Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/qAL5O-pipxzUj56K5glBdeD5jAo.roa
File: qAL5O-pipxzUj56K5glBdeD5jAo.roa (raw, json)
Hash identifier: EtAQwprikRjDTJfaHP1gK3PHCI3uBiHYFJS7GRFbXGA=
Subject key identifier: A8:02:F9:3B:EA:62:A7:1C:D4:8F:9E:8A:E6:09:41:75:E0:F9:8C:0A
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019DD565C43221F2354DF250EC2F95D2915F
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/qAL5O-pipxzUj56K5glBdeD5jAo.roa
Signing time: Tue 28 Apr 2026 18:41:49 +0000
ROA not before: Tue 28 Apr 2026 18:41:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 87.232.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 04 May 2026 05:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d5:65:c4:32:21:f2:35:4d:f2:50:ec:2f:95:d2:91:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Apr 28 18:41:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a802f93bea62a71cd48f9e8ae6094175e0f98c0a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:a9:e9:db:ef:05:1d:30:a3:d5:1f:cd:aa:0d:
36:f1:bc:9a:b4:a3:b9:fe:2a:fb:27:32:36:55:b7:
b8:94:75:a9:93:c2:a9:19:fe:92:3c:8c:71:cf:84:
72:cf:35:b0:be:da:8b:0c:b5:d9:1f:02:13:37:25:
77:73:6b:b6:b9:22:6a:e3:dd:e0:94:88:2d:41:01:
36:22:b2:fa:ef:b2:ff:cc:99:42:d6:23:19:b3:df:
29:f9:d7:05:72:dc:4f:da:c1:ff:d1:2d:b7:56:2c:
12:51:13:75:1c:11:79:3f:3d:9d:66:5f:ae:32:aa:
8f:11:b6:ed:a5:76:c0:d4:e6:14:e8:ca:44:4e:60:
52:f9:57:6b:25:c4:6e:60:81:e0:30:6b:d5:3f:fd:
ef:20:63:f7:cf:f6:e1:a1:64:f2:95:0b:af:91:a6:
55:d3:35:b5:88:75:db:3c:1c:ef:56:b3:90:d0:d2:
8c:0c:7a:34:68:a7:47:c1:68:eb:b6:2c:4e:6d:2e:
5d:02:be:23:ba:44:40:42:a9:93:e2:73:d9:71:bd:
6f:74:ed:40:e0:54:ad:41:b9:41:2a:c2:16:e4:a4:
bb:b2:ff:49:75:78:d0:ed:f4:41:bf:25:c5:7f:3d:
d4:4b:4f:c3:c8:5d:f4:f5:f9:20:45:ac:26:15:19:
94:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:02:F9:3B:EA:62:A7:1C:D4:8F:9E:8A:E6:09:41:75:E0:F9:8C:0A
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/qAL5O-pipxzUj56K5glBdeD5jAo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.96.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:f7:9d:c4:cb:3c:57:42:42:d1:11:3d:45:30:bc:17:25:3a:
3c:a2:97:36:cd:f9:da:87:60:56:3d:7e:5e:cb:29:a1:cb:85:
59:4a:30:ba:42:88:0d:b4:9d:75:96:b8:c3:8e:f2:4f:86:e7:
0c:e6:c4:e6:ab:1f:bb:5c:c1:a8:6a:65:6c:77:64:af:7b:68:
00:06:e7:da:50:8c:d2:d9:76:37:78:8b:e0:4c:14:90:67:b7:
6e:14:ec:13:09:5e:90:c8:5a:c7:32:7e:7f:cf:65:39:8c:8d:
77:44:e5:9a:b8:13:53:43:17:39:79:af:33:5d:65:08:db:e0:
bd:e8:38:0d:17:59:09:f2:5d:ae:a2:76:48:57:27:6a:67:19:
97:85:20:78:37:71:8d:eb:3e:5b:a4:c5:c3:82:85:05:b0:79:
87:49:c4:9b:1b:b0:96:2d:89:0a:e5:f7:44:e9:32:06:5f:7e:
f4:bf:d1:d3:b1:95:6d:55:2d:fa:f8:b8:6f:53:2c:c9:d6:a2:
b5:1d:70:6c:b8:37:1b:0d:f0:84:70:2f:63:08:5b:cd:76:83:
74:3d:14:98:dc:6b:49:ca:85:3e:6a:b9:5f:29:30:9a:e0:79:
d3:05:b7:3f:dd:18:30:ed:d1:2d:6d:92:7f:10:c9:02:a9:9a:
13:cf:7d:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun May 3 14:47:51 2026 by rpki-client