Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/qhwPSRQZpuWYmnbozu2-3J2TtFI.roa
File: qhwPSRQZpuWYmnbozu2-3J2TtFI.roa (raw, json)
Hash identifier: URVVWloy5UQULvMurGerAAQ5T8zElW2Jct3g/oO1r4Y=
Subject key identifier: AA:1C:0F:49:14:19:A6:E5:98:9A:76:E8:CE:ED:BE:DC:9D:93:B4:52
Certificate issuer: /CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Certificate serial: 01A0F6A0595E856DBD4B14F55D7D6ADA9F1E
Authority key identifier: EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/qhwPSRQZpuWYmnbozu2-3J2TtFI.roa
Signing time: Thu 01 Oct 2026 08:41:38 +0000
ROA not before: Thu 01 Oct 2026 08:41:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19905
IP address blocks: 79.120.220.0/24 maxlen: 24
81.0.120.0/24 maxlen: 24
82.141.139.0/24 maxlen: 24
91.82.105.0/24 maxlen: 24
195.184.27.0/24 maxlen: 24
212.24.176.0/24 maxlen: 24
213.253.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.mft
rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 14:28:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f6:a0:59:5e:85:6d:bd:4b:14:f5:5d:7d:6a:da:9f:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea3669eae876d2f23b9f8527e88a8702dbd423e3
Validity
Not Before: Oct 1 08:41:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa1c0f491419a6e5989a76e8ceedbedc9d93b452
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:62:bd:b4:33:60:af:85:3e:bc:db:fb:40:b4:
b8:0a:e3:3e:d6:98:f9:28:d6:e2:df:45:1e:aa:dc:
43:b1:f6:db:5d:9a:a0:48:20:63:0a:2e:ac:b2:fe:
47:fa:92:4f:c8:76:29:89:35:7d:85:35:a1:34:3f:
33:d3:d4:cf:77:5a:d9:8d:67:f4:b1:d9:97:b5:d7:
8a:b7:f7:53:ca:87:94:fc:4b:74:48:62:bc:14:a5:
4d:8d:31:20:28:4a:cf:70:e6:a7:4c:29:62:a4:48:
02:65:5c:07:af:35:b3:12:76:3c:40:4c:8d:05:90:
26:2c:1e:d8:bf:85:e8:3a:1c:de:1a:af:1d:12:15:
8f:2a:56:5e:85:f2:b3:e2:c5:b4:79:4f:c6:d2:2e:
14:dd:8a:e5:e0:53:4d:f6:97:bf:65:3e:27:3b:0b:
45:2c:10:b1:c2:ef:05:13:da:02:ce:91:83:9b:f6:
b6:6e:ec:dd:c2:21:f1:1f:ae:93:83:e8:78:7f:ff:
bb:7f:cf:67:19:55:3d:25:63:37:dc:b1:66:3a:eb:
50:bb:70:7c:56:ad:46:66:25:d1:ec:ca:e0:27:c4:
f3:52:81:02:9d:b1:6b:f7:4d:6a:36:ab:8d:ec:6f:
a9:08:79:83:b3:84:8f:94:f6:91:bb:e9:4b:6a:30:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:1C:0F:49:14:19:A6:E5:98:9A:76:E8:CE:ED:BE:DC:9D:93:B4:52
X509v3 Authority Key Identifier:
keyid:EA:36:69:EA:E8:76:D2:F2:3B:9F:85:27:E8:8A:87:02:DB:D4:23:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6jZp6uh20vI7n4Un6IqHAtvUI-M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/qhwPSRQZpuWYmnbozu2-3J2TtFI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/45e35a-847b-42e2-ae27-3ace1eff3a24/1/6jZp6uh20vI7n4Un6IqHAtvUI-M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.120.220.0/24
81.0.120.0/24
82.141.139.0/24
91.82.105.0/24
195.184.27.0/24
212.24.176.0/24
213.253.215.0/24
Signature Algorithm: sha256WithRSAEncryption
01:b4:8b:ac:46:48:48:a8:16:1d:c2:f9:2b:91:02:b5:cc:dc:
65:1a:bd:c4:ff:2a:63:ad:55:04:4f:d3:2d:c8:29:56:9c:f6:
4c:00:0e:81:00:fb:d5:2d:93:ff:f6:0e:98:f8:48:27:6a:b5:
1c:4f:39:a8:ed:92:c1:f1:66:7c:c8:c0:4d:a1:6e:9f:d6:f8:
69:3a:7b:76:c2:03:80:50:ba:72:1e:9f:0f:91:d5:94:a5:53:
b8:eb:19:94:58:3c:a5:cf:d8:fd:fd:b8:35:f7:a9:e2:9f:e5:
6c:8b:8b:1d:92:8f:12:b3:ef:d2:0f:c9:e9:98:59:72:75:e8:
f1:51:33:cf:3a:a5:12:50:90:36:2d:4c:c7:d2:b7:e4:35:99:
65:67:e7:e1:35:2f:62:cd:55:b5:37:29:79:a2:b9:02:2f:89:
be:f8:3c:64:66:89:85:24:aa:09:50:6f:c7:26:24:02:1f:9f:
96:69:60:fd:79:4d:22:0f:3c:dc:ac:11:e7:0a:74:4d:be:e1:
be:f8:50:63:e1:87:67:fe:fb:c0:f8:26:4f:52:d3:e6:00:61:
7e:86:36:b7:27:c6:46:dc:96:62:1c:ef:6f:b9:20:fd:a2:e3:
8a:9e:0e:ce:d1:6d:38:28:7e:82:96:f1:65:3b:3d:54:45:60:
63:04:22:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 20:57:59 2026 by rpki-client