Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/qQb0atgavDxv8NkMeAdiHfzr7-Y.roa
File: qQb0atgavDxv8NkMeAdiHfzr7-Y.roa (raw, json)
Hash identifier: AViFVb7x3JIRqF+5JVs+5C5G47Fm5cKGzomGqfeSXyE=
Subject key identifier: A9:06:F4:6A:D8:1A:BC:3C:6F:F0:D9:0C:78:07:62:1D:FC:EB:EF:E6
Certificate issuer: /CN=2e262d76596975589c34e6086cee9faf29ce752e
Certificate serial: 01A029EFF8773834DD1CE86A6055C63092F8
Authority key identifier: 2E:26:2D:76:59:69:75:58:9C:34:E6:08:6C:EE:9F:AF:29:CE:75:2E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LiYtdllpdVicNOYIbO6frynOdS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/qQb0atgavDxv8NkMeAdiHfzr7-Y.roa
Signing time: Sat 22 Aug 2026 14:46:27 +0000
ROA not before: Sat 22 Aug 2026 14:46:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 159.200.207.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/LiYtdllpdVicNOYIbO6frynOdS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/LiYtdllpdVicNOYIbO6frynOdS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LiYtdllpdVicNOYIbO6frynOdS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:29:ef:f8:77:38:34:dd:1c:e8:6a:60:55:c6:30:92:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e262d76596975589c34e6086cee9faf29ce752e
Validity
Not Before: Aug 22 14:46:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a906f46ad81abc3c6ff0d90c7807621dfcebefe6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:2b:99:27:05:3a:fb:41:15:54:81:48:e7:9f:
12:c5:67:69:47:70:6d:7a:40:a5:78:b7:2c:e7:33:
59:3d:e7:dc:2a:47:31:28:b2:0e:0a:bb:c2:59:cb:
4b:ae:0c:88:bb:e6:7f:3b:28:81:45:b0:1d:2d:7a:
88:3c:58:c1:15:52:e6:05:b0:a6:19:e2:61:b5:07:
ca:89:58:91:b3:d6:c9:0d:56:1b:6e:ac:3a:ff:f7:
22:b3:e4:08:25:62:46:db:2c:92:2b:05:c0:6e:6d:
4d:e7:7d:ac:e0:6c:97:56:c5:3d:a5:fb:c9:fa:5a:
ed:11:f6:e1:11:97:11:65:d7:92:16:d9:f5:bc:7d:
31:59:6c:1f:71:a9:5c:14:f3:8e:4e:fc:60:48:c1:
01:b8:f9:e0:18:3c:b0:a2:eb:53:71:49:b8:33:4b:
69:61:2d:27:aa:17:33:65:56:98:2e:d7:46:06:5c:
eb:87:f1:e6:bf:e0:96:02:49:21:56:40:c7:ae:5a:
21:b7:0e:1f:31:a7:f7:ce:70:f0:b7:a6:53:53:f7:
4b:72:2f:4d:db:c5:d8:99:c1:2b:f9:b2:6b:1f:8d:
73:6f:ae:48:b2:49:53:b0:9e:54:de:90:f3:38:53:
94:1f:1e:57:df:f8:35:c9:7c:38:94:e9:56:08:40:
d2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:06:F4:6A:D8:1A:BC:3C:6F:F0:D9:0C:78:07:62:1D:FC:EB:EF:E6
X509v3 Authority Key Identifier:
keyid:2E:26:2D:76:59:69:75:58:9C:34:E6:08:6C:EE:9F:AF:29:CE:75:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LiYtdllpdVicNOYIbO6frynOdS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/qQb0atgavDxv8NkMeAdiHfzr7-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/e8c8ad-4410-414f-83a9-55b57616dc7a/1/LiYtdllpdVicNOYIbO6frynOdS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
159.200.207.0/24
Signature Algorithm: sha256WithRSAEncryption
bf:db:90:c5:13:47:1d:44:7a:fe:d8:9a:ff:15:73:6f:ad:5a:
be:af:36:7a:0b:90:09:d6:07:a6:86:74:b8:a9:49:47:3f:32:
28:04:0c:6f:72:ca:6d:66:cb:ca:17:74:2a:35:a1:6f:19:ce:
03:e3:75:38:bf:9d:f9:f0:b6:f9:30:07:32:d9:1d:8d:56:31:
4f:ae:fb:d9:29:41:33:65:28:a2:f5:0c:9f:f7:d0:9e:f6:0b:
f0:47:3c:de:49:eb:71:ff:e9:67:50:49:3c:4b:64:38:a9:9b:
02:45:fc:e5:f3:d9:e1:e1:6e:23:d8:9f:3c:e0:bc:d8:ce:8b:
05:1c:87:3a:ff:2b:39:69:52:4c:4c:27:3f:a9:69:9d:9e:ae:
5b:17:a5:c3:60:c9:01:8c:69:48:27:cb:65:79:d9:39:64:b4:
d5:37:13:ec:dd:f1:1e:ff:4d:4a:13:bc:af:6b:13:54:d1:45:
ad:0a:1e:ce:66:55:a7:31:73:f9:c5:4a:3d:e2:f4:e1:0a:ef:
ee:54:19:c2:66:71:3b:94:45:e3:95:55:23:7a:a9:0d:2f:6c:
49:e0:3d:77:48:de:ed:23:0a:44:a0:e7:46:48:09:4a:59:43:
b9:f6:12:6c:e7:7c:8a:b1:17:cc:22:f9:50:45:01:f3:6d:09:
b8:ee:bd:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:30:26 2026 by rpki-client