Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/Q1BIazUMtU491Kfp1prxFz4oeuU.roa
File: Q1BIazUMtU491Kfp1prxFz4oeuU.roa (raw, json)
Hash identifier: sJo8b2jgePbm04v5Oh4sG6+LqF87DEVfl2ISH3CHQlc=
Subject key identifier: 43:50:48:6B:35:0C:B5:4E:3D:D4:A7:E9:D6:9A:F1:17:3E:28:7A:E5
Certificate issuer: /CN=f6f49bfb2a0b82446060c7fc907810e518705936
Certificate serial: 019B79ECCF1A33E12846A8E70FB8CF48477C
Authority key identifier: F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/Q1BIazUMtU491Kfp1prxFz4oeuU.roa
Signing time: Thu 01 Jan 2026 14:18:41 +0000
ROA not before: Thu 01 Jan 2026 14:18:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213754
IP address blocks: 176.103.112.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ec:cf:1a:33:e1:28:46:a8:e7:0f:b8:cf:48:47:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6f49bfb2a0b82446060c7fc907810e518705936
Validity
Not Before: Jan 1 14:18:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4350486b350cb54e3dd4a7e9d69af1173e287ae5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d4:46:c1:f4:25:31:0e:f0:82:54:30:a8:fd:
a8:25:a0:58:b5:2f:cd:00:f4:1c:64:6e:17:ad:48:
de:4b:7d:7b:34:7b:6a:c1:0f:7f:bc:73:c6:97:f2:
d8:5f:b0:01:5d:d3:6b:7a:51:bc:0a:f0:52:96:c5:
3d:1c:7c:22:f0:2d:45:ab:94:24:5e:ca:71:17:38:
69:47:3a:af:7e:d3:46:09:e7:62:03:cf:a4:ff:4c:
6a:6c:62:a5:cd:12:c2:9d:6f:28:88:e0:f3:cb:09:
34:06:10:ad:d6:6a:9a:48:be:b5:8c:62:84:46:2d:
d7:b5:f8:16:c8:c1:f6:8f:32:78:dc:08:53:76:6e:
40:10:07:2d:ae:94:18:31:3b:22:17:4b:f9:07:71:
3e:e4:d9:2b:2b:94:21:48:de:1d:0f:6f:3a:79:09:
5a:a7:45:d1:2f:0a:e7:09:99:48:1c:39:50:ff:39:
7a:26:17:ac:9e:81:59:35:cb:a5:a1:af:9b:a8:e4:
c9:19:b3:44:dc:96:f5:c3:e6:5f:2a:42:41:8d:61:
a0:7e:f3:91:c9:b8:3d:bd:ae:d2:13:73:b3:2e:68:
5c:4f:37:fb:73:0b:93:70:c3:72:7a:f0:b8:ed:0c:
2c:f7:01:e7:28:22:67:f7:8d:60:6c:a5:36:d0:48:
b3:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:50:48:6B:35:0C:B5:4E:3D:D4:A7:E9:D6:9A:F1:17:3E:28:7A:E5
X509v3 Authority Key Identifier:
keyid:F6:F4:9B:FB:2A:0B:82:44:60:60:C7:FC:90:78:10:E5:18:70:59:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/Q1BIazUMtU491Kfp1prxFz4oeuU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/77728d-acfe-44a4-bc92-33a56f459bc0/1/9vSb-yoLgkRgYMf8kHgQ5RhwWTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.103.112.0/24
Signature Algorithm: sha256WithRSAEncryption
19:ab:7d:71:3d:f5:da:d5:91:49:85:a7:25:19:20:7c:1a:5f:
db:60:47:a1:66:08:c4:d6:ba:de:13:69:46:4f:1c:7b:7e:b3:
31:be:fc:80:c6:7b:26:b2:25:50:d7:6b:ec:02:2d:e1:52:88:
9b:07:fa:05:3e:cf:0d:47:00:3e:eb:9f:1b:12:b9:ac:af:66:
03:1d:18:e2:6a:42:5c:11:05:16:74:cc:ee:57:00:e5:de:2b:
8f:68:6c:5b:61:9a:2c:f8:33:41:78:e5:a5:44:3e:2f:3b:da:
e5:22:38:8e:93:88:19:0e:64:ae:29:a0:de:99:b8:b0:0c:2f:
4f:1b:15:49:59:0a:0a:a9:41:09:bb:56:e0:4f:f4:bc:a7:35:
fe:46:a2:ae:23:d6:2e:e9:99:fa:f4:a8:48:95:fd:34:70:08:
0e:1b:32:03:f2:29:34:59:b5:63:e9:82:ae:af:72:ab:a3:0e:
cc:b6:74:f5:ba:4c:a9:bf:f1:ea:88:b0:c8:51:56:b6:cf:ec:
99:e4:73:8a:b7:27:24:24:91:6d:fe:aa:32:2b:15:38:3e:a2:
d5:14:cc:82:01:45:05:3e:64:e7:1c:85:3d:23:33:f6:1a:ff:
c1:12:58:62:ee:0d:cf:8d:eb:34:94:7e:75:da:4c:c1:04:37:
d7:10:f5:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 08:26:04 2026 by rpki-client