Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/q2viQQxnb5hv9cHSi6k5fpuWvhk.roa
File: q2viQQxnb5hv9cHSi6k5fpuWvhk.roa (raw, json)
Hash identifier: moDWR3w9AS8vgQ6/NXNmyaldf5yTsoXdPMVWWQQURXY=
Subject key identifier: AB:6B:E2:41:0C:67:6F:98:6F:F5:C1:D2:8B:A9:39:7E:9B:96:BE:19
Certificate issuer: /CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Certificate serial: 019F94FC0CECC4EF95D22ECEAA8578538C80
Authority key identifier: D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/q2viQQxnb5hv9cHSi6k5fpuWvhk.roa
Signing time: Fri 24 Jul 2026 16:36:14 +0000
ROA not before: Fri 24 Jul 2026 16:36:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8244
IP address blocks: 94.142.192.0/23 maxlen: 23
94.142.194.0/23 maxlen: 24
94.142.196.0/23 maxlen: 23
195.230.192.0/22 maxlen: 22
195.230.200.0/21 maxlen: 21
2a01:ac40:2000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 10:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:94:fc:0c:ec:c4:ef:95:d2:2e:ce:aa:85:78:53:8c:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d24adecd84bb1748bd35b99ecea46772e01ec935
Validity
Not Before: Jul 24 16:36:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab6be2410c676f986ff5c1d28ba9397e9b96be19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a4:7d:ec:47:5b:e3:e7:db:7b:31:0f:57:4b:
a4:09:26:82:94:55:5a:11:1a:f1:fd:c1:88:18:2a:
53:f6:25:15:d3:3f:67:5f:93:34:28:f2:e7:7b:63:
e8:a7:cb:78:e9:f9:3e:2b:fc:ec:99:6a:ed:df:9a:
11:aa:1f:73:8d:c4:69:43:96:d4:a6:40:c4:82:c3:
33:a6:e6:94:3b:5e:9d:e0:ac:fb:38:98:e4:d2:02:
1f:71:c7:78:f5:cf:80:9a:69:1b:2b:74:69:a7:f3:
c1:0d:74:c5:60:78:77:e1:f5:2d:b1:67:9d:a9:2e:
c5:91:a3:6f:6f:87:f1:45:12:01:03:42:35:5a:a2:
59:3b:ee:10:48:54:fd:32:8c:8e:5e:e6:e1:ef:c1:
ad:d3:25:2c:42:d8:04:5e:f2:2e:e3:45:82:91:54:
0a:7a:c8:e3:e0:e4:d6:cf:00:36:c2:82:06:67:63:
e4:09:0e:54:69:b0:66:ea:48:d6:4b:4f:e3:c9:9f:
22:b6:bc:11:15:ae:c3:81:1c:90:e8:38:3f:2e:26:
91:6c:48:90:6b:07:00:00:4b:6a:78:ba:23:d0:37:
32:e9:d9:4a:92:85:11:6d:fc:2e:a4:2e:2b:cb:8c:
d1:46:ee:52:e3:5c:df:d2:7a:94:b0:97:54:a3:9e:
7c:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:6B:E2:41:0C:67:6F:98:6F:F5:C1:D2:8B:A9:39:7E:9B:96:BE:19
X509v3 Authority Key Identifier:
keyid:D2:4A:DE:CD:84:BB:17:48:BD:35:B9:9E:CE:A4:67:72:E0:1E:C9:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0krezYS7F0i9NbmezqRncuAeyTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/q2viQQxnb5hv9cHSi6k5fpuWvhk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/63a845-8c09-4d69-a771-48a607bbe25e/1/0krezYS7F0i9NbmezqRncuAeyTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.192.0-94.142.197.255
195.230.192.0/22
195.230.200.0/21
IPv6:
2a01:ac40:2000::/36
Signature Algorithm: sha256WithRSAEncryption
9a:e0:b7:49:86:e8:af:e2:61:35:a4:42:ca:b0:1b:ec:35:d1:
69:2a:d0:db:d4:bd:4e:a9:a3:70:9a:f6:a7:34:d4:e3:16:ab:
2a:45:93:88:1f:02:c3:42:70:78:11:0e:11:d2:75:c7:8f:7f:
59:7f:5b:7f:d4:c1:75:96:b2:eb:7c:0e:ac:35:36:e1:9f:e2:
e4:11:99:73:81:08:33:28:36:cd:7b:6f:7a:e0:e4:5f:4c:34:
9a:8b:f3:38:9e:34:81:24:95:3b:9b:8b:67:f6:65:92:92:4c:
4a:1b:cd:8f:ba:38:ca:0c:bf:b8:8c:3f:71:ff:a4:60:1e:c2:
53:8d:ff:5b:f9:28:16:02:e2:61:e4:0e:26:1d:f1:c0:49:b1:
9f:47:82:49:f0:32:e5:0c:85:73:47:79:48:ab:80:69:6d:18:
9b:c2:a4:d2:53:a5:34:ef:1b:92:f9:65:5f:f5:ff:de:a1:8a:
46:de:92:02:a0:dc:6a:00:2c:d2:bd:99:07:85:2c:af:b2:54:
a8:12:cc:eb:20:29:5b:0b:f4:ab:3a:3e:fb:16:51:f0:93:1c:
8f:2e:fa:d4:1c:8e:b4:91:29:fe:ef:aa:8f:6e:42:7f:b0:8d:
90:36:6e:b2:3f:8d:28:fe:23:a8:cc:a1:9d:c7:00:be:96:ec:
aa:fb:2e:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:26:30 2026 by rpki-client