Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/qu14-hDn8sY3Z5i6g-YF58ALWq0.roa
File: qu14-hDn8sY3Z5i6g-YF58ALWq0.roa (raw, json)
Hash identifier: ntV9cVCjr4aeRy5grKKj7cd2qwcI9FUsdy2PRdPZmGg=
Subject key identifier: AA:ED:78:FA:10:E7:F2:C6:37:67:98:BA:83:E6:05:E7:C0:0B:5A:AD
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019FFB395B3BC56225474B0EF5BBA22C8109
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/qu14-hDn8sY3Z5i6g-YF58ALWq0.roa
Signing time: Thu 13 Aug 2026 13:04:27 +0000
ROA not before: Thu 13 Aug 2026 13:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219331
IP address blocks: 2a0d:d940:201b::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 26 Aug 2026 14:02:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:39:5b:3b:c5:62:25:47:4b:0e:f5:bb:a2:2c:81:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Aug 13 13:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aaed78fa10e7f2c6376798ba83e605e7c00b5aad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:c9:d9:25:18:1b:61:e5:f3:f2:25:f8:65:
5c:c2:41:72:02:8d:46:6b:e7:9f:d4:cc:4e:c4:d7:
01:75:74:9d:c8:af:94:39:6d:12:10:36:82:e3:40:
24:a0:6b:64:15:3f:2f:c8:a0:8d:6e:b0:6f:14:2c:
9c:45:6c:65:d8:fe:63:6a:b7:7f:1b:f4:e2:c4:6f:
b6:7b:da:1c:c7:cc:95:0f:8d:70:82:52:2c:78:60:
f6:e5:16:d5:d7:eb:f4:a4:5c:86:63:6c:d3:79:1a:
fd:87:53:c0:52:4e:c7:f6:8d:8c:86:89:f2:85:d6:
ea:1d:7c:77:e0:cb:b1:96:ec:f4:97:6a:ce:92:ab:
d8:56:6b:be:3a:37:c3:cb:66:70:54:e2:a3:31:5e:
48:7c:2d:dc:b8:3e:d3:80:fa:ee:0f:cb:4b:cb:c1:
36:89:1a:68:84:6b:8d:79:bb:b6:b9:70:f4:20:e3:
4f:82:b3:90:93:10:bf:29:fd:60:6d:ab:58:95:86:
7f:c5:d2:40:7c:e1:ee:36:7d:28:f6:b5:24:e2:a6:
ca:54:af:81:e5:62:74:23:1f:7b:f3:5e:66:27:25:
a3:13:f0:0e:5f:3e:11:85:c1:4d:10:6e:ef:29:90:
fa:af:dc:e5:da:1a:47:6a:f6:40:94:32:9b:84:02:
4f:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:ED:78:FA:10:E7:F2:C6:37:67:98:BA:83:E6:05:E7:C0:0B:5A:AD
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/qu14-hDn8sY3Z5i6g-YF58ALWq0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:201b::/48
Signature Algorithm: sha256WithRSAEncryption
5f:5b:b8:0b:b8:e0:32:72:0a:ed:ca:87:08:2a:9c:e9:ed:64:
ab:56:72:5f:d1:e9:ae:fd:3a:86:58:a7:3d:e0:3d:cb:e2:a6:
1c:4f:b6:9f:08:5d:70:9f:f0:c5:5a:14:e9:ce:fc:90:0d:2e:
8f:e0:20:88:26:6b:19:0f:7a:e2:a8:0a:b2:76:0b:22:b4:20:
ad:f9:3a:8b:0e:c8:15:4a:02:15:05:c5:a5:5e:8e:bb:5c:c5:
c9:6c:bd:bb:00:75:1b:40:44:f5:16:00:74:dc:c6:11:9a:91:
56:a7:9e:0a:82:d0:5f:65:41:f1:e7:14:b4:a0:28:87:9b:85:
e8:b9:36:9b:39:2e:cb:fe:da:1e:b0:c2:9d:ad:ef:00:42:38:
2f:62:79:35:23:be:b4:34:dc:af:0e:93:82:90:53:fa:7d:93:
9e:e9:45:6f:49:36:a8:ab:c9:fc:dc:fe:c6:02:c7:a4:02:d0:
fb:c8:01:55:4e:9e:70:b2:35:c5:c4:00:28:02:38:cd:36:82:
dc:db:f7:eb:3f:5c:7c:2f:6a:66:66:64:a6:07:e9:d5:7a:c8:
ea:73:31:16:26:a9:24:3e:fb:58:f0:18:14:fe:e0:63:88:96:
8a:b5:eb:fa:4c:2a:10:05:6e:c5:f9:30:68:74:05:1f:64:81:
6c:ab:04:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 25 23:01:26 2026 by rpki-client