Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/qk2Tj0mMtvR8XTMxl6E1e56018s.roa
File: qk2Tj0mMtvR8XTMxl6E1e56018s.roa (raw, json)
Hash identifier: DHamHOqlUnlHtwtp1lU7UNtnwIyGs5AMYubnw7efw3s=
Subject key identifier: AA:4D:93:8F:49:8C:B6:F4:7C:5D:33:31:97:A1:35:7B:9E:B4:D7:CB
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 01A068346BD3E92963FEE0697EC17F000042
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/qk2Tj0mMtvR8XTMxl6E1e56018s.roa
Signing time: Thu 03 Sep 2026 16:57:41 +0000
ROA not before: Thu 03 Sep 2026 16:57:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 269800
IP address blocks: 77.246.242.0/24 maxlen: 24
91.242.68.0/24 maxlen: 24
91.242.69.0/24 maxlen: 24
91.242.82.0/24 maxlen: 24
91.242.124.0/24 maxlen: 24
92.249.25.0/24 maxlen: 24
95.141.251.0/24 maxlen: 24
147.78.20.0/24 maxlen: 24
147.78.21.0/24 maxlen: 24
185.51.120.0/24 maxlen: 24
185.147.48.0/24 maxlen: 24
193.221.211.0/24 maxlen: 24
194.50.206.0/24 maxlen: 24
195.88.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:68:34:6b:d3:e9:29:63:fe:e0:69:7e:c1:7f:00:00:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Sep 3 16:57:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa4d938f498cb6f47c5d333197a1357b9eb4d7cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:8e:34:8b:50:da:8c:d6:5a:fb:4b:62:20:69:
74:4f:e1:1c:9a:b3:18:62:3b:20:b5:b3:4b:6c:9c:
0e:02:d9:5f:6d:9f:a9:4f:54:7a:64:0f:ea:15:36:
bf:66:d2:7a:7f:65:24:0d:4e:d0:13:bb:3d:06:79:
13:02:e4:9e:dc:ab:8d:1d:e9:e0:a1:06:5b:02:c8:
66:6f:53:f3:17:98:c9:22:1e:40:28:c0:f6:33:7a:
d8:f6:5d:2f:fa:5b:65:06:1c:d8:66:bf:c6:cd:f3:
4c:72:f2:7f:b8:eb:7d:fa:c2:9d:86:ff:99:5c:25:
f4:30:b2:7a:06:12:6b:5a:4a:4a:a2:98:3e:60:7a:
db:5b:c0:49:8a:ae:07:6e:c2:63:18:0c:68:a5:6d:
20:8e:d0:90:01:80:3c:59:99:99:c7:36:36:17:d3:
d0:fc:83:0b:34:63:cb:59:13:32:94:f1:f4:5a:f0:
a8:f1:4f:e3:02:48:ec:31:46:f1:eb:f7:64:bf:20:
1e:58:db:3c:2a:72:03:b2:a3:bd:04:fc:0b:a1:c6:
b3:e1:16:33:83:55:59:78:6a:fe:fe:6a:e0:7e:0a:
da:d2:03:21:b3:6c:fb:97:0c:71:d9:43:26:fd:40:
a9:ee:65:d0:72:f7:ea:63:b0:37:0f:b7:4d:65:a4:
13:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4D:93:8F:49:8C:B6:F4:7C:5D:33:31:97:A1:35:7B:9E:B4:D7:CB
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/qk2Tj0mMtvR8XTMxl6E1e56018s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.242.0/24
91.242.68.0/23
91.242.82.0/24
91.242.124.0/24
92.249.25.0/24
95.141.251.0/24
147.78.20.0/23
185.51.120.0/24
185.147.48.0/24
193.221.211.0/24
194.50.206.0/24
195.88.146.0/24
Signature Algorithm: sha256WithRSAEncryption
83:00:6b:0f:b3:f1:11:9f:24:82:f1:48:ad:17:af:eb:37:22:
16:15:6f:4a:5d:21:b3:60:a7:16:47:63:ed:68:43:69:e6:0e:
b9:0b:03:3a:c9:de:63:20:a6:c2:02:90:78:bb:54:b8:17:24:
0e:91:69:44:84:48:4d:9d:ed:f3:19:03:f3:b2:d2:3f:ec:0e:
1b:07:70:2e:20:f0:f6:cf:d9:59:ca:6a:b0:f3:2c:73:33:ea:
ad:15:b9:50:52:05:21:3b:63:0b:a6:a7:70:c7:e1:da:1d:55:
6e:f9:48:b3:ee:e7:de:6c:36:cb:40:d1:e3:4f:4b:08:d8:3d:
fc:8d:6c:89:36:ba:a2:f2:a7:51:c2:d6:b9:3b:a9:ab:00:6e:
c6:2b:5c:7e:9c:c0:3d:09:76:61:cf:30:26:97:3f:3b:10:54:
35:e1:6d:3a:b7:c3:b0:1b:12:04:84:bc:0d:98:d6:f5:37:d7:
8b:08:0f:33:3a:64:61:d2:4e:23:7e:63:c6:2c:25:4f:3e:fb:
3f:2f:3a:18:0d:3e:95:ac:80:96:b1:94:67:b8:a5:24:65:5c:
54:6b:b3:2b:3c:5a:af:6a:2c:47:77:1a:d9:13:1e:86:24:e8:
b9:f2:c9:de:27:62:bb:b5:09:e7:f6:25:87:2c:b6:18:af:94:
62:17:4c:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 04:54:58 2026 by rpki-client