Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/dQBVu3zWk3nAHNSG6Exad3J7mlM.roa
File: dQBVu3zWk3nAHNSG6Exad3J7mlM.roa (raw, json)
Hash identifier: mGD/nKh2PI3t3mqHrxwywCF6Z+wlDVg8jDBZNwnvzDo=
Subject key identifier: 75:00:55:BB:7C:D6:93:79:C0:1C:D4:86:E8:4C:5A:77:72:7B:9A:53
Certificate issuer: /CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Certificate serial: 019ECF975650220A9D49D653361411F78D62
Authority key identifier: 0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/dQBVu3zWk3nAHNSG6Exad3J7mlM.roa
Signing time: Tue 16 Jun 2026 08:41:02 +0000
ROA not before: Tue 16 Jun 2026 08:41:02 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219429
IP address blocks: 5.145.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.mft
rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 18 Jun 2026 08:33:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:97:56:50:22:0a:9d:49:d6:53:36:14:11:f7:8d:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0e3f31c9eace6f0a5eccdb8df2b01c7351568686
Validity
Not Before: Jun 16 08:41:02 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=750055bb7cd69379c01cd486e84c5a77727b9a53
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:36:b1:b1:64:89:ea:38:12:b0:5c:4f:31:36:
8c:3d:45:e5:22:ef:56:b1:a4:49:b5:54:65:49:a0:
a7:11:23:5d:57:8c:f3:c7:d6:67:3c:a2:21:5b:c3:
71:ac:3d:81:c3:f1:ca:e9:90:8f:04:69:6b:7a:06:
e6:24:b1:fc:ec:2e:f1:d3:b7:39:7b:dc:4a:27:f2:
72:66:e3:fc:b0:1f:d2:9a:6d:76:23:fd:8d:ea:b3:
75:37:23:af:b9:ec:66:fa:cb:67:0c:90:83:ca:b7:
b6:ae:1e:1b:14:fa:6b:98:7e:cc:e8:e1:7e:31:7d:
4b:6a:aa:b4:04:61:07:86:5d:91:18:67:5f:a5:8f:
65:44:ff:bf:34:b4:e3:b8:e2:9e:dc:22:c4:fc:2f:
ee:d5:f3:3d:94:2b:bc:17:e4:79:cb:58:1f:d8:92:
0d:b1:25:d6:d9:ac:95:48:a5:53:93:96:3d:c1:02:
a7:9d:6e:04:b4:29:b3:26:c8:75:cd:9b:04:59:b4:
01:c3:20:4b:e1:e4:65:79:97:d3:0e:97:b3:59:0b:
1e:4f:27:68:6a:37:57:b6:1e:57:91:96:5d:68:89:
4b:08:fd:13:40:e7:c6:16:81:98:7d:e4:26:c1:fe:
6f:93:6c:0d:13:01:72:29:3c:37:74:97:a6:a0:46:
7c:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:00:55:BB:7C:D6:93:79:C0:1C:D4:86:E8:4C:5A:77:72:7B:9A:53
X509v3 Authority Key Identifier:
keyid:0E:3F:31:C9:EA:CE:6F:0A:5E:CC:DB:8D:F2:B0:1C:73:51:56:86:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Dj8xyerObwpezNuN8rAcc1FWhoY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/dQBVu3zWk3nAHNSG6Exad3J7mlM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/a6dda1-1b87-4ec3-938f-dd5ddd05db0b/1/Dj8xyerObwpezNuN8rAcc1FWhoY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.145.177.0/24
Signature Algorithm: sha256WithRSAEncryption
72:5f:7f:bb:84:10:3c:47:ba:ae:c4:47:fd:18:0d:3e:03:97:
15:45:21:cf:f1:84:26:c4:c2:30:de:31:ed:15:4d:1d:cc:cc:
09:21:93:15:4f:7a:15:ed:1c:5c:98:29:ff:4d:35:18:20:45:
b8:48:a5:d9:2f:55:45:39:eb:15:d9:d6:1d:98:63:ee:f9:84:
ce:77:34:12:f7:ee:90:c6:28:bc:a2:49:1a:f9:ea:2e:6e:21:
8f:dd:39:43:53:66:7a:23:b6:74:e1:4a:54:be:72:49:a4:b1:
b2:a6:86:bd:e3:3c:b2:cb:e9:df:ab:81:3f:d3:2a:00:6f:f6:
20:a4:73:92:df:86:82:e2:b3:42:66:08:b8:e0:87:3c:af:74:
f0:85:75:12:78:bf:8e:21:23:89:f3:3a:f8:ca:ac:00:7b:d5:
23:d7:be:b2:2c:b1:f6:85:c1:33:06:e1:65:cc:7c:ee:07:95:
d6:70:8e:f4:3c:24:59:32:91:39:08:5c:ea:c5:24:5e:4a:ca:
46:da:52:68:2c:40:6c:ef:e2:a4:8c:d9:87:5d:82:24:7e:0b:
e9:56:9b:a6:44:be:83:59:dc:7a:4e:b6:d9:7e:b2:05:f9:bf:
77:27:b4:ea:72:fc:d2:10:d8:d0:91:d6:5d:5c:c9:d7:63:c0:
f4:cf:9b:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jun 17 13:33:20 2026 by rpki-client