Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/Q6caSqrd8P2RoWwdK-Fli6nzx1E.roa
File: Q6caSqrd8P2RoWwdK-Fli6nzx1E.roa (raw, json)
Hash identifier: n8DKy+MaJq5/+1WDyrmoZQNGAU9+RaPzqYYWTqwKXkI=
Subject key identifier: 43:A7:1A:4A:AA:DD:F0:FD:91:A1:6C:1D:2B:E1:65:8B:A9:F3:C7:51
Certificate issuer: /CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Certificate serial: 019FA9CF2B6461937E811EBE18E3CAAE66BB
Authority key identifier: C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/Q6caSqrd8P2RoWwdK-Fli6nzx1E.roa
Signing time: Tue 28 Jul 2026 17:39:14 +0000
ROA not before: Tue 28 Jul 2026 17:39:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219112
IP address blocks: 195.95.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:cf:2b:64:61:93:7e:81:1e:be:18:e3:ca:ae:66:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c65a1da1cb1c920ae2f9b748270fded8737a9184
Validity
Not Before: Jul 28 17:39:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43a71a4aaaddf0fd91a16c1d2be1658ba9f3c751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:47:20:a0:2c:f1:51:a1:c9:86:24:8a:a2:ad:
1d:e2:39:23:48:5a:7b:ec:fd:76:e6:bb:9a:9b:02:
d5:47:8c:fc:a9:04:a5:0e:85:e8:55:2c:c8:da:45:
0d:e2:98:a8:de:b5:a7:6d:15:0c:00:3d:3d:11:c6:
17:65:be:78:25:f5:5a:f8:5e:c8:6f:a6:55:9f:46:
63:24:6c:7b:b9:fb:13:df:03:7f:04:3e:1a:c6:06:
a9:43:46:13:34:4d:14:d2:7b:ed:76:87:d5:c9:35:
e0:11:35:d2:78:7a:97:8f:ef:4c:3c:56:ac:ce:c6:
ed:40:70:4c:20:42:09:b8:24:0f:dd:40:82:2a:ee:
45:e3:a8:60:1b:7f:b3:17:60:21:96:c3:c1:9b:6b:
35:aa:1d:86:16:14:d4:45:46:5f:8b:9d:32:91:7c:
e0:71:45:ef:2f:61:51:9f:ba:6b:d0:f7:00:a6:01:
7c:fa:b7:e9:46:cf:48:6a:c4:b1:95:7c:74:e6:11:
cc:36:88:8b:bf:f5:84:b0:72:5d:26:e5:b7:88:d5:
d1:12:36:04:2e:1d:5a:99:14:b1:85:5c:25:ee:f9:
f3:ff:28:3a:99:5f:e6:01:2f:a7:a6:41:88:4a:04:
2d:da:a4:b7:f8:44:21:14:b6:38:50:f1:ae:09:cb:
94:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A7:1A:4A:AA:DD:F0:FD:91:A1:6C:1D:2B:E1:65:8B:A9:F3:C7:51
X509v3 Authority Key Identifier:
keyid:C6:5A:1D:A1:CB:1C:92:0A:E2:F9:B7:48:27:0F:DE:D8:73:7A:91:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xlodocsckgri-bdIJw_e2HN6kYQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/Q6caSqrd8P2RoWwdK-Fli6nzx1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/4f54b4-009f-46ce-9ac0-36bac8d91e2e/1/xlodocsckgri-bdIJw_e2HN6kYQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.95.217.0/24
Signature Algorithm: sha256WithRSAEncryption
85:7c:6d:ad:99:10:d0:90:48:90:14:26:95:c9:26:b7:cb:b0:
0a:4e:a8:06:fa:02:04:25:a9:74:5f:1e:4e:01:41:0c:cb:b2:
46:24:8f:cf:8b:18:68:cb:19:a3:ad:5b:e4:0a:4a:1c:28:a1:
b2:c3:d7:82:a4:66:4c:d9:96:56:d6:9b:13:eb:27:f3:c7:96:
d7:1e:f1:b5:fc:6d:37:fc:57:99:95:4d:2b:a7:15:63:73:cc:
3d:03:35:58:17:32:91:24:bf:a0:b8:d0:0d:57:1e:3a:17:36:
86:f8:f8:4b:83:0b:d3:20:6b:70:fc:cf:67:95:db:c0:a4:79:
6b:bd:11:87:cb:e5:62:ba:23:0e:7b:38:50:ff:4d:8e:90:76:
68:e1:fd:f3:eb:d0:17:97:f6:f0:52:11:54:16:a6:7c:91:96:
36:dc:97:4b:2d:52:5c:cb:87:56:da:50:80:00:76:35:b7:39:
da:f7:11:e5:bf:05:1b:cc:a7:8b:48:7a:18:ee:33:c1:56:5d:
30:f6:12:7f:79:5b:86:26:85:ad:7f:45:88:01:17:c0:d6:dd:
0a:11:98:eb:2f:86:62:85:4e:5b:53:85:94:22:ee:74:b2:0a:
89:21:8b:b1:7e:2d:4a:e6:b6:74:aa:61:83:d4:49:6e:d6:9e:
15:09:3c:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:38:18 2026 by rpki-client