Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/qbkDimEn99v6SQCpbEG4LsJPBNw.roa
File: qbkDimEn99v6SQCpbEG4LsJPBNw.roa (raw, json)
Hash identifier: pw5uUin9oP3Xwi31VoABZSPQBM6wJBcW3tALdkrs1so=
Subject key identifier: A9:B9:03:8A:61:27:F7:DB:FA:49:00:A9:6C:41:B8:2E:C2:4F:04:DC
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039824EC16681139842B2E6C693ACC8CD
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/qbkDimEn99v6SQCpbEG4LsJPBNw.roa
Signing time: Tue 25 Aug 2026 15:20:36 +0000
ROA not before: Tue 25 Aug 2026 15:20:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207459
IP address blocks: 92.249.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:4e:c1:66:81:13:98:42:b2:e6:c6:93:ac:c8:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9b9038a6127f7dbfa4900a96c41b82ec24f04dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:48:3b:ac:fe:a1:e2:a7:4f:15:cd:25:ed:8c:
00:86:6f:21:32:28:ba:ad:b2:5e:f1:c2:ea:86:cf:
8e:96:a6:9c:7c:e8:f4:e1:6f:d5:0c:18:bf:63:b2:
c6:de:93:4c:6d:6f:d4:c9:84:71:29:02:3d:83:c3:
9c:1f:67:20:80:93:79:ce:ae:12:cc:71:17:07:22:
51:a5:09:73:a0:4c:49:30:00:8e:35:d2:23:bb:36:
cd:f5:d9:2b:53:d8:60:a5:0b:03:5b:b4:9f:8a:45:
ce:83:c0:63:27:ec:fc:7b:0a:2f:c7:47:50:de:52:
db:6e:b3:74:c6:04:a3:fd:04:3c:8e:ae:6d:47:22:
04:ed:07:06:6e:82:54:cb:79:d9:16:78:93:34:00:
e7:ff:71:9c:32:7c:98:ca:92:2d:3d:3b:3b:b6:34:
d0:7a:85:79:40:2c:33:e0:3d:af:a5:c2:51:45:f7:
91:6e:06:ff:51:92:6d:da:d5:97:20:f2:49:c4:b6:
64:91:ef:a8:f2:94:10:0b:af:e9:62:52:11:af:30:
e8:6e:12:97:ad:2f:ea:81:bb:69:02:00:ab:f7:85:
de:03:11:a5:43:6a:48:c0:0f:36:15:4a:77:03:cd:
c6:07:c4:0c:a1:f2:25:7d:5d:f8:bc:a0:a8:50:d7:
1e:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B9:03:8A:61:27:F7:DB:FA:49:00:A9:6C:41:B8:2E:C2:4F:04:DC
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/qbkDimEn99v6SQCpbEG4LsJPBNw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.249.63.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:e4:2f:e9:af:eb:db:97:26:47:9a:ce:e7:fd:01:b8:b5:d7:
a8:da:72:1c:8e:04:c4:25:df:00:0c:dc:36:17:e1:80:c6:0a:
5b:7e:98:e1:36:0d:10:4f:b7:e3:9e:3a:f9:1a:69:56:75:25:
5f:6c:58:b6:e8:ed:f4:6d:1b:a6:5f:ed:63:e0:6a:4d:19:97:
6f:0b:56:06:eb:80:2b:1a:71:47:51:97:0a:33:25:c3:c0:f6:
36:71:3d:20:f9:b4:1b:57:29:a1:d4:22:8c:de:41:db:fe:4f:
28:a0:0d:26:d4:a5:0b:5d:ae:cc:5a:48:99:bc:0d:9c:10:b9:
2b:3a:9d:e2:51:3f:7d:3e:62:32:65:1d:06:f8:a4:c9:93:9a:
55:b6:b6:58:a7:2c:d5:11:18:5b:b4:35:95:46:f3:f6:ad:3f:
d4:6f:dc:6a:58:e9:13:49:68:50:8d:dd:5f:90:e3:c2:4e:0f:
da:d7:53:7f:3a:c4:33:81:a6:4c:b8:92:a7:5f:8b:9d:d0:11:
5a:2d:73:1d:25:3e:f9:5a:5d:26:e7:6c:24:10:18:3d:c1:8d:
5b:4d:cb:4f:d9:e4:89:65:4f:65:e4:9d:06:93:1b:6a:65:04:
b5:98:06:30:65:20:da:c7:a1:2a:e2:ed:7f:a2:79:f3:17:e3:
9a:d5:de:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:12 2026 by rpki-client