Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/qouVyJxhq_P9ZA30UCW-EtIWs2s.roa
File: qouVyJxhq_P9ZA30UCW-EtIWs2s.roa (raw, json)
Hash identifier: gYmOx+dvR0MzwYC0jd5gr1A9fGGHpYzfJlX3qUG94dc=
Subject key identifier: AA:8B:95:C8:9C:61:AB:F3:FD:64:0D:F4:50:25:BE:12:D2:16:B3:6B
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019E8DB2DE549F0C72B95E556EF12BF081C8
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/qouVyJxhq_P9ZA30UCW-EtIWs2s.roa
Signing time: Wed 03 Jun 2026 13:36:10 +0000
ROA not before: Wed 03 Jun 2026 13:36:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20724
IP address blocks: 80.244.13.0/24 maxlen: 24
91.227.62.0/24 maxlen: 24
93.95.24.0/24 maxlen: 24
185.244.104.0/24 maxlen: 24
193.104.245.0/24 maxlen: 24
195.182.25.0/24 maxlen: 24
212.46.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 16:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:8d:b2:de:54:9f:0c:72:b9:5e:55:6e:f1:2b:f0:81:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Jun 3 13:36:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa8b95c89c61abf3fd640df45025be12d216b36b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:70:2e:ab:6f:3c:ba:3a:c3:de:8a:d2:19:37:
00:9b:89:74:75:50:2c:ee:f7:ab:79:68:65:f1:2a:
cd:d8:87:ef:92:a8:14:8d:f8:fc:34:2b:20:e4:2f:
43:83:6e:33:2f:53:c7:96:62:6f:52:e9:82:84:d3:
34:bd:b4:73:5a:f8:db:c3:49:09:c7:71:38:93:09:
13:98:96:29:bb:8b:bb:62:5e:fa:82:4e:08:09:6e:
c3:19:a3:76:cc:55:ea:e0:1f:13:c4:eb:ca:ff:a0:
df:de:b6:02:f5:e5:b9:08:87:7a:e1:27:41:b8:72:
61:93:00:4e:57:8e:74:61:d7:92:a8:b5:83:b9:30:
b5:83:45:ca:ad:0f:3c:50:6e:20:38:ee:82:2b:5b:
1a:28:b1:fe:84:39:14:4d:b6:24:00:01:53:75:5c:
93:15:d6:cd:d3:af:37:25:9c:82:e2:e2:67:f6:cc:
48:3c:b8:91:7b:22:c4:8c:ea:4e:8e:04:51:82:75:
ad:ab:2f:7e:f6:f3:b1:a3:3c:c7:8a:48:ff:6c:1e:
f3:99:4b:b6:89:6c:fe:ef:4a:fc:9a:f8:c8:fe:24:
92:30:ec:19:87:37:90:34:9f:cd:4b:e5:12:de:ad:
d2:5c:36:e7:ed:b2:56:72:89:cb:3d:a4:a6:aa:bb:
e8:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:8B:95:C8:9C:61:AB:F3:FD:64:0D:F4:50:25:BE:12:D2:16:B3:6B
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/qouVyJxhq_P9ZA30UCW-EtIWs2s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.244.13.0/24
91.227.62.0/24
93.95.24.0/24
185.244.104.0/24
193.104.245.0/24
195.182.25.0/24
212.46.37.0/24
Signature Algorithm: sha256WithRSAEncryption
95:76:f5:e0:b4:e6:d0:45:d4:9c:b6:a4:5e:87:55:6d:25:69:
d9:b4:0f:0e:6b:b8:60:67:06:95:d9:aa:20:e7:ef:32:cc:65:
8f:e9:59:33:a5:83:d5:83:17:d2:1e:6a:e0:a4:a1:93:52:59:
b4:5e:1c:b9:70:a8:d6:98:c2:98:6a:bb:11:44:74:ae:e8:1e:
b8:36:55:a5:ec:ce:74:8b:d8:b6:c0:8f:5d:8d:c3:5f:03:5c:
46:c0:0c:4c:b2:59:71:18:97:96:49:73:96:bf:f0:12:b8:d8:
b0:2f:fe:bb:0f:63:6b:eb:cf:9e:cd:4f:92:24:18:7d:af:b5:
4f:38:87:9b:5b:2f:40:b4:b4:53:36:0c:ee:65:ac:7e:52:a4:
2d:e1:52:d0:da:07:6c:1d:70:ac:d6:03:08:82:c9:d1:25:ec:
b6:39:cc:a4:78:3b:33:ab:bf:ac:dc:93:ad:6d:0d:69:4f:a0:
08:89:8d:fd:81:26:0f:bb:43:0d:02:22:34:3a:6c:fc:ad:df:
30:19:47:36:70:5c:f0:2f:76:56:44:d6:62:c8:f3:fe:49:4c:
86:d8:6e:69:d5:4c:c2:5d:3e:fc:32:3d:11:5b:8e:e3:8b:1f:
70:a6:bb:56:4e:3e:fd:59:41:b4:63:ef:e0:45:ed:90:22:0d:
9a:22:c4:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 19:05:21 2026 by rpki-client