Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/QtncJqkEgM9pkif2DGDuaV87Vhc.roa
File: QtncJqkEgM9pkif2DGDuaV87Vhc.roa (raw, json)
Hash identifier: kbejMGw8GQAhGvEYV7Lc9g5XklZ9RaG+4r/fnMC1uZk=
Subject key identifier: 42:D9:DC:26:A9:04:80:CF:69:92:27:F6:0C:60:EE:69:5F:3B:56:17
Certificate issuer: /CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Certificate serial: 01A07C56D45BA30C04B14CBBAF25BB45192D
Authority key identifier: 68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/QtncJqkEgM9pkif2DGDuaV87Vhc.roa
Signing time: Mon 07 Sep 2026 14:47:40 +0000
ROA not before: Mon 07 Sep 2026 14:47:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 275001
IP address blocks: 89.42.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7c:56:d4:5b:a3:0c:04:b1:4c:bb:af:25:bb:45:19:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68ddbef7f1cdd8ad127160f20ea0a3f6b73fa4a2
Validity
Not Before: Sep 7 14:47:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42d9dc26a90480cf699227f60c60ee695f3b5617
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:0e:ad:fe:26:62:9d:76:23:c0:78:37:42:6e:
d4:08:00:d4:2d:a0:e5:c6:70:71:89:81:21:8b:6e:
48:66:89:56:e1:43:c9:9e:93:04:15:ba:c6:14:ff:
32:31:b7:61:46:bd:22:b9:01:c9:46:c9:eb:5d:40:
70:f1:82:a7:7a:48:35:11:69:71:37:b6:67:16:5a:
5e:6d:bb:05:e8:2a:e6:6c:e4:b3:13:a3:ff:90:1c:
3e:70:cd:4d:97:7d:36:53:4d:e6:66:4c:af:52:3e:
4d:13:70:ae:3e:f7:a2:f5:81:42:01:88:ba:bd:ca:
ee:46:05:2d:08:2f:ee:e1:68:9b:37:2e:1e:41:e1:
c2:46:22:9f:b2:61:42:6d:4c:98:88:fd:f5:b9:e2:
f8:d1:8d:bd:5e:c3:00:36:0a:bb:de:c2:27:c0:08:
c2:58:b1:b7:22:e6:c0:7a:35:d1:6a:22:9b:a1:c7:
88:cc:ef:4c:d4:e5:25:27:a9:52:20:df:88:4a:1d:
9c:7b:25:b4:6a:6e:13:7e:66:ff:bb:08:d7:27:cf:
8f:f6:fb:59:51:df:e8:97:3d:8c:91:1f:9b:7f:f0:
93:e8:b0:c8:49:e9:b7:17:16:14:46:b6:ed:86:ab:
f4:62:4a:d1:40:77:3e:04:de:b2:5e:fe:2d:1b:8e:
c2:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:D9:DC:26:A9:04:80:CF:69:92:27:F6:0C:60:EE:69:5F:3B:56:17
X509v3 Authority Key Identifier:
keyid:68:DD:BE:F7:F1:CD:D8:AD:12:71:60:F2:0E:A0:A3:F6:B7:3F:A4:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aN2-9_HN2K0ScWDyDqCj9rc_pKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/QtncJqkEgM9pkif2DGDuaV87Vhc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f033f1-2f5d-46d1-9194-63f301889486/1/aN2-9_HN2K0ScWDyDqCj9rc_pKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.127.0/24
Signature Algorithm: sha256WithRSAEncryption
ae:2d:e1:fd:fe:d2:69:d2:96:38:da:7a:1b:24:38:d0:2a:f7:
e8:3a:a8:ea:87:dc:d1:fa:da:cf:b2:25:99:fe:af:59:e2:b0:
29:b5:7a:b6:c2:f6:40:f5:57:32:50:19:9f:2b:12:a9:96:86:
b0:f7:ed:ba:fb:7a:b6:6e:cf:1a:bc:32:e4:86:da:0d:70:47:
61:05:98:5c:6f:96:29:7b:91:f2:61:1b:8e:ef:62:e2:07:57:
61:c8:3f:ab:e8:22:5d:67:80:66:3a:07:cf:42:4b:2b:2c:e7:
14:3b:62:8f:2c:71:af:50:e2:75:ad:15:44:ec:63:22:e4:a2:
fe:05:b8:6d:cd:9c:ae:51:f4:e9:ff:a4:72:f5:37:ec:c2:e2:
a2:5c:f6:10:9d:0b:93:93:2c:72:3e:cf:47:0f:7f:fc:2b:8d:
92:e9:3f:aa:5b:0a:9e:f6:8b:13:71:24:59:19:ae:17:c4:82:
7f:8c:54:ff:01:d0:fa:1b:a2:7e:f1:b2:aa:5c:2c:0a:8b:bd:
b1:87:ba:92:24:88:95:18:34:c7:e4:31:73:ad:f3:2c:0a:21:
a1:99:9a:56:dd:5b:69:aa:30:9e:6f:b4:07:33:c2:ce:a2:a8:
56:7b:c1:27:4c:48:00:d0:f3:5a:fc:b0:71:3a:49:80:65:a6:
3f:f2:19:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 10:01:15 2026 by rpki-client