Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/Q0wZrBWN3__RjDh4ep9XdbeLvtw.roa
File: Q0wZrBWN3__RjDh4ep9XdbeLvtw.roa (raw, json)
Hash identifier: y3g1ixBFrS6jt/5ELqww8HbbFtrwY3FruCtmtguhTkU=
Subject key identifier: 43:4C:19:AC:15:8D:DF:FF:D1:8C:38:78:7A:9F:57:75:B7:8B:BE:DC
Certificate issuer: /CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Certificate serial: 019E6837A247DADFC455DD0E3DA065022B9B
Authority key identifier: 24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/Q0wZrBWN3__RjDh4ep9XdbeLvtw.roa
Signing time: Wed 27 May 2026 06:55:36 +0000
ROA not before: Wed 27 May 2026 06:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215018
IP address blocks: 185.74.83.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.mft
rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 12:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:68:37:a2:47:da:df:c4:55:dd:0e:3d:a0:65:02:2b:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2400b20606314858a7b3f2a975e8e9d919ec753a
Validity
Not Before: May 27 06:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=434c19ac158ddfffd18c38787a9f5775b78bbedc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e6:95:33:1d:d4:dc:a6:3c:f6:32:fd:c0:9e:6c:
2f:3a:b2:5f:18:2d:d3:93:6f:6c:b6:a5:a4:ca:f3:
2f:99:72:5c:fc:08:61:bf:ac:da:82:44:20:0d:d5:
53:19:07:36:0c:29:fd:f8:06:fc:9a:a3:38:01:4e:
c9:c8:9f:d9:cf:66:7d:63:78:be:98:b1:3c:4d:cb:
e4:75:03:8f:ac:cf:6d:f2:42:80:5b:ad:dd:01:fd:
78:bb:f1:e1:65:50:dd:6c:cf:f5:7c:cd:a8:37:8a:
bc:61:9d:37:3d:db:b0:c6:5b:0c:56:4a:74:8e:65:
8f:86:a8:a2:03:94:f7:0b:53:01:fb:16:d1:b1:66:
15:48:b6:4e:f4:5a:16:64:0e:1b:5d:18:b3:dc:af:
d8:15:04:4f:d1:eb:f2:c4:7c:d8:d9:c2:a5:85:9f:
86:d9:95:e3:70:02:55:5e:f0:63:39:9b:f7:64:17:
27:1d:93:02:c8:e7:2d:82:64:50:a2:0a:88:81:fd:
c6:49:73:e9:1f:d7:bd:2f:d2:41:41:40:46:33:6c:
95:ed:a5:82:ae:d9:e2:57:ec:d5:8c:8c:c6:82:a3:
10:44:2f:02:37:90:13:4b:34:d8:4f:15:ac:00:31:
9f:c4:76:0d:bc:35:ef:b3:4d:70:60:cb:3e:6f:64:
91:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4C:19:AC:15:8D:DF:FF:D1:8C:38:78:7A:9F:57:75:B7:8B:BE:DC
X509v3 Authority Key Identifier:
keyid:24:00:B2:06:06:31:48:58:A7:B3:F2:A9:75:E8:E9:D9:19:EC:75:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JACyBgYxSFins_Kpdejp2RnsdTo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/Q0wZrBWN3__RjDh4ep9XdbeLvtw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/43/dbd951-259b-4759-a519-9c5e1deb2c33/1/JACyBgYxSFins_Kpdejp2RnsdTo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.74.83.0/24
Signature Algorithm: sha256WithRSAEncryption
54:ae:cf:1f:41:3e:90:6d:a4:f5:12:f3:d6:4e:de:90:42:62:
57:f9:75:09:db:0c:5d:50:61:a3:60:0c:1e:b4:b5:43:b8:b4:
43:5d:22:35:65:99:67:d9:2a:cb:cd:d0:57:cf:0a:25:5a:a1:
35:2b:3e:47:16:cf:c3:bb:93:51:5f:e6:c0:ae:4f:61:77:bd:
c7:52:1d:6c:3f:10:1a:87:20:35:01:12:7e:07:83:5c:c5:08:
e3:fa:6f:f0:e6:2a:dd:52:43:4a:be:5e:7e:a4:41:f9:17:9f:
4a:9a:eb:c5:ee:5d:6f:82:36:6e:27:67:7b:b5:4a:49:0e:2d:
66:2a:e8:45:07:90:88:75:2b:63:1d:b7:8b:c5:1b:57:24:cf:
bf:1e:d4:f4:51:a3:01:13:73:f0:b4:dd:9e:d7:46:de:bb:2f:
ce:f9:6b:4e:6b:f4:f7:10:81:c7:ca:b7:d9:54:97:32:72:63:
c6:11:09:ac:33:b5:3b:ea:0b:05:41:97:64:3e:8f:45:f6:af:
70:d0:0c:99:17:74:a4:5e:de:b4:58:c5:5a:20:6b:63:ce:c7:
af:a3:15:6c:29:26:77:df:34:02:6a:d4:61:2a:ae:c2:9f:96:
8b:c4:2c:95:30:de:5f:65:a7:ca:46:b0:73:71:8a:aa:12:84:
d2:1e:ac:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 21:19:47 2026 by rpki-client