Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/VQ_7-Qao_TMr03DMsmz8hSGqsgc.roa
File: VQ_7-Qao_TMr03DMsmz8hSGqsgc.roa (raw, json)
Hash identifier: 4IO20XFCNpA3GO6xHn+ElDklvpXittT6J7WkO7c/N+A=
Subject key identifier: 55:0F:FB:F9:06:A8:FD:33:2B:D3:70:CC:B2:6C:FC:85:21:AA:B2:07
Certificate issuer: /CN=45589f3aa0f6c2154440076b4651e0940b24d3b3
Certificate serial: 01A187D24814F82C719D7FB385C02E40BB0A
Authority key identifier: 45:58:9F:3A:A0:F6:C2:15:44:40:07:6B:46:51:E0:94:0B:24:D3:B3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/VQ_7-Qao_TMr03DMsmz8hSGqsgc.roa
Signing time: Thu 29 Oct 2026 13:21:07 +0000
ROA not before: Thu 29 Oct 2026 13:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 150670
IP address blocks: 66.111.98.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.mft
rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 03:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:87:d2:48:14:f8:2c:71:9d:7f:b3:85:c0:2e:40:bb:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45589f3aa0f6c2154440076b4651e0940b24d3b3
Validity
Not Before: Oct 29 13:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=550ffbf906a8fd332bd370ccb26cfc8521aab207
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f2:c5:6c:96:c9:98:e1:c4:24:29:7b:97:f6:
76:5c:90:eb:d2:22:03:a3:28:4b:19:94:a5:53:1e:
88:00:53:d1:0a:6c:ed:fb:48:89:a6:18:bd:33:50:
a0:44:d7:c3:aa:1b:37:e9:93:22:f1:c0:5b:74:c7:
5a:3c:66:f3:ab:b2:05:22:a3:b4:01:ed:1e:2b:53:
a7:0c:d1:9f:e5:38:1b:0f:2a:00:06:f2:44:d0:37:
46:1d:6c:8b:c6:34:9b:fa:64:f7:1b:75:c1:4e:e1:
48:e3:6c:9e:a2:c2:0b:05:64:ee:61:7f:96:a3:7a:
c5:0a:49:49:36:4f:a3:68:e6:7f:51:1d:a8:ae:d2:
e8:fa:03:58:19:90:eb:4d:ec:9a:8f:eb:f6:9e:8a:
db:8a:db:e6:b3:77:b2:7e:74:4a:50:ab:df:9d:6c:
61:14:85:6b:85:07:40:02:23:f8:b8:dd:be:04:bb:
39:66:ed:53:20:d0:ee:18:66:7f:84:b8:1a:d0:ba:
94:a0:a8:be:89:45:03:d4:93:0f:5f:dd:c5:a0:b6:
57:8b:e0:cb:e5:fe:f3:c9:78:44:f8:c9:02:8b:35:
0f:8e:c8:cb:10:95:08:b4:e4:a7:9f:7d:ab:7b:96:
90:ab:a2:51:77:16:bf:61:29:8f:c6:64:18:30:bd:
aa:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:0F:FB:F9:06:A8:FD:33:2B:D3:70:CC:B2:6C:FC:85:21:AA:B2:07
X509v3 Authority Key Identifier:
keyid:45:58:9F:3A:A0:F6:C2:15:44:40:07:6B:46:51:E0:94:0B:24:D3:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVifOqD2whVEQAdrRlHglAsk07M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/VQ_7-Qao_TMr03DMsmz8hSGqsgc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/173981-ff7e-4c8f-b1f2-e244f6fe0bec/1/RVifOqD2whVEQAdrRlHglAsk07M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
66.111.98.0/23
Signature Algorithm: sha256WithRSAEncryption
46:8c:42:8e:ca:68:78:67:27:c8:37:ef:13:da:36:84:d3:d4:
b1:fe:a5:d9:f3:fc:fb:89:21:92:76:85:64:03:21:01:50:19:
50:b5:55:45:08:ff:d3:56:31:3b:8f:11:31:a0:ed:65:5e:f2:
aa:7e:d7:cf:dd:b5:59:11:24:9c:04:7c:d6:45:94:2a:da:88:
e4:96:96:33:ed:5c:14:a9:07:38:f9:b4:f6:eb:22:46:31:49:
43:2d:43:17:12:14:11:97:c4:ab:41:a0:6c:0c:97:b5:a5:fd:
ac:04:60:14:3d:0f:d5:00:26:40:e7:f8:c6:6d:42:50:d8:08:
df:67:a4:53:20:1e:b2:10:ee:fb:5d:d0:29:e0:e1:7e:d4:9f:
62:cf:6d:bf:74:2b:46:56:a9:1f:00:ea:4e:8e:ad:02:d6:f6:
25:4e:65:72:bf:92:03:d8:3b:46:13:41:25:a7:73:68:5f:27:
4b:e4:33:79:c9:32:ad:b5:ec:14:1c:b4:6b:1e:97:df:20:a2:
90:bb:30:fc:86:4a:be:ba:fd:22:40:73:b0:6e:ac:d5:18:88:
77:49:bb:dc:04:b2:4c:1b:43:7d:01:29:bb:36:a5:92:5b:60:
35:8f:dd:98:72:4f:a4:11:0b:f0:86:86:0a:fa:ae:21:bf:0d:
d8:df:ac:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 14:06:01 2026 by rpki-client