Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qIJsXL8VHiasWZ67Xrgqia4q0oU.roa
File: qIJsXL8VHiasWZ67Xrgqia4q0oU.roa (raw, json)
Hash identifier: Zj0shQ02W5KAzhhAifC59Vgw4vdolxlrreV+njlJxZw=
Subject key identifier: A8:82:6C:5C:BF:15:1E:26:AC:59:9E:BB:5E:B8:2A:89:AE:2A:D2:85
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A067274297D4364E09CB84917E3ACF7664
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qIJsXL8VHiasWZ67Xrgqia4q0oU.roa
Signing time: Thu 03 Sep 2026 12:03:41 +0000
ROA not before: Thu 03 Sep 2026 12:03:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42794
IP address blocks: 31.13.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:14:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:27:42:97:d4:36:4e:09:cb:84:91:7e:3a:cf:76:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 3 12:03:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8826c5cbf151e26ac599ebb5eb82a89ae2ad285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:14:b1:ad:65:cb:a3:05:63:21:3c:e0:3a:14:
d8:13:37:a9:a6:b8:6e:9e:d9:84:94:36:da:16:fe:
5a:ee:e1:fa:46:7d:5c:f1:74:d7:96:0e:1a:d2:93:
de:91:62:3c:dc:00:f0:07:29:37:83:16:af:d3:c2:
33:a4:aa:7d:97:00:74:96:a3:1b:c8:a1:11:3d:96:
ea:6b:be:7a:16:0a:27:40:9c:b0:92:9d:f5:ff:e9:
14:dd:c5:03:01:3f:75:1b:04:0f:14:cf:8a:5d:f2:
7f:b6:28:9e:c9:e4:a8:4a:f3:fa:77:48:ea:f6:aa:
06:20:7b:18:13:2b:b3:3a:e3:f3:7b:9f:54:98:56:
7e:d9:cd:eb:d0:44:f2:30:27:73:a1:0b:38:7c:21:
63:84:3e:b2:a7:e3:6e:19:d9:d1:21:8f:31:57:98:
62:a6:95:e8:81:50:66:c9:31:9b:97:c7:ee:31:bd:
fa:81:02:ef:c4:ab:19:be:53:0c:ca:38:9a:38:21:
78:70:d9:4a:26:11:fb:74:14:f1:c1:2e:25:b4:dc:
78:1d:5a:b9:d8:70:68:7a:c3:86:3e:a6:13:e5:ad:
27:1c:8b:7b:7c:78:7e:d7:a9:64:b6:ed:21:af:ad:
e6:c5:27:57:eb:e8:03:06:4d:fd:63:58:d6:26:05:
d5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:82:6C:5C:BF:15:1E:26:AC:59:9E:BB:5E:B8:2A:89:AE:2A:D2:85
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qIJsXL8VHiasWZ67Xrgqia4q0oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.13.198.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:71:96:18:76:78:ae:8e:1f:b4:bc:dd:35:75:2c:af:ec:c8:
a8:a0:13:23:d2:d8:bd:73:58:0c:08:57:a2:34:fc:42:34:35:
01:cc:29:95:f7:a9:af:4d:2e:ca:5f:2f:db:d4:f0:8a:35:52:
1d:ce:14:2f:d5:32:e3:60:7e:9d:0b:87:c9:60:4b:4f:a7:c1:
fd:8b:2b:fb:1f:fd:bb:0c:64:e8:b4:42:62:3f:44:37:f7:22:
0a:80:9e:16:8a:3f:64:81:77:69:f3:0b:66:8b:cd:db:eb:9a:
cc:1b:33:4f:f0:c7:62:d6:fe:68:eb:9f:4a:42:94:35:7c:ba:
78:51:ff:55:8d:03:fa:bf:9b:82:4e:e4:94:02:b9:40:c8:85:
3c:4d:e7:c0:34:c4:d8:54:61:c4:d7:9c:5b:f4:f7:ab:5a:20:
81:23:d1:f9:b7:8a:58:34:75:06:9a:67:01:67:77:46:28:32:
a9:e9:bd:11:a4:1f:11:00:75:ca:99:e5:de:46:1b:a5:12:8c:
aa:9b:b6:08:42:ee:7f:8f:ec:9b:b8:5e:dd:44:cd:52:49:4c:
ea:79:4d:34:79:63:66:f6:05:0c:68:c7:0d:da:37:73:47:c3:
90:e3:64:41:3a:9f:1a:9b:87:47:51:c5:c3:95:fe:81:82:7a:
e4:12:07:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 18:57:24 2026 by rpki-client