:04:0e:73:6d:7f:
ac:a8:79:d4:7f:7f:a5:aa:35:f9:df:84:25:be:89:e7:e5:ab:
ff:34:ca:24:2b:c7:1e:81:81:e7:d3:37:a0:9a:9d:8a:70:12:
b7:05:e6:1f:96:cf:24:ba:94:17:ea:db:b9:04:d1:ca:5b:b0:
2f:ea:54:c6:92:de:99:3a:6a:7b:e7:60:e2:be:3d:43:98:d7:
0f:48:f6:1d:0f:45:1f:47:4b:9e:82:6e:91:cc:95:f0:41:ee:
bb:1b:bc:f1:37:c5:c5:ad:13:80:4c:2e:b6:5e:c5:fd:c5:da:
63:e1:cb:c8:7c:0f:41:d4:41:4c:83:a6:04:fb:db:0c:f2:72:
14:5f:46:c4:b2:d8:d4:51:af:fe:f7:91:24:89:e0:58:02:b2:
4e:0c:90:fa:a0:7f:07:31:9c:9a:0a:6c:dc:c0:d5:8c:5b:a2:
c5:a4:6e:76:f5:b5:58:5b:0b:33:af:36:61:30:d8:35:d4:46:
16:5f:aa:94:27:c7:3e:e4:e3:4e:b5:23:7e:1c:72:eb:95:31:
0b:50:f5:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:21:35 2026 by rpki-client