Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/qR_EeezWFCPCT7yS3YotmHi1U-8.roa
File: qR_EeezWFCPCT7yS3YotmHi1U-8.roa (raw, json)
Hash identifier: Bq96CSZJdHMqj8GDPwJjcNN91UyIT9CdiAOchD6OW2E=
Subject key identifier: A9:1F:C4:79:EC:D6:14:23:C2:4F:BC:92:DD:8A:2D:98:78:B5:53:EF
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 01A107081011A2192B54F6B22F5D469507C2
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/qR_EeezWFCPCT7yS3YotmHi1U-8.roa
Signing time: Sun 04 Oct 2026 13:08:51 +0000
ROA not before: Sun 04 Oct 2026 13:08:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214716
IP address blocks: 213.214.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 23:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:07:08:10:11:a2:19:2b:54:f6:b2:2f:5d:46:95:07:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Oct 4 13:08:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a91fc479ecd61423c24fbc92dd8a2d9878b553ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:8d:c9:5a:25:14:b6:ca:e1:e4:59:99:2f:cf:
d7:27:e6:6b:6b:54:36:51:a2:ef:c3:03:d7:a8:0a:
19:23:2d:37:5a:8b:9e:c8:5e:aa:68:f8:ec:45:25:
32:45:39:65:9c:23:dd:a8:1e:9f:5b:56:dc:5c:a3:
a2:f4:33:40:0a:3c:2d:83:19:14:17:42:2c:2b:94:
e5:02:12:f6:d0:60:85:b7:ba:93:e6:67:78:40:5c:
42:39:ef:6f:07:0a:c6:75:c9:f4:7f:35:e2:b4:76:
2a:31:a4:bd:6f:97:88:49:03:7c:4e:54:bc:f0:8b:
91:e7:ff:50:28:60:6b:47:64:bb:d8:84:61:ae:fe:
d3:1f:2a:22:3c:2c:53:d3:40:5b:b3:fc:cc:50:6b:
8e:7d:9d:77:87:d4:96:72:ee:d5:0b:7e:fc:06:cc:
08:c2:f4:79:5c:65:ce:a6:59:68:2e:66:ff:aa:bc:
8d:cc:0c:48:a5:81:16:d3:c1:d2:ed:6c:d8:21:30:
1e:59:5d:b3:79:2c:bf:d9:fe:e9:76:b9:de:ac:20:
7a:ae:0c:a1:00:c5:64:86:20:89:d3:0f:b4:fb:39:
5d:f4:95:ce:5b:28:54:f7:d5:ac:40:49:e5:db:c6:
1a:d8:be:6c:4d:13:aa:94:c0:56:7a:ac:94:bf:00:
e9:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1F:C4:79:EC:D6:14:23:C2:4F:BC:92:DD:8A:2D:98:78:B5:53:EF
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/qR_EeezWFCPCT7yS3YotmHi1U-8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.214.99.0/24
Signature Algorithm: sha256WithRSAEncryption
3d:ae:00:54:46:96:60:e3:10:c1:c6:8f:4c:68:0a:ab:b6:f0:
99:d0:d1:51:c8:7d:aa:17:6e:a0:c5:c1:22:06:56:30:b5:01:
eb:35:12:1d:ef:10:4a:18:72:83:85:a9:3c:2d:d9:f2:77:b5:
5e:6d:28:3a:06:a0:be:74:e5:7a:25:ab:9c:a0:9a:a4:41:1b:
07:4b:a7:5b:5b:30:b5:76:9b:e9:0d:d5:56:8c:b4:cc:23:58:
1a:71:73:d5:35:db:2a:60:d0:6d:9c:d3:18:da:78:03:bb:4d:
27:69:c3:7c:ed:93:e7:e5:24:2b:e9:60:f9:fa:fd:4c:3e:7a:
d2:2f:ec:b4:cb:bd:97:e1:c8:fe:c6:e7:be:79:45:5a:34:ca:
97:56:33:c4:1c:94:43:21:98:d4:7e:c7:8a:df:5e:e8:6b:cb:
8a:76:7f:2e:65:c0:f6:08:33:0b:11:ed:41:75:f0:52:41:5c:
93:ad:01:75:3a:43:0f:24:9d:09:64:6c:42:53:93:f1:94:a4:
19:25:5b:6a:4a:f1:9b:f6:0e:e6:14:ec:a1:54:bc:5e:a2:d1:
60:df:e2:78:a1:3d:8b:30:8a:ea:6e:70:9e:70:df:0b:d6:39:
dc:f7:a2:db:0d:90:d2:05:cf:d8:74:11:3f:9c:41:ae:1e:a2:
26:98:d8:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 20 08:18:04 2026 by rpki-client