Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/qopqpOjSigcAgnh4q3o38zGjwNA.roa
File: qopqpOjSigcAgnh4q3o38zGjwNA.roa (raw, json)
Hash identifier: EBQgdsC6JJfdJnKh94uu6CL6R7A3pzSO9sS4FBZtJ/k=
Subject key identifier: AA:8A:6A:A4:E8:D2:8A:07:00:82:78:78:AB:7A:37:F3:31:A3:C0:D0
Certificate issuer: /CN=0c4f995f419220f5874267d68cc14372f0cdf293
Certificate serial: 019B7CEE66178F46E0F7F7766A6CD22D0CFA
Authority key identifier: 0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/qopqpOjSigcAgnh4q3o38zGjwNA.roa
Signing time: Fri 02 Jan 2026 04:19:17 +0000
ROA not before: Fri 02 Jan 2026 04:19:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209905
IP address blocks: 45.65.72.0/22 maxlen: 22
45.65.72.0/23 maxlen: 23
45.65.72.0/24 maxlen: 24
45.65.73.0/24 maxlen: 24
45.65.74.0/23 maxlen: 23
45.65.74.0/24 maxlen: 24
45.65.75.0/24 maxlen: 24
185.191.72.0/22 maxlen: 22
185.191.72.0/23 maxlen: 23
185.191.72.0/24 maxlen: 24
185.191.73.0/24 maxlen: 24
185.191.74.0/23 maxlen: 23
185.191.74.0/24 maxlen: 24
185.191.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 10:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:ee:66:17:8f:46:e0:f7:f7:76:6a:6c:d2:2d:0c:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0c4f995f419220f5874267d68cc14372f0cdf293
Validity
Not Before: Jan 2 04:19:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa8a6aa4e8d28a0700827878ab7a37f331a3c0d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:28:1f:7d:ca:ca:d6:1e:f8:bb:43:d5:51:1b:
51:a1:d2:73:0e:16:7b:ad:68:f0:c8:ca:ea:3d:d9:
e5:77:e3:1e:41:5d:40:3e:7b:20:46:5b:b0:6e:c2:
83:b0:3c:30:81:5e:4a:82:9c:2c:ec:d0:76:46:b0:
a2:48:83:b7:76:a7:ed:7e:bc:33:60:d6:56:d4:bc:
66:bb:79:57:1e:ac:3b:7c:91:a3:6f:a5:d7:f3:aa:
87:c9:bd:c3:31:93:d0:aa:a3:32:c4:a4:fd:14:a3:
5d:d7:4c:e2:b9:e5:c1:53:de:5e:5b:b4:bb:b1:4d:
ee:1a:16:d5:47:19:18:3d:c9:3a:cd:5c:f8:c6:1d:
df:49:d4:c5:78:5a:df:ce:e4:39:40:28:62:70:eb:
50:a6:72:ae:cd:dd:c2:2e:89:fd:6d:3e:e7:9c:d3:
02:a8:40:de:0f:ef:8a:de:25:19:12:86:0e:a8:fb:
fa:f3:22:cf:78:d6:d6:4d:9c:8d:ef:d9:e1:ed:40:
c3:e8:9f:ea:7f:a4:2e:58:3f:c9:2a:83:d2:08:cc:
9f:3c:c0:90:ba:8d:aa:b7:c5:d4:6d:da:1e:0d:44:
76:d1:de:be:0e:f9:31:1e:23:37:53:66:c2:c9:ea:
bb:63:70:47:92:37:b7:61:40:82:d3:2a:09:e6:7a:
f0:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8A:6A:A4:E8:D2:8A:07:00:82:78:78:AB:7A:37:F3:31:A3:C0:D0
X509v3 Authority Key Identifier:
keyid:0C:4F:99:5F:41:92:20:F5:87:42:67:D6:8C:C1:43:72:F0:CD:F2:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/qopqpOjSigcAgnh4q3o38zGjwNA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/7287cb-9051-451a-b34a-264cc427254e/1/DE-ZX0GSIPWHQmfWjMFDcvDN8pM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.65.72.0/22
185.191.72.0/22
Signature Algorithm: sha256WithRSAEncryption
1f:b2:03:da:a6:4d:f2:0f:ec:49:eb:7a:ff:4b:d1:e3:88:aa:
bd:c3:bd:bc:59:40:b6:da:df:27:0b:e8:b3:95:3c:03:11:6b:
1d:9c:3b:9b:87:f7:f9:8f:6f:ef:5e:c5:3d:41:a4:3b:c3:4b:
66:0c:82:ca:f5:18:8b:5f:af:f2:c7:f9:4b:7e:e7:bd:fd:ba:
90:6d:e8:ae:25:22:fd:b3:49:0f:a1:9a:85:e9:51:64:f8:60:
c9:56:af:bb:ef:cb:12:8e:85:dd:aa:7a:f9:2b:21:38:6f:76:
39:a1:41:b6:5c:f1:a7:f5:e8:fc:ac:f4:ce:42:67:a8:fa:eb:
bc:09:35:90:9f:b4:ae:61:2e:7e:c1:fe:45:3f:21:fd:bb:a4:
64:bb:c6:70:27:3a:c0:49:9e:9c:f5:3e:99:06:82:77:17:e3:
fc:0d:6f:60:91:ac:38:2d:fc:91:71:c0:c4:70:e9:38:3b:dd:
53:f3:b3:d2:27:f3:87:99:2d:eb:14:5b:08:ec:92:32:99:57:
74:6f:87:39:54:a0:1e:b6:8b:84:4c:eb:d1:b9:42:70:55:9f:
7c:7d:73:a0:6e:12:6f:80:01:d3:5a:65:39:cd:5e:b3:75:4b:
8b:30:dc:7b:af:50:58:4e:86:ab:08:5b:91:64:5e:71:bc:20:
ab:f5:8b:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 18:23:03 2026 by rpki-client