Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/Q-B9indj73Lg6hsM9n7_RDKH62Y.roa
File: Q-B9indj73Lg6hsM9n7_RDKH62Y.roa (raw, json)
Hash identifier: vX34viLIqul0SZtYJw5VNRkDYaWbHGecJ2MEb+4xbng=
Subject key identifier: 43:E0:7D:8A:77:63:EF:72:E0:EA:1B:0C:F6:7E:FF:44:32:87:EB:66
Certificate issuer: /CN=fde577faa235717ae13438e1d52ea4b4e3da5498
Certificate serial: 019EBBBF4AA96D17F0E76D37357D5B9C283C
Authority key identifier: FD:E5:77:FA:A2:35:71:7A:E1:34:38:E1:D5:2E:A4:B4:E3:DA:54:98
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/Q-B9indj73Lg6hsM9n7_RDKH62Y.roa
Signing time: Fri 12 Jun 2026 12:12:16 +0000
ROA not before: Fri 12 Jun 2026 12:12:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214060
IP address blocks: 45.83.70.0/23 maxlen: 23
185.242.202.0/23 maxlen: 23
194.48.92.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.mft
rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 15:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:bf:4a:a9:6d:17:f0:e7:6d:37:35:7d:5b:9c:28:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fde577faa235717ae13438e1d52ea4b4e3da5498
Validity
Not Before: Jun 12 12:12:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43e07d8a7763ef72e0ea1b0cf67eff443287eb66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:2c:9c:2c:45:6e:36:28:2e:af:01:0d:9d:a8:
15:0a:2f:7a:e1:ba:ed:f1:56:6e:0d:0f:d7:8d:dc:
47:b8:08:4f:b1:93:78:b9:6f:54:55:58:09:47:ff:
19:17:35:28:61:64:44:3a:d0:af:7a:fc:4c:a0:7f:
0b:76:ca:c0:8e:c8:39:fd:a7:b5:36:51:29:2a:ad:
0f:14:49:d4:60:56:08:f0:5c:01:59:ef:e9:be:2a:
e3:07:6f:eb:c7:16:a1:4a:0f:a1:43:a7:4a:1e:5d:
4e:df:c6:3d:c7:9a:3e:b2:12:aa:8f:16:9a:21:25:
b2:71:2f:86:eb:84:ea:7a:fe:25:cc:38:a3:ec:d0:
c4:b5:ef:0e:79:74:e1:6b:4d:a8:65:95:66:b0:75:
d2:46:69:21:92:5e:5c:9f:d3:30:f2:13:16:36:24:
e2:63:d1:f8:17:cb:92:6a:0e:9a:14:5b:51:26:22:
cb:3b:25:0d:9f:52:ea:7e:27:64:bc:cf:cc:56:35:
ab:98:47:8a:e3:a8:4d:58:9b:1e:65:03:89:d0:7b:
d8:5f:2a:7b:a8:2e:18:f5:00:f8:55:68:58:99:90:
d4:8b:d4:ea:d5:ba:bf:47:af:82:93:4b:9a:56:db:
91:3c:89:a0:32:1b:76:41:00:91:bb:02:8a:6f:3f:
81:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:E0:7D:8A:77:63:EF:72:E0:EA:1B:0C:F6:7E:FF:44:32:87:EB:66
X509v3 Authority Key Identifier:
keyid:FD:E5:77:FA:A2:35:71:7A:E1:34:38:E1:D5:2E:A4:B4:E3:DA:54:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_eV3-qI1cXrhNDjh1S6ktOPaVJg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/Q-B9indj73Lg6hsM9n7_RDKH62Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/aa6192-0427-41c4-97ad-6ee745156844/1/_eV3-qI1cXrhNDjh1S6ktOPaVJg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.70.0/23
185.242.202.0/23
194.48.92.0/24
Signature Algorithm: sha256WithRSAEncryption
10:3a:03:ae:7a:ea:d8:05:0d:cb:16:88:a3:3a:ea:a9:79:29:
de:89:1b:df:0c:e7:2e:b9:93:50:31:f1:50:ff:d1:ad:56:43:
e5:67:a9:76:6b:b7:84:70:45:25:2f:c9:42:c8:45:43:d1:59:
00:4d:18:0f:cb:fa:67:bc:91:22:a8:2a:54:a8:cf:f8:53:02:
af:04:8a:6b:58:78:c6:17:52:ab:b1:1f:7a:bc:bc:37:a4:c7:
ff:d5:30:3d:52:92:4b:36:67:cc:97:53:f7:6e:24:73:fc:67:
72:6c:02:33:dd:e5:10:64:11:ac:8a:df:9c:16:78:ef:94:2e:
c4:6b:bf:3d:ec:5d:6e:9d:45:ed:2d:2e:2c:e3:cf:b8:54:0d:
c4:83:0b:b2:ad:a5:6c:b7:ca:8e:a3:54:ce:a1:12:24:8b:b9:
c7:a6:f6:ab:e2:93:07:63:a8:2d:b0:47:28:f6:94:2e:d8:8e:
e4:c9:a9:2d:b2:a1:15:98:d2:56:b3:e9:62:76:52:f3:76:62:
54:85:ca:bf:10:75:c5:67:c4:4a:eb:22:24:ea:83:36:bc:41:
95:f5:51:a9:0b:16:c7:16:d6:b6:a6:a6:27:8d:c4:07:f4:32:
4b:19:c6:8c:1c:9b:f6:79:3d:05:7c:07:6b:fc:66:b6:3e:56:
73:34:3a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:42:26 2026 by rpki-client