Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/DQ5ge_AVqMtAPY9U7I0NG3R42qg.roa
File: DQ5ge_AVqMtAPY9U7I0NG3R42qg.roa (raw, json)
Hash identifier: jsnJNj/v/02NtfCQyh36AKD7ORjisZ7Gdmv2I1MdQ3A=
Subject key identifier: 0D:0E:60:7B:F0:15:A8:CB:40:3D:8F:54:EC:8D:0D:1B:74:78:DA:A8
Certificate issuer: /CN=6d7eee355779634e02a14b39220367f3b34e5b95
Certificate serial: 01A0A1CCC9AEA491BBA94063CC79DF94D078
Authority key identifier: 6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/DQ5ge_AVqMtAPY9U7I0NG3R42qg.roa
Signing time: Mon 14 Sep 2026 21:22:27 +0000
ROA not before: Mon 14 Sep 2026 21:22:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50979
IP address blocks: 46.28.64.0/24 maxlen: 24
193.238.155.0/24 maxlen: 24
195.123.208.0/21 maxlen: 21
2a02:27ac::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a1:cc:c9:ae:a4:91:bb:a9:40:63:cc:79:df:94:d0:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d7eee355779634e02a14b39220367f3b34e5b95
Validity
Not Before: Sep 14 21:22:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0d0e607bf015a8cb403d8f54ec8d0d1b7478daa8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:e0:bb:25:42:7a:db:63:d9:53:f4:33:d2:5b:
f3:14:dd:79:5e:b6:e7:19:d3:87:57:b8:03:68:60:
ee:97:03:3e:c5:8f:ac:fa:6a:3f:69:90:ac:5b:40:
18:b3:0a:5f:b6:78:4a:6f:55:2b:83:b6:09:37:0d:
54:fc:52:95:8d:c8:5c:c5:0a:5f:f5:d0:ae:ed:95:
8d:f4:d3:66:ab:a7:57:8a:a8:8d:78:8e:34:21:06:
72:18:20:e1:84:97:43:b6:34:0a:b4:e9:de:ac:45:
c9:15:d4:37:26:40:ec:3e:56:fc:8b:cd:81:aa:79:
22:e0:4e:3d:31:87:bc:49:a5:30:a1:06:f8:9d:af:
53:2f:d6:5d:66:26:50:4e:e6:32:6f:33:6d:e6:33:
c3:ce:3c:2e:0c:50:75:3d:9e:62:60:29:90:03:81:
c2:7b:0c:1d:57:4e:20:7f:99:0d:fb:ef:ae:62:0b:
3f:7f:3e:70:76:a1:ec:32:d4:0a:b0:6c:fd:88:71:
51:89:23:f6:ae:58:ce:5c:c4:17:83:5d:51:d7:32:
c1:3a:d8:22:f7:d9:cb:50:87:ea:d2:d6:4f:e3:e7:
d2:3d:d2:64:cd:c2:80:8a:8e:df:0d:ee:3d:a9:8f:
38:01:7b:1b:d2:fd:86:a2:69:12:68:83:78:bb:20:
d5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:0E:60:7B:F0:15:A8:CB:40:3D:8F:54:EC:8D:0D:1B:74:78:DA:A8
X509v3 Authority Key Identifier:
keyid:6D:7E:EE:35:57:79:63:4E:02:A1:4B:39:22:03:67:F3:B3:4E:5B:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bX7uNVd5Y04CoUs5IgNn87NOW5U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/DQ5ge_AVqMtAPY9U7I0NG3R42qg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/73a9ab-5321-43de-b0a1-109044cf23fb/1/bX7uNVd5Y04CoUs5IgNn87NOW5U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.64.0/24
193.238.155.0/24
195.123.208.0/21
IPv6:
2a02:27ac::/32
Signature Algorithm: sha256WithRSAEncryption
33:56:ee:eb:34:4f:d1:08:fb:91:21:d8:64:06:b3:f9:bf:7c:
40:f5:7b:1c:0b:02:8c:1e:a6:84:39:b3:61:ed:8d:e7:61:04:
4a:c1:4d:21:3a:b3:b0:7e:d1:d2:c8:2b:eb:de:56:d3:1b:79:
52:a3:5f:bb:59:0a:8d:1b:d4:57:0e:c4:d8:8e:0d:ef:bc:5b:
66:b0:eb:e6:6c:38:af:2e:38:de:71:28:0a:84:f7:da:9d:0e:
4d:51:68:fe:0b:f8:df:01:40:54:69:1a:ee:aa:6f:82:e1:ae:
0b:f8:5a:ed:a2:62:ae:0a:3f:aa:0f:c7:77:91:e6:32:f6:de:
29:74:fe:fb:dc:78:c5:3c:bc:ff:5d:b2:1f:08:38:7f:c7:ca:
bf:35:80:08:f3:01:7a:8b:39:dd:d0:4c:ed:e1:ae:ec:3d:8f:
b2:b0:c2:91:92:fb:fe:a7:8f:3f:95:89:10:99:61:d8:6c:b7:
a3:37:6d:a4:ba:40:f7:91:64:bb:2e:34:a6:9f:c2:3d:d7:7c:
49:34:a1:99:29:ca:9f:71:49:cc:9c:eb:4e:f4:d5:e2:df:1e:
39:42:c2:b9:77:da:e6:c7:cc:46:34:b9:12:8f:43:6d:e5:15:
9e:fa:f6:90:25:3c:c2:1a:c9:8f:dc:ac:b2:47:6c:25:af:db:
36:3a:6a:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 21:07:20 2026 by rpki-client