Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/qp8bK0_zELwwRnea3kYnPZuv5kU.roa
File: qp8bK0_zELwwRnea3kYnPZuv5kU.roa (raw, json)
Hash identifier: KKFbcXLRieVJeInE5UEIj+fyTeLEa9fncQ29NqsfdFw=
Subject key identifier: AA:9F:1B:2B:4F:F3:10:BC:30:46:77:9A:DE:46:27:3D:9B:AF:E6:45
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 01A035C573E845C0C5B34812C35A6763EB6F
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/qp8bK0_zELwwRnea3kYnPZuv5kU.roa
Signing time: Mon 24 Aug 2026 21:55:27 +0000
ROA not before: Mon 24 Aug 2026 21:55:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402447
IP address blocks: 62.108.48.0/24 maxlen: 24
84.19.2.0/24 maxlen: 24
195.191.114.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:35:c5:73:e8:45:c0:c5:b3:48:12:c3:5a:67:63:eb:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Aug 24 21:55:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa9f1b2b4ff310bc3046779ade46273d9bafe645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:06:1a:c2:fa:83:6d:ed:21:23:7c:db:8a:af:
a6:24:f2:50:3f:e8:aa:57:61:39:57:08:24:69:88:
b9:aa:2b:c1:0e:78:34:56:ef:24:5f:6c:12:d8:c0:
12:20:ca:5e:30:e4:f6:ad:a5:cb:eb:84:48:21:b2:
1f:c2:9a:e0:ac:d6:8e:8b:33:4d:b2:8c:f3:1d:9d:
3d:08:27:d7:b4:d9:1f:07:1f:79:37:02:12:39:91:
20:dd:f3:e3:ce:87:96:3b:d5:24:6c:f3:20:64:90:
3d:b2:e3:d2:c8:4e:e7:68:78:50:ee:d4:62:c7:5c:
05:bc:61:96:4b:d5:36:8c:01:d5:d7:12:a2:58:11:
88:4e:8f:13:c7:32:70:4d:c2:ac:d3:fb:e9:6d:93:
ad:66:76:ab:90:bc:ae:5a:c6:43:d7:fe:65:f8:ac:
de:7a:2b:20:4e:32:9b:e6:c1:ca:25:0b:2e:49:9f:
e4:c9:bf:2a:d1:86:47:4c:76:4d:42:23:48:6e:07:
99:32:66:82:86:df:7f:7b:bf:a7:47:bc:4a:1c:e3:
fc:7f:3b:f4:91:e6:5c:8c:37:19:5b:c7:cb:a1:84:
aa:90:6e:aa:a5:f4:85:5c:31:00:36:1a:ae:f7:9a:
2d:84:0f:f0:01:13:6f:1e:94:66:6e:41:a2:d0:c4:
02:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9F:1B:2B:4F:F3:10:BC:30:46:77:9A:DE:46:27:3D:9B:AF:E6:45
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/qp8bK0_zELwwRnea3kYnPZuv5kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.108.48.0/24
84.19.2.0/24
195.191.114.0/23
Signature Algorithm: sha256WithRSAEncryption
30:ec:78:22:2c:50:eb:ad:f5:46:fe:cf:97:a8:f9:75:a0:f0:
42:c7:38:8a:d9:18:3a:83:f1:6d:03:12:6d:04:e7:4d:9c:11:
cb:bc:ea:74:2c:dc:da:17:ae:46:cd:0d:80:bd:8f:79:87:ab:
f8:24:4b:47:16:27:af:1b:5d:38:5a:75:a5:b8:b8:61:f2:c3:
46:6c:43:cb:15:b8:76:bd:3b:e9:8a:f7:d6:dc:42:54:a5:27:
09:97:0f:f4:17:97:0f:6f:02:af:2c:f1:f8:34:b3:47:e0:e7:
96:0b:a8:71:2c:92:e1:fa:0c:f7:ca:9f:13:58:29:1d:08:ad:
90:e9:48:e7:f4:4d:71:9a:c0:cd:0f:e2:a1:11:e5:01:07:91:
b5:93:96:4a:e4:bf:38:65:5c:2c:1f:20:be:16:e4:97:dd:5e:
cc:a3:35:c8:39:b7:0f:68:71:e5:0b:8a:3d:d8:f3:ac:b4:34:
b0:51:b0:af:93:b5:a3:2a:45:77:81:57:ca:47:94:63:27:31:
5f:a7:16:4d:6b:b3:95:70:ed:8b:26:0a:6f:a4:a6:ec:69:c0:
f3:78:b1:2d:96:c3:84:9d:9e:11:0b:52:b3:7f:48:6f:08:b8:
72:97:a1:d6:6b:dc:1d:41:05:09:fc:0f:1a:df:1f:99:72:8f:
16:16:ce:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:09:57 2026 by rpki-client