Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qf0u8PoRq2lQ546g7_SlY2a80uU.roa
File: qf0u8PoRq2lQ546g7_SlY2a80uU.roa (raw, json)
Hash identifier: tch/jL0oUUeyBY2eHd1A2GkA2GAIBAnlNvqqboc4phQ=
Subject key identifier: A9:FD:2E:F0:FA:11:AB:69:50:E7:8E:A0:EF:F4:A5:63:66:BC:D2:E5
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F13E75BB2145DBF6E540ED5B1BCE5C125
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qf0u8PoRq2lQ546g7_SlY2a80uU.roa
Signing time: Mon 29 Jun 2026 15:02:37 +0000
ROA not before: Mon 29 Jun 2026 15:02:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205043
IP address blocks: 89.144.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 16 Jul 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:13:e7:5b:b2:14:5d:bf:6e:54:0e:d5:b1:bc:e5:c1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 29 15:02:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9fd2ef0fa11ab6950e78ea0eff4a56366bcd2e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:15:1a:bd:b5:f3:1d:bd:33:18:7e:4a:5b:a7:
fe:45:a6:32:61:c5:f3:d1:ba:04:1f:e6:3a:ca:53:
23:72:f1:9f:0e:c2:c9:eb:15:20:a0:00:c3:3b:f4:
8a:01:68:40:75:44:89:2f:7e:ac:1b:b5:fd:2a:c5:
b0:98:16:97:e5:82:37:2b:f7:51:29:16:fb:dd:b8:
dd:85:19:b1:e7:94:c5:ba:81:65:3d:8b:eb:93:75:
2e:1f:63:49:a9:1b:3d:92:36:15:d2:54:64:7d:55:
c4:bd:ad:9f:e7:6e:4a:30:2e:e2:6f:01:93:a1:ae:
d1:2c:c6:29:fe:ed:dd:de:cd:f4:48:3e:04:b3:72:
22:c9:0a:3f:d2:8e:3d:d7:68:07:dd:91:9a:c8:f2:
75:66:cb:54:9b:9b:45:51:b8:47:bd:00:8f:0f:9f:
4b:6a:94:e7:20:e4:dc:77:f4:55:15:1b:55:d1:17:
06:b7:18:03:9e:a3:3f:fc:25:ef:17:87:21:f5:1d:
9e:19:49:5a:b1:5a:1e:32:c9:5f:30:1d:49:bf:e5:
be:ed:04:9f:65:d7:fd:25:9d:ad:9a:e6:bc:12:ab:
cb:09:ae:12:fa:1c:31:c0:09:aa:69:73:1e:ea:88:
4c:12:81:db:2d:01:80:91:cb:34:6d:f3:cb:0c:fc:
a8:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FD:2E:F0:FA:11:AB:69:50:E7:8E:A0:EF:F4:A5:63:66:BC:D2:E5
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qf0u8PoRq2lQ546g7_SlY2a80uU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.144.54.0/24
Signature Algorithm: sha256WithRSAEncryption
e2:8a:7b:57:e9:c1:6e:1c:21:38:d4:d2:18:66:b7:9b:68:0c:
a3:87:f0:f6:a4:31:47:c7:dc:cc:ca:e7:3f:4a:ba:48:fd:59:
f4:ff:fc:c7:f0:dc:10:0d:20:c0:61:cf:2a:0b:da:d6:e7:ce:
ab:21:0b:15:24:6d:2d:3d:43:7d:a4:8c:0f:27:7f:cf:48:b5:
88:e0:3d:4e:5f:90:26:f9:ac:33:08:eb:ce:6c:6a:6d:ea:0d:
9a:40:b9:89:7c:29:4b:68:d9:59:0a:05:61:9b:a4:ec:e9:77:
d2:04:f3:bf:c3:c2:32:f0:dc:29:2c:ba:4e:19:68:0a:22:d3:
f1:90:eb:b0:d3:6b:e8:d1:da:51:fa:1a:b9:93:08:ce:5e:34:
ae:20:5d:ff:77:b3:11:6c:74:d3:31:82:9d:39:7a:e0:b0:2c:
5f:9b:86:bc:60:2a:76:eb:cf:ef:d3:66:25:d7:6e:54:cf:2c:
ac:0e:54:19:cc:2e:8f:49:a7:70:62:40:39:36:a2:0d:30:11:
30:a2:f9:83:eb:1d:6e:4c:da:0f:45:8b:2b:75:20:56:58:96:
75:4b:84:7b:18:62:fb:0c:85:6c:24:30:67:d2:16:9f:63:33:
fb:86:66:91:cc:ed:7d:4d:74:f2:d3:57:90:91:11:54:37:40:
c7:6a:da:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 15 13:40:26 2026 by rpki-client