Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/1-qkqvwRQTgG1xf7HZtZ-QtlNeBQ.roa
File: 1-qkqvwRQTgG1xf7HZtZ-QtlNeBQ.roa (raw, json)
Hash identifier: uAnzzs6q7U6un+U0t3+PFFv4SIJ/S56dCg4WUcRKDUE=
Subject key identifier: FA:A9:2A:BF:04:50:4E:01:B5:C5:FE:C7:66:D6:7E:42:D9:4D:78:14
Certificate issuer: /CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Certificate serial: 01A03F8D6ABBBB6F7E9BD775D277234FD557
Authority key identifier: 63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/1-qkqvwRQTgG1xf7HZtZ-QtlNeBQ.roa
Signing time: Wed 26 Aug 2026 19:30:27 +0000
ROA not before: Wed 26 Aug 2026 19:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219017
IP address blocks: 195.206.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 06 Sep 2026 01:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3f:8d:6a:bb:bb:6f:7e:9b:d7:75:d2:77:23:4f:d5:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63b842254bbd6bf33e09d05a458f00a0484cf16f
Validity
Not Before: Aug 26 19:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=faa92abf04504e01b5c5fec766d67e42d94d7814
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:57:7d:77:6f:de:a6:45:96:c1:18:43:29:01:
80:31:e5:91:df:30:d8:3e:3b:29:c1:93:87:cb:9f:
89:05:53:2b:38:6a:6a:3d:88:cb:8e:dd:2a:0c:a2:
3d:64:9e:d1:dd:b6:f2:a2:af:b5:85:80:ad:f9:29:
ac:e3:8e:82:0e:f9:40:75:c5:07:f9:f6:52:d3:c4:
c4:06:46:24:e3:15:45:12:3a:ff:b3:f3:f7:fd:2a:
23:6e:98:76:a6:f3:fe:86:7f:01:05:84:0a:fc:ba:
a8:b6:b6:4f:e0:00:1c:a8:3c:3d:19:77:7b:db:fc:
91:9a:c0:ac:5b:09:7a:fe:6f:23:eb:00:e2:ca:2d:
20:7b:c3:61:ec:0e:11:a8:12:21:01:43:cd:79:69:
2f:01:2f:b9:a3:a1:21:c5:f3:cf:6d:51:ec:31:ce:
48:fa:8c:92:61:f3:5f:a3:d4:b4:21:53:ee:1e:ef:
aa:70:6a:c0:af:cf:3a:82:95:c8:cd:1c:39:4f:e9:
b4:3f:d8:a5:20:5f:a0:0d:f9:81:9e:a8:99:9d:5d:
aa:02:8d:e8:96:62:57:fe:7e:38:ef:93:5f:12:b8:
53:80:b8:ab:fc:65:dc:09:a8:d7:bf:23:82:2b:33:
c6:57:3b:d8:37:c7:ee:f7:a7:da:c4:bd:af:26:90:
ed:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A9:2A:BF:04:50:4E:01:B5:C5:FE:C7:66:D6:7E:42:D9:4D:78:14
X509v3 Authority Key Identifier:
keyid:63:B8:42:25:4B:BD:6B:F3:3E:09:D0:5A:45:8F:00:A0:48:4C:F1:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/1-qkqvwRQTgG1xf7HZtZ-QtlNeBQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/bdd1e7-b79a-4c21-9ba9-f157c3294d40/1/Y7hCJUu9a_M-CdBaRY8AoEhM8W8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.206.242.0/24
Signature Algorithm: sha256WithRSAEncryption
ed:db:7c:14:57:db:6c:10:46:b0:b0:b5:0f:b5:cc:a6:e0:b4:
4b:0a:0c:07:bd:04:ff:38:6d:ef:a0:30:0e:ab:3b:3d:77:48:
ee:06:81:a9:82:68:ef:0e:e3:35:d0:1c:19:f6:a3:bb:33:2d:
fb:88:6e:72:3d:67:21:85:e6:46:34:a2:08:b1:1d:6c:34:48:
f2:7c:c1:7f:b0:d0:a7:b4:ad:92:2b:d7:52:b6:8d:53:75:77:
ef:65:da:f1:25:63:d4:d4:13:18:da:92:a9:73:b6:b4:c3:79:
28:a6:f2:a2:07:24:79:f0:0d:55:e4:c1:f1:e7:e8:8f:fa:fe:
c8:8a:ba:92:eb:40:db:9e:38:f1:56:c4:d1:bd:cf:c7:39:eb:
90:27:0e:41:7b:71:54:95:17:cd:3d:03:94:1b:37:54:0c:a8:
cf:31:18:ee:41:e6:35:b9:dc:ab:24:e9:62:73:b5:70:e4:8f:
32:71:ed:97:66:94:89:e8:3b:7a:d1:49:d2:b9:4f:16:b4:ed:
14:d5:53:96:92:6a:6a:13:cc:5e:45:bb:29:73:b6:5e:16:42:
cb:bd:a2:01:f1:e2:2c:9f:bc:33:e6:4a:1b:2a:93:7c:ad:af:
4e:ac:b8:21:f1:4d:96:77:d5:ab:3c:97:6b:f1:cd:69:a9:ed:
08:63:1f:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 09:24:51 2026 by rpki-client