Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/Qr5qE2EeMQkBy4I0MKCxcpMYmeM.roa
File: Qr5qE2EeMQkBy4I0MKCxcpMYmeM.roa (raw, json)
Hash identifier: RxWJb3HtMuuduyuTqV0pj6pfd7z399ArrKooXX89gEk=
Subject key identifier: 42:BE:6A:13:61:1E:31:09:01:CB:82:34:30:A0:B1:72:93:18:99:E3
Certificate issuer: /CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Certificate serial: 01A0E7D3382244FA8AEB941A81AD28397AAB
Authority key identifier: 13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/Qr5qE2EeMQkBy4I0MKCxcpMYmeM.roa
Signing time: Mon 28 Sep 2026 11:42:54 +0000
ROA not before: Mon 28 Sep 2026 11:42:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218922
IP address blocks: 152.175.0.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 29 Oct 2026 14:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:d3:38:22:44:fa:8a:eb:94:1a:81:ad:28:39:7a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13dad24b6647eb2cfa873989c6d66d174eb4b586
Validity
Not Before: Sep 28 11:42:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42be6a13611e310901cb823430a0b172931899e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:5a:d2:d6:93:ff:bd:ad:89:69:d0:b2:43:8d:
83:45:13:67:b7:95:7c:6e:a8:c3:98:c3:9f:6f:32:
06:9b:60:71:78:db:f8:3c:8d:9a:9c:8b:74:fa:69:
90:23:c5:fb:ae:f3:86:c3:83:0f:67:c6:ec:ff:71:
43:52:e0:fa:80:5b:a7:41:9c:9c:31:d1:6b:58:1e:
d8:e7:7b:0a:aa:3b:c5:f4:57:6f:73:79:af:33:7b:
ab:ab:25:89:67:ac:bd:05:39:26:85:ad:55:85:b4:
bf:1f:cf:5a:34:0b:d7:02:97:bd:f9:50:c0:7a:79:
b2:2d:90:86:56:23:b8:66:8f:81:84:b7:e6:93:81:
90:61:da:b2:bc:07:ba:04:76:f2:02:0b:5d:c1:bb:
3e:11:9b:01:b1:6a:3b:6d:73:96:93:67:f5:3b:60:
e7:56:20:80:23:46:8c:66:9c:99:b0:68:6e:5e:f2:
6b:dc:83:1c:82:09:f8:a3:71:7b:42:2c:98:f7:52:
1d:f7:7d:c6:1f:c1:40:9d:81:d5:93:2c:83:21:91:
84:c4:10:01:a0:b7:72:0a:93:e9:f7:c2:74:fa:4f:
e7:db:35:e3:11:65:b0:e7:76:3c:e7:2d:0d:28:9a:
d9:98:d0:77:97:c4:44:e0:e6:d5:dd:42:a3:3d:5f:
0e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:BE:6A:13:61:1E:31:09:01:CB:82:34:30:A0:B1:72:93:18:99:E3
X509v3 Authority Key Identifier:
keyid:13:DA:D2:4B:66:47:EB:2C:FA:87:39:89:C6:D6:6D:17:4E:B4:B5:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9rSS2ZH6yz6hzmJxtZtF060tYY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/Qr5qE2EeMQkBy4I0MKCxcpMYmeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/fb52d1-2e71-4ac0-a3a3-1aa6fe406a58/1/E9rSS2ZH6yz6hzmJxtZtF060tYY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.175.0.0/19
Signature Algorithm: sha256WithRSAEncryption
72:1b:09:77:c0:60:e1:2d:ed:28:9e:cc:3a:64:fc:e6:94:ba:
f7:c2:24:bf:1f:df:0d:e7:48:94:56:7a:86:d2:5d:38:09:15:
57:df:09:42:55:cc:b0:bf:3d:27:5e:94:e5:28:60:09:b6:38:
34:87:d9:bf:5c:a4:b6:c6:9b:ce:47:c6:1b:bd:11:67:7d:ae:
92:c5:c4:8e:cb:39:de:80:52:bd:6e:c9:8e:69:c1:aa:ec:f2:
12:d7:eb:b9:8f:c0:5a:43:aa:89:5f:c0:bf:74:56:b5:99:25:
5d:69:ab:42:73:b8:aa:d6:1c:5b:1e:80:51:64:5d:8c:cf:86:
3c:45:48:d2:80:19:6d:00:63:93:5d:e9:a2:a1:1d:8a:0c:f2:
e6:ea:54:cb:53:0e:82:d2:4d:bc:87:0e:d3:f5:b9:33:46:05:
1b:bd:48:fd:29:90:71:20:fe:5d:bb:7b:db:19:8d:4d:e1:93:
a2:9c:77:e4:88:99:d3:59:0f:a6:bd:bc:65:44:6e:5f:6d:3d:
5b:1f:a0:53:da:93:0e:1f:eb:bd:b8:3f:df:59:23:a0:5a:92:
97:07:e6:2b:44:06:47:33:82:c1:f9:90:57:06:b4:79:44:33:
33:51:4b:6f:a9:6e:d9:2c:42:46:9d:15:c8:54:e0:9c:dc:56:
14:ed:0c:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 28 18:41:27 2026 by rpki-client