Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/tGQQE0G6RfcW_KUvdgu-B7S24aQ.roa
File: tGQQE0G6RfcW_KUvdgu-B7S24aQ.roa (raw, json)
Hash identifier: J6CPfiAsYUjj4qoIrccznkrh+KkQ7aAvjwp+6DFw9Lw=
Subject key identifier: B4:64:10:13:41:BA:45:F7:16:FC:A5:2F:76:0B:BE:07:B4:B6:E1:A4
Certificate issuer: /CN=f99abe45f21f12e4b802f309444c24759000ebcf
Certificate serial: 01A1441D032E3FC8E3A65A7BDF5F303AD816
Authority key identifier: F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/tGQQE0G6RfcW_KUvdgu-B7S24aQ.roa
Signing time: Fri 16 Oct 2026 09:48:34 +0000
ROA not before: Fri 16 Oct 2026 09:48:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 185.175.188.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:44:1d:03:2e:3f:c8:e3:a6:5a:7b:df:5f:30:3a:d8:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99abe45f21f12e4b802f309444c24759000ebcf
Validity
Not Before: Oct 16 09:48:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b464101341ba45f716fca52f760bbe07b4b6e1a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:cf:f4:f6:23:7f:e7:36:30:db:1d:29:48:eb:
a7:67:af:9d:7d:82:d1:43:fd:2a:79:87:f7:f2:08:
f2:62:30:6c:bc:72:61:29:ae:76:21:0e:28:e7:42:
83:e9:4a:33:2d:b2:25:91:56:f2:6e:e8:11:83:44:
19:49:29:6c:5e:7d:a8:4a:c9:b8:ed:4f:8b:28:3f:
9a:9f:99:e1:44:fc:a7:67:49:14:95:fa:af:5b:61:
36:5a:13:28:17:41:37:d9:1a:b4:19:59:bf:2b:6a:
31:21:df:88:fa:5c:bf:9c:2f:5f:10:58:32:39:bb:
ce:ed:fd:37:85:85:88:8f:43:bf:ec:fd:0b:57:cb:
b2:e6:cb:90:15:18:87:fb:f8:c4:ac:6b:93:c6:1d:
b4:69:f0:c9:fc:02:0e:9b:9e:7a:1c:fa:4c:b0:0b:
b9:30:0a:4c:5d:46:47:49:fd:3e:62:e2:3b:4f:40:
e7:ea:f2:63:dd:c4:06:e9:55:ff:4e:b2:43:68:45:
42:7e:81:ce:fb:28:99:51:70:4f:72:47:07:87:6b:
77:e1:25:77:5c:e2:e6:26:64:a0:1d:41:8e:83:15:
a7:6b:7f:05:69:40:84:28:9f:f7:25:02:a1:01:8e:
8b:a5:c6:ff:65:cf:77:1b:27:8b:83:62:1b:e2:be:
a7:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:64:10:13:41:BA:45:F7:16:FC:A5:2F:76:0B:BE:07:B4:B6:E1:A4
X509v3 Authority Key Identifier:
keyid:F9:9A:BE:45:F2:1F:12:E4:B8:02:F3:09:44:4C:24:75:90:00:EB:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zq-RfIfEuS4AvMJREwkdZAA688.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/tGQQE0G6RfcW_KUvdgu-B7S24aQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/d3e3d7-0357-487e-9fed-a8e8b8931552/1/1-Zq-RfIfEuS4AvMJREwkdZAA688.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.175.188.0/22
Signature Algorithm: sha256WithRSAEncryption
ab:cd:36:0b:a4:b2:f9:43:1e:f4:29:e9:ef:c4:50:c6:71:32:
9f:dc:57:4a:17:f7:94:8a:22:34:9c:82:79:2d:cb:80:26:ab:
68:df:f3:55:55:a8:b5:9e:0d:c7:e5:65:f3:50:9a:f2:21:27:
3e:fa:d3:b0:fc:91:4f:dd:58:43:10:94:8c:f0:83:a8:9b:1c:
39:cc:a2:cb:00:9d:f8:34:6a:30:17:56:74:b9:6f:fb:15:e1:
dd:74:b2:52:28:e5:0c:c0:85:b0:85:09:fe:c5:b7:78:2a:39:
b9:90:f7:3d:d8:22:3c:d6:25:c6:73:5b:7f:b2:96:47:58:ff:
7b:42:b5:82:fa:4d:a3:5c:00:5e:60:d0:24:be:26:03:58:45:
07:b0:42:76:49:b6:12:62:22:d6:5e:44:48:15:80:c9:bf:f5:
c2:70:28:d8:bc:3c:6a:98:ed:9c:13:c2:88:f2:30:41:88:52:
27:cd:a8:f8:bd:85:3a:e0:fc:ec:77:bd:39:95:da:13:81:01:
6d:dd:a6:4d:c7:ae:ab:cb:e4:24:2e:be:37:e5:82:6a:a7:d4:
40:71:d3:1e:be:93:2d:26:6b:a0:f0:29:98:6b:06:e7:95:d0:
86:52:16:7f:b4:a4:09:07:22:d7:8c:44:63:57:99:cd:73:98:
2d:62:af:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:51:39 2026 by rpki-client