Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/QiwnNNOVeGs7cGV74UrLTMRIryk.roa
File: QiwnNNOVeGs7cGV74UrLTMRIryk.roa (raw, json)
Hash identifier: LxMeRxrO9SVWS/nhHbMWcxGVg8DoiI2RkXKJ+Tb5EHM=
Subject key identifier: 42:2C:27:34:D3:95:78:6B:3B:70:65:7B:E1:4A:CB:4C:C4:48:AF:29
Certificate issuer: /CN=78883b618b6b006571059f1cf3a11fca5a875e36
Certificate serial: 01A0A57CB019F06BE1070607835656C61288
Authority key identifier: 78:88:3B:61:8B:6B:00:65:71:05:9F:1C:F3:A1:1F:CA:5A:87:5E:36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eIg7YYtrAGVxBZ8c86EfylqHXjY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/QiwnNNOVeGs7cGV74UrLTMRIryk.roa
Signing time: Tue 15 Sep 2026 14:33:27 +0000
ROA not before: Tue 15 Sep 2026 14:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50628
IP address blocks: 185.173.96.0/22 maxlen: 22
2a0b:4700::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.mft
rsync://rpki.ripe.net/repository/DEFAULT/eIg7YYtrAGVxBZ8c86EfylqHXjY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 02:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a5:7c:b0:19:f0:6b:e1:07:06:07:83:56:56:c6:12:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=78883b618b6b006571059f1cf3a11fca5a875e36
Validity
Not Before: Sep 15 14:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=422c2734d395786b3b70657be14acb4cc448af29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:bc:ef:f6:1a:29:36:41:f0:a7:51:58:8d:ac:
67:d8:26:d7:2b:d1:f1:a4:61:0a:b7:3c:e0:3b:ad:
39:ad:11:e9:cf:53:4d:79:1a:33:37:96:5f:58:83:
4e:77:fe:15:c7:14:06:1f:9b:38:bc:67:6d:7f:4f:
57:d9:cb:63:9a:70:30:0d:c9:4a:78:01:a3:64:bb:
ab:66:92:aa:1e:61:6f:af:73:39:aa:69:0e:1e:0a:
95:0e:1a:ce:ff:7b:a0:5b:b8:06:59:bb:37:ba:4f:
b3:2b:70:fa:9b:90:a2:31:c8:e9:68:7c:91:8b:d6:
e6:55:45:3b:1a:6a:2b:ce:18:c3:cd:64:56:dd:3a:
6b:78:c7:3c:a3:a4:f9:26:17:0d:1c:af:01:27:76:
68:fd:31:42:3f:1a:67:cb:9a:ca:96:09:c6:b6:ca:
34:2a:22:b8:62:78:7c:63:b0:52:e7:8c:86:63:29:
56:c4:f7:fc:59:7d:ba:ec:87:01:b3:78:21:90:3c:
38:fd:b8:9c:93:98:c8:d8:6f:09:c0:0f:23:bd:13:
f4:2c:f2:eb:22:a6:3d:78:02:20:bb:32:a3:8c:0c:
1d:f5:52:11:04:30:81:fb:bb:16:78:94:e8:7f:0f:
bc:23:bf:56:f5:6e:4d:7c:68:52:52:70:ed:c7:3d:
6b:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2C:27:34:D3:95:78:6B:3B:70:65:7B:E1:4A:CB:4C:C4:48:AF:29
X509v3 Authority Key Identifier:
keyid:78:88:3B:61:8B:6B:00:65:71:05:9F:1C:F3:A1:1F:CA:5A:87:5E:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eIg7YYtrAGVxBZ8c86EfylqHXjY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/QiwnNNOVeGs7cGV74UrLTMRIryk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/b70300-19ab-47ed-9471-f64c1aab614a/1/eIg7YYtrAGVxBZ8c86EfylqHXjY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.173.96.0/22
IPv6:
2a0b:4700::/29
Signature Algorithm: sha256WithRSAEncryption
4c:23:6c:10:f0:b0:48:23:0f:54:2a:2e:8e:f5:cd:13:83:ce:
93:5c:c9:b6:c0:7e:87:15:ca:90:74:13:4e:c9:13:09:a0:c3:
4b:89:4a:c9:2f:74:51:4e:cf:e6:82:bd:a0:f2:52:6e:a8:1f:
4f:ba:c9:1a:07:d6:06:76:8f:77:e1:c2:20:ef:07:3d:ec:a7:
4e:50:12:31:d2:89:02:f0:82:8d:52:06:65:a3:91:d4:36:5f:
9d:f0:f6:8c:75:e8:31:0c:d2:fe:9b:6b:e8:a8:46:55:75:06:
c1:ad:44:71:9d:e7:37:37:1c:0f:56:44:1a:30:20:92:20:36:
64:91:69:ee:fd:4b:4a:53:a6:f0:61:e2:c3:c7:4c:6b:d3:58:
c9:b0:de:8f:c1:08:3a:cb:95:f7:30:a4:89:87:d6:a0:2c:bf:
13:4a:98:33:e2:5f:12:28:47:34:15:35:8a:ca:0c:bd:1e:5f:
83:fa:d8:d3:13:bf:c4:0d:61:b1:0f:67:42:e6:bd:33:70:db:
da:d2:5c:3d:f5:59:f3:c2:3e:ed:19:28:82:88:3b:0a:3d:4a:
1e:54:68:ef:f7:74:f2:91:c4:7d:a9:69:64:c2:3f:57:a9:97:
10:f3:f7:d5:25:8c:6c:a1:c0:3c:98:eb:f6:f9:38:3a:be:b4:
7f:58:03:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 10:18:53 2026 by rpki-client