Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qJthVF9HuB7h_GJWzvrsMdoGhAY.roa
File: qJthVF9HuB7h_GJWzvrsMdoGhAY.roa (raw, json)
Hash identifier: lg//GMoXhD+OPMHl/+m46j40WqWcni8silm4r0SfEZ4=
Subject key identifier: A8:9B:61:54:5F:47:B8:1E:E1:FC:62:56:CE:FA:EC:31:DA:06:84:06
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019FE175572D771D2777CC10C532A6001DF9
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qJthVF9HuB7h_GJWzvrsMdoGhAY.roa
Signing time: Sat 08 Aug 2026 12:59:51 +0000
ROA not before: Sat 08 Aug 2026 12:59:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219429
IP address blocks: 192.124.178.0/24 maxlen: 24
194.87.156.0/23 maxlen: 23
194.87.192.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e1:75:57:2d:77:1d:27:77:cc:10:c5:32:a6:00:1d:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Aug 8 12:59:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a89b61545f47b81ee1fc6256cefaec31da068406
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:be:c1:fe:3b:b5:7c:bc:55:92:84:23:26:f0:
09:60:71:f4:e0:d6:da:60:f1:ac:35:46:5e:0e:77:
b2:e6:49:a4:08:1e:1d:6c:bb:c6:f5:70:de:80:26:
ed:ae:13:10:f1:9c:4a:6c:80:eb:72:b8:9d:54:94:
26:21:7a:51:5f:b1:b2:b6:0a:04:25:79:0f:2a:50:
8c:d9:ed:02:cc:ff:bb:bd:d7:b1:96:29:28:0e:52:
59:f3:de:a2:ed:d6:ec:65:0a:60:f2:14:3a:6a:e0:
0d:2d:09:9f:81:f2:b2:3a:d5:57:97:2e:9c:f0:e6:
da:b4:e2:32:c7:ad:b3:c4:cc:04:c0:1e:3c:9d:2c:
ac:1f:22:10:25:b3:77:ff:ca:d1:c3:db:80:7a:91:
fc:cf:65:a2:c8:90:31:5b:fe:4e:94:1d:98:f4:ac:
b1:4f:b2:49:51:33:f6:eb:21:d4:90:e7:60:12:29:
91:5b:06:41:b2:d3:e2:e6:a4:3d:93:cc:da:63:f2:
47:e3:3f:e1:ae:e8:97:a3:45:11:62:46:33:4f:1d:
66:ac:64:fb:12:c6:cd:9c:75:81:32:3a:6b:eb:8c:
f2:34:ac:01:50:39:0a:12:b9:bc:ab:93:5f:93:e2:
bc:c3:87:2d:13:96:c3:8d:b5:db:f8:d2:13:7b:00:
20:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9B:61:54:5F:47:B8:1E:E1:FC:62:56:CE:FA:EC:31:DA:06:84:06
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qJthVF9HuB7h_GJWzvrsMdoGhAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.124.178.0/24
194.87.156.0/23
194.87.192.0/22
Signature Algorithm: sha256WithRSAEncryption
95:f3:57:ce:b7:ca:93:0c:7d:56:c2:b3:35:4e:03:17:59:a5:
8b:86:84:8f:8b:0b:f6:90:12:65:97:fb:12:94:2f:11:0e:42:
b5:36:0c:25:ec:82:6d:ce:77:3f:76:f6:75:b3:50:af:f4:aa:
de:6f:22:a2:33:13:39:51:14:fe:fa:a7:bb:88:8c:2c:5c:6b:
b0:16:96:94:1f:66:3f:b9:da:bb:87:42:ad:8d:f4:5a:b7:d3:
27:a6:e2:26:55:a8:69:7f:da:33:8b:4f:54:63:62:dd:b2:da:
47:f2:57:6a:c1:7f:71:1b:79:48:68:96:22:10:ff:67:e1:e6:
96:6a:38:4f:68:a5:b7:ba:2a:04:29:ad:9f:0e:6f:f0:29:36:
72:d5:3d:4c:e0:b9:f7:fd:e9:10:0a:30:e2:06:fc:4a:45:24:
be:ef:6d:37:1b:d3:70:af:6a:06:3b:de:98:a9:63:6b:c2:73:
07:c2:53:b5:49:58:e2:c9:48:90:b4:d5:9d:4b:11:ad:04:ad:
8b:47:8a:61:47:89:60:ab:f1:73:67:24:b9:48:62:75:bb:68:
70:67:5d:15:9b:3a:37:76:ca:f8:1f:41:6f:b7:bb:7d:ee:3c:
0e:ed:06:14:46:55:01:df:d4:36:03:51:e5:56:89:7c:f2:f1:
2a:cc:09:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 01:09:02 2026 by rpki-client