Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/q_yet9Am1JMmNYcViTdeMNiwZ2c.roa
File: q_yet9Am1JMmNYcViTdeMNiwZ2c.roa (raw, json)
Hash identifier: QUTjaMPp31NoiRUZlzAHomiSUTdfWY4AJsrCCoGVajo=
Subject key identifier: AB:FC:9E:B7:D0:26:D4:93:26:35:87:15:89:37:5E:30:D8:B0:67:67
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 01A05D1C05AACF43DE5AE4868461C405CD03
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/q_yet9Am1JMmNYcViTdeMNiwZ2c.roa
Signing time: Tue 01 Sep 2026 13:15:12 +0000
ROA not before: Tue 01 Sep 2026 13:15:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 146996
IP address blocks: 109.121.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 10:01:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5d:1c:05:aa:cf:43:de:5a:e4:86:84:61:c4:05:cd:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: Sep 1 13:15:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abfc9eb7d026d4932635871589375e30d8b06767
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:46:2e:14:b3:9e:af:f1:06:08:39:31:9d:00:
91:73:5f:47:a9:65:c1:ab:c7:49:58:f3:d2:e2:3a:
8c:44:91:ee:94:17:86:b4:b9:c1:d1:cb:86:f8:21:
91:f5:80:b6:a5:0d:2b:6b:2a:26:08:8b:17:a5:14:
1a:75:4f:df:38:7c:b6:47:e3:ca:3f:95:29:87:36:
78:7e:12:3b:d9:7b:b3:44:74:d4:85:a6:7e:3f:55:
2e:db:6c:54:60:f1:50:c6:14:be:96:2b:28:d0:7f:
a5:7c:d4:fa:23:19:ee:64:9f:c8:91:09:1a:71:da:
ac:cc:93:3b:61:5a:b9:f7:a0:ae:22:d1:d3:d3:74:
99:57:64:f4:fd:c2:4d:48:b8:25:f6:79:74:c7:75:
b2:e5:7e:55:6c:03:16:75:bc:43:c3:31:a0:79:d9:
86:f1:b0:87:d1:3f:a9:74:52:b3:d0:1e:1d:0e:ae:
3f:0f:f6:21:20:5f:5a:76:a6:06:a4:ec:a0:61:b5:
ec:96:57:7d:20:ff:4b:bd:b8:e3:5b:d6:fd:cb:43:
17:bd:7f:07:9f:9a:9b:71:b6:27:47:bc:66:3e:0c:
e6:fd:06:d1:80:f9:3c:0b:ed:45:20:4e:22:05:71:
fa:93:5b:00:35:26:b4:14:94:99:c5:b2:8a:35:eb:
cf:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FC:9E:B7:D0:26:D4:93:26:35:87:15:89:37:5E:30:D8:B0:67:67
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/q_yet9Am1JMmNYcViTdeMNiwZ2c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.121.37.0/24
Signature Algorithm: sha256WithRSAEncryption
9f:fa:90:16:80:6b:67:a1:3d:b1:47:16:40:f2:52:8f:ec:d1:
78:d3:63:eb:38:9e:44:cc:65:cd:6e:d2:8f:74:04:ee:16:05:
b1:85:d2:f7:ab:37:92:32:43:dd:9b:f0:0a:cb:2f:56:92:c1:
a5:de:8d:60:67:0b:bb:b8:e5:81:a6:de:d4:0f:3e:7e:03:47:
a1:fe:d1:20:59:b8:3b:ff:7f:5f:a9:4d:1c:f9:f7:c1:aa:89:
13:74:ca:0a:74:54:88:70:89:b2:69:fe:8d:2d:07:1c:1b:fc:
57:47:db:e4:67:c5:45:39:9e:f7:11:2a:b1:c0:13:bc:06:98:
e0:00:f7:66:17:a8:d7:87:98:a1:dd:67:73:15:d8:d8:a1:eb:
95:18:d8:f8:d5:fe:71:18:e3:5a:fd:5a:06:04:fe:e1:17:e4:
80:e5:73:89:51:0a:83:96:73:e2:59:42:71:ea:fb:b8:78:cf:
1b:f2:30:14:13:45:2a:8d:5f:35:59:ea:b9:9d:c9:1d:d8:f4:
4d:b1:43:b2:67:40:a5:2b:da:3b:01:0d:e4:94:68:32:fa:7a:
c5:e8:4f:e1:36:ce:62:62:cf:0c:36:b7:6e:fe:3c:5a:92:fb:
2a:c2:a3:ab:20:48:17:75:3a:fc:31:de:4d:a7:85:15:ef:2f:
98:07:ac:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:41:55 2026 by rpki-client