Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/QrGTzKfz15J7oy9-TP-tD_sLbiI.roa
File: QrGTzKfz15J7oy9-TP-tD_sLbiI.roa (raw, json)
Hash identifier: dXc9fZMDCjGnjiBrDjJUsuNwkskV/mjNM3qDIRtY4OQ=
Subject key identifier: 42:B1:93:CC:A7:F3:D7:92:7B:A3:2F:7E:4C:FF:AD:0F:FB:0B:6E:22
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 01A08AAF95EE9B819F58767645F161D1B65A
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/QrGTzKfz15J7oy9-TP-tD_sLbiI.roa
Signing time: Thu 10 Sep 2026 09:39:17 +0000
ROA not before: Thu 10 Sep 2026 09:39:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 274117
IP address blocks: 89.42.124.0/23 maxlen: 23
89.42.124.0/24 maxlen: 24
89.42.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 12 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8a:af:95:ee:9b:81:9f:58:76:76:45:f1:61:d1:b6:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Sep 10 09:39:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42b193cca7f3d7927ba32f7e4cffad0ffb0b6e22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:84:cb:c0:f8:b9:c1:b2:d1:09:bb:22:f3:b0:b5:
41:04:70:a6:cc:06:f4:3c:38:c2:f9:47:56:f4:4c:
55:fc:1e:95:90:fc:90:30:b8:8d:16:21:29:5b:ec:
d9:04:3b:6f:ec:10:00:fe:12:f2:1f:c0:6e:7a:ee:
dc:51:0c:4b:fe:af:0c:44:05:48:5e:77:44:85:f2:
79:2d:4e:e7:50:7c:6e:23:d2:f2:55:bb:ac:37:5f:
b6:6f:39:1e:5f:b0:b2:47:44:56:ad:12:dc:17:06:
f8:d1:29:ff:50:db:74:74:e9:2c:77:37:b8:d0:dc:
42:b8:ce:9b:5f:5f:88:4b:5e:2c:ca:3a:48:47:e6:
47:f1:02:75:1a:5c:34:5c:2d:7f:30:3d:47:4b:cf:
ad:b4:de:dc:64:fc:a9:24:96:5f:2f:8e:d4:af:48:
21:c1:2a:c8:8a:36:34:f1:2e:14:c0:42:88:93:5f:
82:0b:f7:6e:e5:ac:6b:56:e0:4d:90:d3:c1:ed:50:
af:3e:45:9a:e7:99:35:71:d0:34:3c:17:e3:19:6a:
8f:75:b6:6b:9d:cf:a9:4c:3d:9f:2d:ed:4a:1b:b4:
75:b3:bd:d8:2c:b0:b1:0f:31:6a:43:6d:ab:66:8e:
1d:06:34:09:a4:4b:f2:45:34:aa:8d:37:b0:96:a9:
ed:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B1:93:CC:A7:F3:D7:92:7B:A3:2F:7E:4C:FF:AD:0F:FB:0B:6E:22
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/QrGTzKfz15J7oy9-TP-tD_sLbiI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.124.0/23
Signature Algorithm: sha256WithRSAEncryption
60:ab:93:37:0c:71:04:44:07:75:02:67:00:1b:37:4a:92:11:
65:72:af:fc:2f:d7:e5:79:ab:f8:28:d3:ef:e8:a6:bd:7e:07:
97:83:82:eb:5e:ec:a5:e3:bf:ce:92:75:65:97:3a:73:3e:e9:
c7:b7:6c:89:e3:55:1b:f7:d7:6a:54:16:c9:2e:50:07:d5:22:
bb:43:d5:57:36:b4:cd:71:20:04:4b:d1:e3:98:61:94:cd:bd:
ad:f8:b6:89:13:00:38:72:1c:17:ee:1b:c7:bd:24:a4:8a:a9:
f2:6c:72:35:a4:50:87:37:c0:31:21:e4:96:1f:55:68:0f:cf:
8b:fd:ee:ef:b2:ed:7b:72:81:8b:1b:91:23:c3:5b:47:b1:3b:
09:5e:01:13:73:7f:97:61:96:f1:d5:4b:ef:bb:a8:0e:84:8c:
0c:c0:c2:6d:d4:90:85:62:8c:c3:2f:90:89:31:a8:24:38:85:
b8:a8:d8:94:bf:20:4d:37:75:4e:79:27:c3:20:82:1d:b7:da:
42:e6:31:93:f4:5f:50:48:39:93:63:44:0e:a8:91:ef:3b:34:
b0:f0:c3:d4:61:fe:dc:ac:50:7b:27:1a:3c:86:41:ae:32:10:
fa:28:4b:ff:75:7f:aa:62:d9:a7:2a:71:d2:fb:ba:35:dc:b3:
aa:1f:6e:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 15:47:11 2026 by rpki-client