Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QlwYCsTN4202x9Em4QYTkxXWSgI.roa
File: QlwYCsTN4202x9Em4QYTkxXWSgI.roa (raw, json)
Hash identifier: /loK8H8DSSLGslj3/sbniVQabr32sBdo00jkPAbD//E=
Subject key identifier: 42:5C:18:0A:C4:CD:E3:6D:36:C7:D1:26:E1:06:13:93:15:D6:4A:02
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FDD7222D10FEB21483E38610ACB7D66A6
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QlwYCsTN4202x9Em4QYTkxXWSgI.roa
Signing time: Fri 07 Aug 2026 18:17:52 +0000
ROA not before: Fri 07 Aug 2026 18:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219210
IP address blocks: 89.106.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 20:01:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:dd:72:22:d1:0f:eb:21:48:3e:38:61:0a:cb:7d:66:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 7 18:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=425c180ac4cde36d36c7d126e106139315d64a02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:06:07:ed:1e:54:82:d5:3f:0c:33:f9:0e:bd:
a2:8b:e2:e1:da:b6:4b:ea:ff:1f:52:d2:00:6f:91:
a3:5b:ca:c9:d6:37:90:b9:37:a1:07:f5:95:f7:90:
61:fc:91:1c:ce:40:c3:a0:e6:67:1c:68:0b:28:67:
62:b2:ad:bb:72:55:4e:87:97:8c:59:9f:1e:1c:fc:
0d:05:c0:79:7e:c5:2a:ef:28:76:74:23:6a:a9:e2:
6e:d9:e8:12:b4:c5:2c:a4:14:61:99:8a:fd:4d:cd:
5a:dc:0d:17:62:d5:3f:0f:15:cc:ab:c7:8d:79:42:
08:f3:8d:b7:14:e2:41:17:24:a6:fe:31:4b:ff:ad:
72:29:24:30:50:c2:2f:93:12:d4:e2:55:d5:07:47:
13:94:a3:13:25:b8:e7:e7:03:60:f4:49:fe:fe:09:
e7:3b:b3:e4:76:04:7e:14:32:e1:11:1b:5a:1b:2a:
b0:0e:0c:22:5d:3c:b2:ff:4d:af:c4:39:f4:4b:fd:
4e:78:95:f7:2f:21:d5:d2:aa:8e:22:ef:ae:45:2d:
05:50:4b:87:0f:91:6e:56:d5:87:2f:d2:ca:74:6d:
8c:8e:e0:fc:65:fa:59:c4:e2:7f:07:12:b9:1b:6a:
ff:fe:73:85:2b:fb:0d:b1:d5:19:8c:89:dd:bf:72:
5e:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5C:18:0A:C4:CD:E3:6D:36:C7:D1:26:E1:06:13:93:15:D6:4A:02
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QlwYCsTN4202x9Em4QYTkxXWSgI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.106.68.0/24
Signature Algorithm: sha256WithRSAEncryption
af:1b:0b:5b:79:9e:b1:a2:c5:0d:d4:b7:48:05:50:ff:c1:dd:
ad:d1:bd:c7:c0:bb:66:a0:87:00:34:b9:e5:6f:42:17:27:00:
80:b0:42:b0:63:ba:c4:3b:4e:fe:60:ed:b0:9b:5a:47:09:a0:
22:bd:28:94:be:b2:b2:43:c7:5c:09:24:cd:1d:be:27:d4:8b:
0f:53:bf:fc:35:58:b8:92:ea:ef:d9:ab:fe:42:60:31:d3:49:
3d:20:ff:61:12:db:c7:19:90:7c:23:c8:17:61:46:2b:c0:76:
9b:f3:71:a6:d0:98:7b:51:b7:b8:5c:12:91:bc:6c:ff:d8:1c:
42:02:4a:52:eb:56:4f:dd:cd:a6:46:52:e4:98:00:1c:9d:d5:
1a:bc:87:5f:f1:9f:a9:c2:f4:18:79:d5:77:d8:89:07:46:29:
cb:d0:e0:ae:08:2a:05:b0:3a:3c:48:e3:76:fc:89:75:a8:c0:
23:15:c3:c1:85:51:95:00:06:28:12:01:02:9c:e7:6f:a9:53:
64:37:31:19:a1:81:af:e1:28:ea:a1:d1:49:fd:d0:a0:f6:de:
2c:72:d4:32:89:83:10:8e:fa:95:2a:68:44:68:ff:19:2d:30:
2b:af:6c:bb:40:ff:9e:a7:d8:44:ff:9c:51:a4:b6:3f:84:84:
4a:6a:7a:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 00:12:40 2026 by rpki-client