Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/qsR7TZkWFq0TDf5MckwIwh8zFQM.roa
File: qsR7TZkWFq0TDf5MckwIwh8zFQM.roa (raw, json)
Hash identifier: sxmqqI4u+18AAhXlZEPlMsFP8KQ4AzNJugzw/xraXsU=
Subject key identifier: AA:C4:7B:4D:99:16:16:AD:13:0D:FE:4C:72:4C:08:C2:1F:33:15:03
Certificate issuer: /CN=226b9c138065a820c9acdf4385cb2012450349fe
Certificate serial: 019F236923D8DAD7B3FCA63FAD2D0E7FDDD5
Authority key identifier: 22:6B:9C:13:80:65:A8:20:C9:AC:DF:43:85:CB:20:12:45:03:49:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ImucE4BlqCDJrN9DhcsgEkUDSf4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/qsR7TZkWFq0TDf5MckwIwh8zFQM.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 78.138.44.0/24 maxlen: 24
185.106.204.0/24 maxlen: 24
185.106.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.mft
rsync://rpki.ripe.net/repository/DEFAULT/ImucE4BlqCDJrN9DhcsgEkUDSf4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:23:d8:da:d7:b3:fc:a6:3f:ad:2d:0e:7f:dd:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=226b9c138065a820c9acdf4385cb2012450349fe
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aac47b4d991616ad130dfe4c724c08c21f331503
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:5c:73:a5:05:48:56:88:88:78:c5:8d:c7:4b:
a5:ba:9f:e4:81:44:eb:79:fa:50:65:21:6f:e3:42:
c3:b4:52:ea:13:e6:4b:a9:c3:13:73:68:c6:48:2a:
77:9f:09:8f:d8:63:3d:5d:0a:e8:fd:90:c4:9e:42:
78:e8:2b:08:b4:39:73:3e:57:42:d7:f6:37:ae:9f:
94:7a:e3:84:04:80:9f:4f:d5:3a:33:2e:f0:da:0e:
31:2d:6b:28:a8:4e:ef:8d:05:0f:ce:66:86:42:6d:
c2:24:db:14:e8:43:d0:40:db:15:a1:cc:bb:dd:59:
dc:c7:01:1f:a4:c9:91:6b:1c:82:56:9b:26:7d:3b:
8b:89:f8:cd:77:dc:1f:c6:49:0f:c3:19:cb:4c:90:
7c:d2:42:96:b7:fb:9d:52:37:48:ec:09:4d:c7:18:
7a:3a:c4:26:95:89:75:a8:b6:eb:a0:87:17:c7:d5:
f4:91:3e:e3:08:57:4b:11:b7:68:9c:96:da:03:f0:
41:2e:da:e2:e3:6b:6d:31:ba:f9:62:cf:3e:82:1a:
b7:cb:f6:20:ca:0f:b7:f1:23:7f:6f:70:30:01:5f:
86:3f:84:5f:53:35:ee:f6:89:b8:0f:5e:f6:8c:9a:
c4:b2:eb:d2:a1:fc:67:f2:3f:95:7f:28:8c:bf:d8:
95:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C4:7B:4D:99:16:16:AD:13:0D:FE:4C:72:4C:08:C2:1F:33:15:03
X509v3 Authority Key Identifier:
keyid:22:6B:9C:13:80:65:A8:20:C9:AC:DF:43:85:CB:20:12:45:03:49:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ImucE4BlqCDJrN9DhcsgEkUDSf4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/qsR7TZkWFq0TDf5MckwIwh8zFQM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/4806a5-6fa3-4832-b740-47a5f481e6f5/1/ImucE4BlqCDJrN9DhcsgEkUDSf4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
78.138.44.0/24
185.106.204.0/24
185.106.207.0/24
Signature Algorithm: sha256WithRSAEncryption
34:15:0c:93:fb:df:6a:cf:5b:bb:4b:c6:d2:48:9b:70:2c:c8:
ad:0b:46:f1:7b:35:a9:e2:9c:33:75:fe:e9:dd:36:8b:0a:71:
ce:64:c9:9a:b5:7a:f1:4c:aa:bd:84:0b:c0:11:19:37:d3:29:
52:1c:9a:d6:36:88:e6:7e:ab:35:85:78:a9:d0:97:bd:d8:37:
ec:90:a6:54:6d:51:1d:06:9b:b8:f2:de:5e:1f:d9:3c:52:c1:
61:dd:a2:ed:ff:b4:2d:31:d1:46:71:18:f1:0b:bb:d7:ec:67:
d5:03:62:85:16:2d:7f:7e:51:20:36:70:7e:f9:c4:ef:8d:04:
24:0a:71:ee:d1:41:e6:3e:16:3a:8d:dc:9a:31:73:fc:c8:9d:
ed:7f:ee:21:67:a8:eb:c6:30:98:8b:c7:d4:30:c8:bc:7f:3f:
02:eb:52:bd:b0:20:7f:f0:d1:b9:6d:58:70:86:ce:35:c8:fb:
d9:77:bf:bc:1a:bf:58:70:c2:fb:8a:fd:07:ab:cc:e2:af:2d:
c8:61:c1:66:dc:35:96:dd:91:ca:a5:0e:cd:43:d4:58:f1:f5:
58:7d:17:a9:8b:4f:d2:ba:c7:2d:c1:32:a5:75:02:7f:6f:79:
85:e4:54:46:28:2b:73:1f:18:1a:9c:82:0f:1a:82:31:73:08:
8f:aa:c8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:56:56 2026 by rpki-client