Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/0Qy7-X4aWFnW27woSMc5XzAgJBo.roa
File: 0Qy7-X4aWFnW27woSMc5XzAgJBo.roa (raw, json)
Hash identifier: VpaLZ1WXgapO0/vtAAyZBHjSFvEwMy4rpeI9bo4lWSM=
Subject key identifier: D1:0C:BB:F9:7E:1A:58:59:D6:DB:BC:28:48:C7:39:5F:30:20:24:1A
Certificate issuer: /CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Certificate serial: 01A0C8537291C0D23E2E4706FE3FC0D65479
Authority key identifier: 24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/0Qy7-X4aWFnW27woSMc5XzAgJBo.roa
Signing time: Tue 22 Sep 2026 08:55:07 +0000
ROA not before: Tue 22 Sep 2026 08:55:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29386
IP address blocks: 94.252.132.0/22 maxlen: 22
94.252.136.0/21 maxlen: 21
185.136.144.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:53:72:91:c0:d2:3e:2e:47:06:fe:3f:c0:d6:54:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24d9da4ffb1bb6d273de1bad5dbbf0d1ff47f0cf
Validity
Not Before: Sep 22 08:55:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d10cbbf97e1a5859d6dbbc2848c7395f3020241a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f7:59:3d:27:24:60:36:cd:09:ff:6d:66:a0:
45:db:e4:dd:45:86:d3:da:0a:82:89:ce:11:08:49:
a6:8e:b9:94:35:8b:83:13:96:67:cd:e7:81:f2:3e:
0d:0b:0a:c9:96:d8:b9:b3:34:b0:6c:ee:b7:d7:b5:
82:47:e7:48:36:be:0f:05:00:7f:69:40:01:89:ed:
58:2b:5c:72:e9:c2:8f:69:71:14:1e:d5:f9:0d:5f:
d4:61:b2:8f:9f:1b:f3:d2:95:58:7d:50:a8:d2:e3:
0c:71:c5:f2:8b:6d:36:a1:38:19:b4:9d:e9:86:73:
70:6f:24:2d:91:57:44:c6:f1:04:50:1b:4f:e8:b0:
b2:ab:25:b4:b6:a7:f6:37:3a:e6:a6:b5:43:ef:fb:
a9:95:f8:ba:e4:62:eb:f1:fc:24:1b:e6:d0:5d:4f:
c8:51:f1:5f:29:ee:ca:44:5c:03:e6:c1:35:59:cf:
e6:46:77:0d:78:72:2d:b5:09:0b:55:a3:93:ce:82:
27:04:5e:a1:b3:8d:51:47:02:52:13:f7:83:db:f1:
f7:dd:74:19:af:5a:f5:c0:85:66:ea:8a:99:41:c7:
2b:b4:20:97:6f:32:41:c6:96:d5:cb:89:a6:d2:2e:
ce:3d:2b:30:4d:13:5d:16:e7:19:ad:93:1d:bd:f9:
63:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0C:BB:F9:7E:1A:58:59:D6:DB:BC:28:48:C7:39:5F:30:20:24:1A
X509v3 Authority Key Identifier:
keyid:24:D9:DA:4F:FB:1B:B6:D2:73:DE:1B:AD:5D:BB:F0:D1:FF:47:F0:CF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNnaT_sbttJz3hutXbvw0f9H8M8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/0Qy7-X4aWFnW27woSMc5XzAgJBo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/1eb120-687c-4993-857f-8a03a7c1fe9b/1/JNnaT_sbttJz3hutXbvw0f9H8M8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.252.132.0-94.252.143.255
185.136.144.0/22
Signature Algorithm: sha256WithRSAEncryption
88:7d:47:9a:b5:d2:89:07:20:2a:ac:74:04:25:6c:22:d3:e6:
5e:b7:af:e6:dc:e6:9c:eb:71:a9:49:85:f9:0e:87:e8:db:66:
3d:51:b0:21:56:82:91:55:49:90:c8:56:d2:ab:7f:e7:fa:ac:
ad:e8:b6:05:86:e5:c7:12:00:58:67:ac:cb:33:be:15:f3:69:
b6:31:bc:f3:9a:78:b8:26:e8:5b:56:71:67:30:1d:9d:2d:b9:
a6:d2:b1:ea:0e:fe:14:fc:8d:ba:f0:c6:79:fc:c7:1d:ed:46:
9f:5d:1a:9b:6f:6b:4d:42:b1:38:ea:0c:98:ee:23:4e:5c:c6:
0b:41:b0:3a:c2:29:d8:5b:6b:01:23:52:70:05:3f:e3:07:0b:
cb:0d:66:83:4f:c1:1d:ad:13:45:7b:df:90:32:da:53:0d:54:
76:a7:8b:cf:77:fe:77:12:98:c1:9a:43:73:6f:33:f2:83:aa:
bd:30:05:dd:79:75:e0:8a:20:96:39:61:55:e1:6c:20:10:d0:
48:6d:6d:ea:bc:20:93:2a:e9:a5:4a:f3:79:a4:72:14:02:0e:
8e:c4:a9:6e:5b:16:ba:79:a7:24:d2:1b:d7:45:b9:a7:d2:72:
c0:80:80:6b:5d:22:16:e6:f0:b5:4b:81:63:cc:66:5d:25:9b:
85:9d:67:08
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Sun Sep 27 01:51:54 2026 by rpki-client