Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/qqv2qmJ_Ao84XQwMC9xI9DBqFg0.roa
File: qqv2qmJ_Ao84XQwMC9xI9DBqFg0.roa (raw, json)
Hash identifier: gfT6+qlJPG9uj8DRpvaYMIWe05R1cNASdvCT2z6WTw0=
Subject key identifier: AA:AB:F6:AA:62:7F:02:8F:38:5D:0C:0C:0B:DC:48:F4:30:6A:16:0D
Certificate issuer: /CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Certificate serial: 019F23691E43FADB142B925815E9C2DE55BD
Authority key identifier: 86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/qqv2qmJ_Ao84XQwMC9xI9DBqFg0.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215254
IP address blocks: 193.5.63.0/24 maxlen: 24
193.247.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.mft
rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 14:46:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:1e:43:fa:db:14:2b:92:58:15:e9:c2:de:55:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86068896c09dddf3c1b7349560d0de4c40bd9f8f
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aaabf6aa627f028f385d0c0c0bdc48f4306a160d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:a6:08:b8:40:6b:62:24:58:25:83:51:1e:a1:
f9:76:1c:6c:35:5d:e3:e8:4c:03:b9:99:15:e7:f2:
c5:8a:77:93:a1:0a:9f:93:1f:63:aa:a9:c7:b5:d1:
ff:69:26:c1:9d:95:de:8d:3f:b6:48:99:5d:63:b5:
e6:3d:2b:dd:18:c9:39:1c:c0:f9:1e:c1:25:77:14:
f9:fd:de:93:36:27:f9:6f:45:85:e7:ec:ce:7b:31:
d8:2c:65:0f:cc:ca:fa:1f:13:15:18:b3:ea:24:ed:
d9:6d:19:66:cc:dd:f2:08:e1:fa:cd:9e:11:99:32:
d5:8f:03:01:b4:79:96:b6:f3:04:88:17:f4:f7:26:
a4:39:49:33:8c:76:95:5a:f2:e5:c2:6c:34:2d:ab:
f3:97:46:21:c8:32:39:99:c9:0d:17:64:5c:f8:3c:
33:1f:48:2f:93:93:30:01:24:cb:e8:d0:c8:66:b7:
26:6c:e9:fb:7f:c7:27:de:ee:93:a0:85:77:e1:37:
11:f3:33:7c:88:f9:4a:64:f3:8d:17:50:8a:80:11:
48:6e:5c:e6:da:e2:6d:89:07:d4:7b:79:40:a9:7a:
5c:5d:24:07:18:77:b7:e8:15:ce:f3:66:33:dd:30:
c1:bc:51:86:51:93:6d:09:e3:f6:27:ea:2f:3b:1c:
5c:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:AB:F6:AA:62:7F:02:8F:38:5D:0C:0C:0B:DC:48:F4:30:6A:16:0D
X509v3 Authority Key Identifier:
keyid:86:06:88:96:C0:9D:DD:F3:C1:B7:34:95:60:D0:DE:4C:40:BD:9F:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hgaIlsCd3fPBtzSVYNDeTEC9n48.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/qqv2qmJ_Ao84XQwMC9xI9DBqFg0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/29/c8c6f6-595c-45b1-a76e-bd192676c9bb/1/hgaIlsCd3fPBtzSVYNDeTEC9n48.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.5.63.0/24
193.247.90.0/24
Signature Algorithm: sha256WithRSAEncryption
07:6b:ce:b1:68:d9:ad:9a:28:e8:2c:a3:72:3a:f3:f8:d9:10:
ab:06:bb:3c:af:13:08:08:7e:c8:40:3d:b8:53:8a:58:0d:c8:
25:cd:c0:7c:58:06:97:ac:c3:36:d2:fc:8f:12:ed:91:c7:a8:
c8:64:82:8a:cf:40:50:77:fc:15:89:e4:55:71:2a:cb:5c:e7:
40:2a:d6:76:da:0c:70:db:0a:8d:ac:99:e8:3e:1e:b1:e0:e6:
47:e7:a5:16:b0:86:b5:01:f5:0b:41:62:8f:3c:90:d7:f7:f3:
b1:73:7f:5b:c4:b0:63:70:a6:7a:df:79:b9:21:f2:d7:8e:f1:
c9:d0:e1:1e:95:24:71:48:76:02:d7:af:6b:25:fb:bc:09:86:
6b:cc:35:95:ad:67:40:34:44:1c:06:a0:dc:cd:fb:89:e3:d7:
aa:91:38:d7:6e:28:0c:7c:b0:42:64:2b:b0:36:7d:1c:84:5d:
ca:34:cc:b7:a6:04:1b:96:8c:38:ff:b2:d9:42:55:14:45:a0:
9d:02:be:60:58:8f:f6:c1:fd:54:f4:b9:16:82:c6:2d:21:ef:
d9:81:76:51:86:27:da:f5:c8:32:f3:7a:1c:9d:37:01:9b:17:
b2:38:a1:fd:67:bd:a3:1c:d0:37:f1:c0:fc:71:9e:5a:ab:8b:
63:bd:6a:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 6 19:57:32 2026 by rpki-client