Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/qKkgoLfkeSt7uKIgLVPgobIAZXg.roa
File: qKkgoLfkeSt7uKIgLVPgobIAZXg.roa (raw, json)
Hash identifier: RX9bUW0PjXgB1CeH0IwHnnTDfM8vut9xAArDdnNeb/I=
Subject key identifier: A8:A9:20:A0:B7:E4:79:2B:7B:B8:A2:20:2D:53:E0:A1:B2:00:65:78
Certificate issuer: /CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Certificate serial: 019F236950EC03B2F1E4E7939A7A84C2ACFA
Authority key identifier: 29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/qKkgoLfkeSt7uKIgLVPgobIAZXg.roa
Signing time: Thu 02 Jul 2026 15:18:52 +0000
ROA not before: Thu 02 Jul 2026 15:18:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209811
IP address blocks: 91.224.41.0/24 maxlen: 24
93.120.8.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 15 Jul 2026 06:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:50:ec:03:b2:f1:e4:e7:93:9a:7a:84:c2:ac:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29078d22698cdd1e6a23d70c17fffe321def3b30
Validity
Not Before: Jul 2 15:18:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8a920a0b7e4792b7bb8a2202d53e0a1b2006578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e8:af:66:48:68:ef:4e:72:b9:1e:57:25:22:
44:44:2c:36:93:cb:24:db:e4:a6:46:0a:c0:7a:66:
33:e2:29:39:fd:62:97:c0:6f:9e:fc:0b:21:95:12:
4a:ec:2b:e9:51:ee:93:5e:e0:79:42:94:e5:b8:6c:
d8:2e:01:28:d2:ad:3c:0b:d9:91:0e:be:8d:98:e4:
04:e1:d8:f3:ca:df:f9:44:22:dc:14:a1:45:79:3d:
5c:9f:bb:d0:7b:1b:b5:c2:8e:d9:db:1f:00:76:d5:
d9:f0:05:70:86:f1:fd:d8:f9:f2:90:04:69:90:c5:
e4:4f:20:fb:d1:cb:ab:c0:3f:42:15:e7:c5:7a:1f:
42:ef:8a:81:57:2c:df:61:17:ab:ab:84:85:25:6a:
d7:18:74:8f:1e:50:02:8e:99:60:c2:76:b8:e5:b7:
5c:48:a5:cf:9d:53:66:6c:dd:c2:22:e6:2f:5b:75:
46:5d:80:ba:eb:33:a6:20:70:04:9d:97:4f:06:b1:
84:e4:45:0c:ae:fd:52:d7:e9:14:e6:a7:5b:95:10:
47:4f:b3:78:95:2c:83:7d:41:e1:64:0b:99:74:af:
b8:c1:c1:09:1e:de:c8:a0:7e:8f:ac:4b:d8:23:8c:
e9:07:86:0e:df:3a:45:24:ce:55:08:3d:4c:af:34:
7c:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A9:20:A0:B7:E4:79:2B:7B:B8:A2:20:2D:53:E0:A1:B2:00:65:78
X509v3 Authority Key Identifier:
keyid:29:07:8D:22:69:8C:DD:1E:6A:23:D7:0C:17:FF:FE:32:1D:EF:3B:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KQeNImmM3R5qI9cMF__-Mh3vOzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/qKkgoLfkeSt7uKIgLVPgobIAZXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2d/cdf5f6-2f18-42c7-930e-dc06dd805960/1/KQeNImmM3R5qI9cMF__-Mh3vOzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.224.41.0/24
93.120.8.0/23
Signature Algorithm: sha256WithRSAEncryption
98:d1:d5:5d:1c:4b:57:44:0c:57:38:2a:43:44:a2:70:88:1d:
13:6d:47:02:af:4e:0d:dc:cd:df:01:bb:d9:43:9a:fd:80:61:
bd:09:50:11:33:0e:ac:56:38:ef:73:1c:04:13:9c:e0:79:33:
17:45:5f:d3:2c:14:f6:c7:57:5d:77:b9:df:7d:9c:4b:7e:14:
04:ea:aa:df:af:0c:87:7a:2a:97:37:50:17:fe:67:57:13:db:
ae:c1:c0:f1:29:de:50:f7:65:cb:5e:74:af:c6:2e:62:37:1f:
ba:2d:7c:19:c7:e6:11:35:8d:63:9e:c2:37:6a:85:b9:1d:e4:
ad:bb:cf:bd:45:bb:ae:9f:7a:72:46:2a:4f:f0:e2:95:92:bc:
0c:26:69:bc:aa:76:20:09:ae:f9:fa:a6:d8:ad:da:69:64:60:
56:6b:04:11:33:4d:be:d6:cd:af:c4:f8:6a:f9:29:01:ef:42:
54:99:00:8f:b4:0b:f2:5a:93:b5:55:93:3e:a9:7d:36:83:24:
77:70:75:d5:bd:dc:03:6c:4d:9e:17:58:c4:f6:55:f0:bf:9d:
18:fd:f8:8e:50:1f:f9:70:c6:16:49:d9:c1:e3:7a:f1:d1:a0:
7c:7c:6a:c7:2e:f7:5b:12:b6:f5:f4:96:66:90:34:b8:b3:7e:
87:27:28:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 14 15:22:44 2026 by rpki-client