Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/qqyR3hUW4RVQOh7m3pJ6P_G8Ep0.roa
File: qqyR3hUW4RVQOh7m3pJ6P_G8Ep0.roa (raw, json)
Hash identifier: 8V9NFuwXmktR7ZgDvgFuj2Gcj8dqVdQlHweOXe+IvlA=
Subject key identifier: AA:AC:91:DE:15:16:E1:15:50:3A:1E:E6:DE:92:7A:3F:F1:BC:12:9D
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 019F5A1E68FE0D33854ADD3044AEE0D6EC08
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/qqyR3hUW4RVQOh7m3pJ6P_G8Ep0.roa
Signing time: Mon 13 Jul 2026 06:16:10 +0000
ROA not before: Mon 13 Jul 2026 06:16:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401434
IP address blocks: 109.111.240.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5a:1e:68:fe:0d:33:85:4a:dd:30:44:ae:e0:d6:ec:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Jul 13 06:16:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aaac91de1516e115503a1ee6de927a3ff1bc129d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:49:f7:fd:7e:e1:57:d3:55:c9:d7:cf:76:aa:
0d:34:99:b4:6e:c4:7b:87:79:19:f0:42:6c:ac:6a:
7a:a4:2e:13:c7:9d:7a:57:bd:fd:ac:7a:4a:4f:31:
64:68:d8:7c:6e:41:34:1f:81:4f:b2:be:b4:49:4b:
ed:51:49:00:0f:64:40:c0:a9:4c:d6:4d:d0:94:5d:
a6:90:59:d1:7f:e0:7a:a2:53:1c:59:44:e6:83:ec:
fb:d3:02:1a:34:77:80:b2:4b:f0:5c:4d:c2:35:33:
1e:e6:7f:91:4d:33:ee:e2:26:c7:a4:e4:2a:a3:8a:
b8:b7:b9:54:29:cc:2a:97:12:f8:a9:c9:d2:79:31:
50:69:c4:95:1b:29:f1:6e:90:11:f3:bf:1a:b1:68:
eb:dc:af:c6:57:42:07:df:68:11:31:41:bb:d2:a6:
c0:c0:71:e1:a2:3a:e1:1b:66:ab:6f:20:e7:36:f7:
6b:a2:79:77:bc:a1:85:a3:c1:7b:4e:57:f3:6f:bc:
bf:98:06:13:23:3c:3e:e5:1e:10:fb:9c:30:84:fc:
82:d1:ec:81:a3:0a:5c:bb:5d:3d:1a:8f:44:19:45:
25:e1:55:ea:17:da:63:a0:02:05:bb:75:1f:43:4e:
9f:51:bd:3c:89:14:e1:84:42:2d:29:68:d6:1c:eb:
78:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AC:91:DE:15:16:E1:15:50:3A:1E:E6:DE:92:7A:3F:F1:BC:12:9D
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/qqyR3hUW4RVQOh7m3pJ6P_G8Ep0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.111.240.0/24
Signature Algorithm: sha256WithRSAEncryption
29:45:93:e5:04:ef:84:15:d6:67:f4:e9:e0:89:0f:18:11:54:
1b:06:10:14:6f:25:1f:ef:26:cd:82:c9:e6:d2:27:45:c8:c4:
fd:71:cf:d9:10:64:3b:ab:50:af:78:23:45:9a:44:73:7d:18:
d0:96:f3:51:6c:53:f8:c3:17:1f:0d:fb:f5:3e:0b:df:c9:2f:
77:7c:8e:7d:c2:93:4e:e1:2a:79:0c:db:dc:ae:77:7a:ae:30:
05:35:3e:94:16:da:7f:2a:8f:b9:6d:21:69:a9:22:b1:f0:2f:
36:72:86:c9:d6:59:f5:3c:19:c9:12:0b:7c:7c:45:05:fb:72:
21:7c:9e:24:de:bf:86:37:36:50:38:53:7c:9c:ba:a2:5e:21:
38:a3:a6:74:15:ee:b9:0d:a0:b4:ab:e8:a4:6a:61:31:bb:2b:
30:ae:b6:ad:39:52:6d:44:ba:0f:81:e7:71:bf:70:d4:35:3d:
13:50:26:68:d1:87:ca:8b:f4:cd:81:fb:2d:fd:63:19:5f:39:
85:d1:88:5e:5b:f4:f8:da:62:e0:86:ab:5e:12:5e:4d:ef:f6:
27:e5:9b:ab:74:c5:89:1d:bf:1f:ef:9b:a0:75:b8:e3:50:09:
d7:0e:a8:0f:c7:1f:22:b6:57:3c:b1:82:65:74:83:bc:8a:0f:
9c:39:c5:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 00:44:20 2026 by rpki-client