Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/tq8f01ARQEUsEl7noRAgINDzWjo.roa
File: tq8f01ARQEUsEl7noRAgINDzWjo.roa (raw, json)
Hash identifier: xcw1atTXhZ541jIny6BlvX9vowxrvPRi1s85cLABOpE=
Subject key identifier: B6:AF:1F:D3:50:11:40:45:2C:12:5E:E7:A1:10:20:20:D0:F3:5A:3A
Certificate issuer: /CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Certificate serial: 01A13ED17EC2812F06304B50EEEB2C306980
Authority key identifier: B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/tq8f01ARQEUsEl7noRAgINDzWjo.roa
Signing time: Thu 15 Oct 2026 09:07:59 +0000
ROA not before: Thu 15 Oct 2026 09:07:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12859
IP address blocks: 46.247.36.0/23 maxlen: 24
185.57.96.0/22 maxlen: 24
194.62.12.0/24 maxlen: 24
2a05:bcc0::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3e:d1:7e:c2:81:2f:06:30:4b:50:ee:eb:2c:30:69:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b07a65a204e3c799fb183b9ebe47362fa7cfe8c4
Validity
Not Before: Oct 15 09:07:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b6af1fd3501140452c125ee7a1102020d0f35a3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:02:f5:e0:c5:34:a3:3d:5b:8a:db:13:ea:7d:
b6:3b:29:a7:76:31:3d:a8:98:49:e4:db:2d:08:00:
94:ed:7d:3c:ba:85:9e:ab:ae:34:7d:90:61:a6:89:
0f:42:d0:77:9c:62:c1:27:a6:0c:ba:44:f7:f6:59:
38:b1:fa:3c:7e:ed:8b:1e:ea:5f:3c:12:a7:03:0b:
6f:6b:b2:65:98:b7:14:42:eb:3c:67:cd:0b:9f:7c:
9c:c9:c5:6a:89:3a:71:1f:ea:a8:4b:be:8b:21:9f:
9e:ee:8b:cf:15:d9:37:11:60:f4:1c:df:76:34:0b:
1d:9b:fd:0d:56:3d:e2:36:ba:ea:14:cb:57:12:89:
ca:89:80:8b:46:e8:dd:09:12:e0:c7:4c:11:ac:9a:
7a:01:aa:8c:ef:27:5b:27:73:8d:60:be:85:28:59:
45:93:fa:2c:23:aa:62:1f:ec:49:c9:25:52:8d:76:
be:3f:f1:d0:5e:27:9b:e0:63:0b:0a:91:60:e5:d1:
b4:2d:60:10:b4:bf:c1:04:64:87:9b:58:84:0f:eb:
0c:1f:95:7d:3d:e5:17:b8:49:30:8b:5f:35:59:82:
15:26:4d:1d:17:86:04:46:d2:3c:3d:44:83:23:b9:
c3:9f:7f:8c:45:ee:20:1d:6f:c0:2c:32:46:ac:2f:
c0:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:AF:1F:D3:50:11:40:45:2C:12:5E:E7:A1:10:20:20:D0:F3:5A:3A
X509v3 Authority Key Identifier:
keyid:B0:7A:65:A2:04:E3:C7:99:FB:18:3B:9E:BE:47:36:2F:A7:CF:E8:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sHplogTjx5n7GDuevkc2L6fP6MQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/tq8f01ARQEUsEl7noRAgINDzWjo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/2ef900-ef25-42a4-9edd-45e6cd6e320e/1/sHplogTjx5n7GDuevkc2L6fP6MQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.247.36.0/23
185.57.96.0/22
194.62.12.0/24
IPv6:
2a05:bcc0::/29
Signature Algorithm: sha256WithRSAEncryption
5d:28:9c:c8:c4:44:20:dc:60:f2:ef:64:88:7d:5b:10:b7:3e:
1b:69:7e:4c:0c:a1:b7:c9:ac:cb:22:e1:2d:05:03:e5:f0:81:
42:bd:41:d5:a0:ca:bb:8d:94:bb:09:a5:88:7b:b1:dc:41:27:
c6:bc:27:3c:01:1c:f3:32:79:7d:70:f0:e7:0c:ea:3d:31:64:
1a:c6:d8:8e:6d:af:ab:a8:31:c6:83:9e:b5:ea:c1:59:55:ef:
38:33:a1:8e:97:47:9c:ff:8e:f0:93:bc:9d:f3:ea:a4:66:d4:
55:9b:5b:5a:2d:a3:8e:38:91:17:fd:a5:9b:d9:4b:18:63:d8:
9e:80:3c:35:12:0e:28:4b:00:7e:3d:26:42:01:3c:47:18:15:
48:3c:d3:18:c2:15:38:29:d2:4a:93:9f:19:08:6b:98:9a:4e:
43:67:9c:15:b3:3a:4e:d9:34:c7:9f:b3:07:08:8e:14:e4:7f:
78:b7:a2:79:ea:20:fc:bf:65:f0:7d:de:27:8f:76:2b:ad:90:
3a:1a:1b:6b:bc:5e:b0:63:fa:02:6a:b3:71:be:33:bd:25:ff:
f2:76:94:23:64:ca:42:e2:e4:21:13:49:42:31:8a:8b:38:2d:
e5:36:b8:c5:69:27:75:d0:51:08:7d:63:42:52:d1:5f:77:d1:
f2:3d:3c:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 05:56:50 2026 by rpki-client