Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/Qww9gCj-X4B4Xg_aKnU4H1Tk5uo.roa
File: Qww9gCj-X4B4Xg_aKnU4H1Tk5uo.roa (raw, json)
Hash identifier: SIiEXR4hvpH9UtDtRw7spSH/X12xxic4pC9q8/Dobkw=
Subject key identifier: 43:0C:3D:80:28:FE:5F:80:78:5E:0F:DA:2A:75:38:1F:54:E4:E6:EA
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019FE7174BE02E1490916EB39BBA0C2E4BA7
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/Qww9gCj-X4B4Xg_aKnU4H1Tk5uo.roa
Signing time: Sun 09 Aug 2026 15:14:51 +0000
ROA not before: Sun 09 Aug 2026 15:14:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 212.66.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 15:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:e7:17:4b:e0:2e:14:90:91:6e:b3:9b:ba:0c:2e:4b:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Aug 9 15:14:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=430c3d8028fe5f80785e0fda2a75381f54e4e6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:90:bf:b2:83:4e:61:2e:62:ed:15:3e:df:82:
1d:60:f3:91:16:84:42:57:9f:7c:0c:39:2f:5f:98:
b1:0b:a3:0d:a5:70:01:55:ab:d4:c6:1f:bd:43:45:
37:2c:48:ae:5b:f5:d0:da:02:8e:61:cf:18:ad:89:
27:01:9e:0b:14:ec:52:6d:27:3d:a2:31:d9:bf:f7:
cb:5f:b7:30:5d:94:fb:25:06:4f:da:f0:6c:f8:00:
94:38:6b:2f:3c:64:70:3c:9d:6f:1e:eb:98:fc:f9:
11:17:35:38:b7:01:85:09:e5:b8:f6:0b:aa:1b:d4:
5b:a4:cb:8c:49:3d:ea:26:29:1f:82:5e:81:9b:73:
36:f9:26:90:2a:d7:93:12:5f:a6:06:52:bf:af:67:
fe:cb:5d:5f:1b:74:9d:f7:a1:1a:b5:e3:ac:73:92:
15:a9:31:d7:07:18:76:9b:af:87:26:1e:16:b5:f8:
47:1c:42:17:76:b4:a8:fa:07:21:5e:31:ac:3d:76:
c5:80:30:a6:c5:99:b8:e6:69:54:96:06:53:84:31:
99:e5:37:8f:ee:60:ea:c0:9e:23:ce:9a:9d:5c:b6:
b9:ef:25:1d:6a:eb:48:d2:94:5f:c5:a3:b7:76:6b:
9b:67:46:fa:09:8d:d3:f6:da:d9:07:b9:a2:73:f4:
d9:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:0C:3D:80:28:FE:5F:80:78:5E:0F:DA:2A:75:38:1F:54:E4:E6:EA
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/Qww9gCj-X4B4Xg_aKnU4H1Tk5uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.66.48.0/24
Signature Algorithm: sha256WithRSAEncryption
19:75:5d:30:58:05:0b:ba:21:dc:1a:c8:02:4e:61:a7:44:b0:
50:69:7a:15:9d:ca:0a:05:e4:c0:91:54:01:60:d5:3f:01:20:
5d:d6:39:eb:a9:d3:0c:da:a2:e6:f1:ba:f1:b6:4e:9d:74:22:
91:2a:6a:d3:cb:9d:3d:e6:5e:12:a5:51:8f:5d:b6:89:9c:b7:
35:0f:f2:e3:d1:f6:e6:9b:da:b0:27:e2:03:33:c9:1c:f2:36:
36:45:1b:fd:55:ed:c4:4b:70:68:3f:30:85:9b:5a:ce:4a:6d:
04:9a:3e:f9:b8:75:78:4a:5e:a9:18:74:92:f6:68:6f:c8:a4:
f9:cf:8c:2d:d0:e0:4e:32:c1:00:cf:62:5e:f4:20:3c:02:1b:
9a:e5:e9:6b:14:8e:e1:8f:76:43:b1:91:4a:db:7a:47:15:a5:
b6:d4:b2:40:6b:cd:60:03:ad:36:89:23:dd:87:1f:a4:40:b4:
7a:04:ff:f6:df:54:f1:a9:30:02:25:04:75:71:42:e3:6d:05:
63:ab:49:6c:a6:ef:f1:60:c3:72:21:2f:4c:cc:8a:e1:d4:74:
fb:68:7f:78:62:2b:94:7f:c5:07:34:e8:f1:75:25:73:6e:50:
db:e6:c5:b0:45:25:c8:1f:f8:09:ab:18:de:9c:31:dd:8e:fc:
fb:e7:e5:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 12 21:25:16 2026 by rpki-client