Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/qE8RROX_Abt_X7_dq6_I4v_syO0.roa
File: qE8RROX_Abt_X7_dq6_I4v_syO0.roa (raw, json)
Hash identifier: j+dQK6D8sHBmyU5YdzKLTUPT+QDZeyjIoFCaIOac7LY=
Subject key identifier: A8:4F:11:44:E5:FF:01:BB:7F:5F:BF:DD:AB:AF:C8:E2:FF:EC:C8:ED
Certificate issuer: /CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Certificate serial: 01A01E492F178B8600E98629F3E90534413D
Authority key identifier: A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/qE8RROX_Abt_X7_dq6_I4v_syO0.roa
Signing time: Thu 20 Aug 2026 08:28:27 +0000
ROA not before: Thu 20 Aug 2026 08:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 141.9.0.0/16 maxlen: 16
141.39.0.0/16 maxlen: 16
188.1.0.0/16 maxlen: 16
188.1.101.0/24 maxlen: 24
192.76.176.0/24 maxlen: 24
192.108.67.0/24 maxlen: 24
192.108.69.0/24 maxlen: 24
192.108.70.0/24 maxlen: 24
192.108.71.0/24 maxlen: 24
192.129.16.0/23 maxlen: 23
192.129.18.0/24 maxlen: 24
192.129.23.0/24 maxlen: 24
192.129.26.0/23 maxlen: 23
192.129.28.0/23 maxlen: 23
192.129.31.0/24 maxlen: 24
193.174.0.0/15 maxlen: 15
194.94.0.0/15 maxlen: 15
195.37.0.0/16 maxlen: 16
212.201.0.0/16 maxlen: 16
2001:638::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1e:49:2f:17:8b:86:00:e9:86:29:f3:e9:05:34:41:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a499903dab85f6a59772b3edfd4bf0e491af57c4
Validity
Not Before: Aug 20 08:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a84f1144e5ff01bb7f5fbfddabafc8e2ffecc8ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:c5:a1:6c:55:68:90:71:0b:88:62:c3:10:5e:
c1:d3:e6:d5:17:66:80:48:d9:88:ed:2c:aa:3d:4f:
4b:ad:74:7c:4a:a0:18:0d:8c:34:5a:9a:5f:bb:4a:
22:5c:58:16:66:54:4e:68:55:99:47:5c:5e:26:5e:
a0:1f:93:9f:0f:82:d8:4e:9a:fa:39:a7:d4:ce:17:
ff:d8:bc:0a:ea:28:75:8d:18:bd:65:55:9e:45:a5:
ce:a5:ca:7d:21:7f:48:c5:f8:de:94:9c:0a:aa:73:
e5:f4:75:ab:32:ff:ac:c1:92:f1:cf:23:59:50:92:
58:01:24:8a:25:fc:46:f2:a5:ae:b2:6f:8b:0b:ea:
23:4c:3b:4f:c3:3c:83:1b:f9:18:58:4a:69:82:10:
37:7c:0f:5b:75:69:bd:72:03:a1:74:1d:00:cd:05:
fb:96:9e:9f:17:e5:34:e6:3f:cf:e4:a3:56:64:9d:
a8:9d:aa:17:a4:d2:20:d7:f0:1d:06:5e:02:ed:c6:
9b:7a:9d:f5:f0:e3:05:0a:0b:34:b6:bd:fb:68:af:
9c:62:76:c9:1b:8f:d3:f3:93:87:82:19:54:22:d6:
47:a3:d5:36:ef:ab:f3:3c:e0:4d:a8:9c:4d:c1:58:
4e:6c:20:b8:52:06:59:13:2e:aa:00:46:15:b1:7b:
38:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:4F:11:44:E5:FF:01:BB:7F:5F:BF:DD:AB:AF:C8:E2:FF:EC:C8:ED
X509v3 Authority Key Identifier:
keyid:A4:99:90:3D:AB:85:F6:A5:97:72:B3:ED:FD:4B:F0:E4:91:AF:57:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/qE8RROX_Abt_X7_dq6_I4v_syO0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/8eda9a-d13c-4430-8cf4-57ec12e8641e/1/pJmQPauF9qWXcrPt_Uvw5JGvV8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.9.0.0/16
141.39.0.0/16
188.1.0.0/16
192.76.176.0/24
192.108.67.0/24
192.108.69.0-192.108.71.255
192.129.16.0-192.129.18.255
192.129.23.0/24
192.129.26.0-192.129.29.255
192.129.31.0/24
193.174.0.0/15
194.94.0.0/15
195.37.0.0/16
212.201.0.0/16
IPv6:
2001:638::/32
Signature Algorithm: sha256WithRSAEncryption
3d:c7:6d:49:75:b5:60:ed:3a:e3:56:f4:68:fc:96:0c:3d:94:
e3:67:e2:a2:14:72:37:1e:57:9f:56:ca:a2:72:66:7f:78:2d:
51:26:c6:df:ca:d3:6f:61:88:54:93:0f:1d:78:07:89:eb:58:
48:2e:dd:76:53:cd:41:5a:8e:91:10:80:c5:71:02:6a:51:8c:
a4:9d:a6:95:44:5e:4b:35:85:28:a1:5d:ca:9c:2a:9c:56:f4:
47:b8:61:eb:99:8b:3b:06:07:6e:df:15:54:f4:62:12:c4:89:
47:87:c6:b8:fc:01:47:1b:8a:0b:95:65:fa:63:2e:5b:32:7c:
ab:84:f6:ba:dc:d2:5c:02:78:de:34:5b:18:ab:a7:d1:c4:25:
81:30:ac:eb:42:e6:26:4e:2d:54:d4:49:91:d9:49:5e:16:55:
2b:03:aa:8b:32:29:33:8c:4e:5e:19:89:3f:a4:25:b9:8b:7e:
92:df:26:2e:c2:0d:f6:8d:31:c0:77:25:d0:ff:a1:93:ac:9a:
48:cf:cf:aa:9e:f4:c9:6a:05:fb:3f:ac:12:15:82:c0:98:86:
49:2b:6d:78:79:66:cd:d5:3e:a8:4e:02:fd:2f:d9:10:ec:c0:
00:10:2e:0b:8d:fc:81:10:1b:2a:57:d0:9e:16:2f:8d:9c:73:
9e:6a:12:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 13:03:10 2026 by rpki-client