Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/MQ-X9kEi2I2vfynTPZp2RhmLnsI.roa
File: MQ-X9kEi2I2vfynTPZp2RhmLnsI.roa (raw, json)
Hash identifier: V26sr4MpKc92fNWXbUSL+Ip/cDKv65jY3K+YZj6WNiE=
Subject key identifier: 31:0F:97:F6:41:22:D8:8D:AF:7F:29:D3:3D:9A:76:46:19:8B:9E:C2
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F236952FA8B4270A042DF1067C3EF3E37
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/MQ-X9kEi2I2vfynTPZp2RhmLnsI.roa
Signing time: Thu 02 Jul 2026 15:18:52 +0000
ROA not before: Thu 02 Jul 2026 15:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211462
IP address blocks: 93.120.84.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:52:fa:8b:42:70:a0:42:df:10:67:c3:ef:3e:37
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=310f97f64122d88daf7f29d33d9a7646198b9ec2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:ce:fc:03:39:42:56:96:7c:d6:b2:da:bd:ac:
cb:91:9b:c3:18:7d:ee:cc:af:86:17:b1:f4:78:62:
d7:9b:4f:51:a4:32:c8:27:99:fb:eb:7b:17:52:38:
30:25:38:c8:43:05:c8:37:29:92:f5:be:d5:20:8f:
50:8a:f1:27:12:09:37:52:da:f0:90:5a:af:d1:6b:
64:16:da:cc:b2:40:bc:59:e7:b9:66:04:44:cf:2b:
0b:3a:5c:4f:e2:cd:0b:53:1a:bb:28:6b:0a:7f:36:
f4:70:8e:3e:db:10:41:ed:a5:38:94:62:7c:90:7b:
9f:5e:39:fe:78:76:03:d0:91:2c:3c:55:09:3f:84:
8b:0e:8b:07:78:ce:2a:b3:60:b6:4f:a0:2e:e3:6d:
53:ae:60:c0:db:27:01:c6:10:a8:f2:fd:2e:5a:b0:
c6:07:2c:ba:6f:c4:b9:53:88:fa:9f:10:91:1c:19:
c2:86:c4:28:dc:a3:b0:ae:77:49:d0:82:0c:59:9f:
2c:34:bf:a4:d5:de:60:32:db:e2:e3:0f:da:74:d8:
a6:3e:4b:32:df:20:23:96:c6:5f:d1:5d:22:57:c8:
04:d9:21:5d:7e:c7:66:50:8b:25:8f:0c:e3:53:0d:
3e:16:89:72:a2:90:21:6d:67:40:e0:67:11:92:0c:
8b:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:0F:97:F6:41:22:D8:8D:AF:7F:29:D3:3D:9A:76:46:19:8B:9E:C2
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/MQ-X9kEi2I2vfynTPZp2RhmLnsI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.120.84.0/24
Signature Algorithm: sha256WithRSAEncryption
74:27:7a:89:2e:ac:68:9c:68:5b:02:25:46:90:89:ac:13:83:
22:cc:a6:47:1b:e7:4c:b7:e2:00:10:76:42:4c:94:67:f7:bf:
bc:80:89:a9:93:d8:0e:6b:58:66:39:54:f0:79:69:64:aa:f1:
aa:96:81:91:c8:5c:86:f0:c9:57:25:42:72:7e:69:6a:c3:e8:
39:34:bb:f3:65:ae:3f:d6:71:83:3f:8f:ea:fe:9c:95:52:3a:
3a:0f:88:61:11:23:58:19:aa:77:71:07:83:d5:76:22:56:80:
ca:0b:93:c7:1b:b3:2c:cc:b9:1e:7b:08:60:02:9f:e7:bf:9d:
f1:5f:92:fe:d5:8b:e9:b4:f6:a5:1e:e2:bc:b3:e4:0c:7f:18:
34:af:5f:b0:2d:16:ee:d5:01:35:4e:47:b3:28:5f:53:e0:af:
5c:af:93:dc:de:d3:38:19:61:81:7a:fb:9d:e2:51:69:8b:9d:
5d:3e:0a:e1:a5:9a:88:89:d5:16:79:6c:29:f2:c4:28:ee:15:
de:5e:68:22:ca:ec:d5:cd:50:67:2f:44:2a:a3:94:39:63:9c:
9a:41:48:6f:b2:2c:39:b3:49:07:3b:21:02:05:0f:ad:d9:5c:
04:8c:df:8f:f5:3c:19:07:d4:fd:20:67:4c:fb:a0:40:f1:16:
4c:56:61:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:29 2026 by rpki-client