Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/DqpxxMPjiSQ9laP_ySepffCvlk8.roa
File: DqpxxMPjiSQ9laP_ySepffCvlk8.roa (raw, json)
Hash identifier: aa8qqy86lAASIZeHc6KLaXJ1QeLKbYEq/R9968YDwxw=
Subject key identifier: 0E:AA:71:C4:C3:E3:89:24:3D:95:A3:FF:C9:27:A9:7D:F0:AF:96:4F
Certificate issuer: /CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Certificate serial: 01A0805AF81F8D1175FA9487D5C9F7DE3F2A
Authority key identifier: 69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/DqpxxMPjiSQ9laP_ySepffCvlk8.roa
Signing time: Tue 08 Sep 2026 09:30:40 +0000
ROA not before: Tue 08 Sep 2026 09:30:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51101
IP address blocks: 88.135.186.0/24 maxlen: 24
178.217.112.0/21 maxlen: 24
185.230.224.0/22 maxlen: 24
195.43.66.0/23 maxlen: 24
2a0c:3100::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 06:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:80:5a:f8:1f:8d:11:75:fa:94:87:d5:c9:f7:de:3f:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=694e515cc5be4e27e9d3d13e5e1c11dc7529274b
Validity
Not Before: Sep 8 09:30:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0eaa71c4c3e389243d95a3ffc927a97df0af964f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:b5:1c:e9:f2:40:c1:3d:8e:20:0c:67:7e:5f:
d2:5c:c5:4b:ff:6e:f3:2d:ec:e5:ad:79:be:ae:9d:
1c:07:67:d6:3a:33:d1:4f:ca:f9:b2:ec:4f:78:b1:
c8:27:19:18:6f:00:fa:2b:27:7f:ba:86:fe:f2:d4:
b4:a4:84:32:e4:a7:0f:3b:dc:c0:59:13:14:27:5f:
36:08:7d:52:7a:04:0b:16:35:03:5d:a1:70:30:7b:
54:4e:7b:be:11:05:ad:f3:7d:87:7a:e7:97:ab:18:
aa:d6:62:e1:1d:18:2e:fc:ca:e4:f7:b1:44:cb:10:
86:d7:83:48:6c:88:91:02:1e:fe:06:e1:eb:2e:0f:
38:7e:3a:f3:cf:30:46:3e:06:31:0c:67:df:c4:29:
0a:27:12:36:42:1a:1e:92:98:f6:d8:71:8d:e4:a0:
ca:ff:51:1f:20:61:30:c5:26:5e:b8:3e:63:23:1e:
f2:b4:6b:3f:8b:a0:9d:a7:0d:e7:bf:a2:15:1a:9d:
4a:d6:eb:05:6e:6d:38:e3:6f:c3:90:11:81:52:86:
0f:18:14:df:4b:46:c5:fe:6f:7d:1c:45:e8:6c:29:
49:5a:e1:4e:96:9e:d4:22:7a:1a:a4:17:89:d1:67:
36:14:ab:a7:78:81:74:6e:a2:59:42:03:c0:04:e6:
6e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:AA:71:C4:C3:E3:89:24:3D:95:A3:FF:C9:27:A9:7D:F0:AF:96:4F
X509v3 Authority Key Identifier:
keyid:69:4E:51:5C:C5:BE:4E:27:E9:D3:D1:3E:5E:1C:11:DC:75:29:27:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aU5RXMW-Tifp09E-XhwR3HUpJ0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/DqpxxMPjiSQ9laP_ySepffCvlk8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/795620-2003-4785-999f-51c77cc49146/1/aU5RXMW-Tifp09E-XhwR3HUpJ0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.135.186.0/24
178.217.112.0/21
185.230.224.0/22
195.43.66.0/23
IPv6:
2a0c:3100::/29
Signature Algorithm: sha256WithRSAEncryption
56:09:f1:c6:88:af:69:94:af:6f:d3:4a:3e:89:1e:aa:34:46:
d6:de:a8:93:6b:36:16:07:d3:ea:94:cf:ba:e0:6a:ee:c5:e1:
12:a4:96:1a:2b:23:5f:99:fd:09:6d:01:b3:03:61:69:c3:0c:
f4:61:18:1f:fe:42:1e:17:3e:0f:50:cf:4c:8f:d8:2e:c2:b9:
cb:c8:35:d6:57:9e:07:ac:a1:4b:d0:c6:e9:59:5c:0d:fb:3f:
86:98:10:80:2f:6b:18:a5:c5:8b:95:6c:31:bf:5d:47:5b:d5:
6f:83:b3:13:a4:66:84:37:0c:79:27:dc:2b:21:6b:af:44:15:
84:ee:a8:36:67:b3:51:84:00:c8:9b:34:26:7a:03:6a:cf:bf:
90:f3:ab:0a:b3:bb:9b:d8:c3:6b:a8:51:dd:41:17:1d:00:5b:
f2:b5:ec:d2:6d:af:9f:33:c3:a6:b1:1d:52:18:dc:f8:b6:ae:
a9:35:9f:25:23:bb:ca:fe:06:e1:17:67:1f:2a:7d:24:e7:49:
86:b1:63:b3:c0:d7:a7:fd:e3:d6:1c:8f:d4:19:49:1c:f7:b0:
70:da:04:33:f7:b8:ab:ab:fb:32:44:17:96:34:70:87:e7:88:
da:57:6b:0e:eb:bc:17:6f:03:0e:3f:c5:e2:6d:a6:74:a3:db:
05:5b:9d:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 15:29:44 2026 by rpki-client