Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/qzN7XEG2qrjRDEGede8d9URKs6Q.roa
File: qzN7XEG2qrjRDEGede8d9URKs6Q.roa (raw, json)
Hash identifier: xo0BmF8bRFeMZiCLBhu0QPgUZZhLlevhMTfWpCXxN6w=
Subject key identifier: AB:33:7B:5C:41:B6:AA:B8:D1:0C:41:9E:75:EF:1D:F5:44:4A:B3:A4
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A0588826452F0542223C5B68C0FFE60C0B
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/qzN7XEG2qrjRDEGede8d9URKs6Q.roa
Signing time: Mon 31 Aug 2026 15:55:12 +0000
ROA not before: Mon 31 Aug 2026 15:55:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 193.31.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 23:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:88:26:45:2f:05:42:22:3c:5b:68:c0:ff:e6:0c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Aug 31 15:55:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab337b5c41b6aab8d10c419e75ef1df5444ab3a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:20:ef:59:f6:6e:b4:18:52:79:1a:ee:77:e2:
f7:d6:79:56:6e:d9:53:dd:2e:c7:2a:ea:55:45:c0:
47:82:27:bb:6b:d2:14:1f:a0:da:48:75:42:b4:b0:
26:2b:86:51:04:fd:06:51:c0:9c:60:86:2e:e9:94:
e4:34:4c:8f:0c:8b:3b:71:e8:f1:94:7d:ea:95:8e:
35:56:39:92:b3:0f:43:46:62:ab:77:df:0f:bf:57:
d7:99:6e:8b:f4:22:7a:53:85:7f:ea:22:35:8d:55:
92:8b:4f:ca:75:d5:51:af:77:c6:88:63:ca:a7:85:
08:db:ae:16:5c:86:83:cb:2f:24:b4:36:23:b7:86:
d8:01:50:94:74:e0:51:ff:ac:6c:ee:4d:75:80:1a:
5e:a7:8a:d8:aa:db:bc:6a:90:66:a3:ba:6a:c3:e6:
28:e0:35:6c:02:ec:f3:60:a5:27:b5:b2:b9:14:78:
89:31:de:a0:e9:35:33:23:86:29:23:36:6a:70:2e:
57:e5:98:a9:36:1d:12:dc:0e:e1:a9:16:51:d9:33:
19:c7:fa:d5:87:bd:66:90:17:83:e4:a3:b9:66:bb:
d1:3b:5f:9b:14:98:48:07:08:fb:33:17:be:fa:ba:
6c:0a:2a:33:5d:ba:5d:42:7d:66:94:d5:b6:e1:15:
38:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:33:7B:5C:41:B6:AA:B8:D1:0C:41:9E:75:EF:1D:F5:44:4A:B3:A4
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/qzN7XEG2qrjRDEGede8d9URKs6Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.31.113.0/24
Signature Algorithm: sha256WithRSAEncryption
19:cb:91:c6:23:dd:7b:dd:0d:e6:94:94:7e:f4:74:c0:16:5c:
b2:72:92:4a:1c:a8:38:48:4f:4d:9e:fe:b9:d0:98:e3:26:eb:
a6:70:1d:ac:85:85:f2:97:ef:82:ec:d0:c9:b4:e9:ce:4d:af:
28:ff:4a:ac:e4:d6:aa:96:7f:6e:f6:27:95:5e:03:ad:c3:54:
53:3d:b0:ed:e1:1a:78:93:c2:f6:aa:2a:2b:53:1a:2e:35:09:
22:7d:d9:70:86:31:98:f8:29:72:89:a8:de:cd:f7:dc:5b:9a:
bd:5d:19:86:da:bb:74:59:f4:cf:f3:5d:23:ee:c6:80:c8:9d:
f6:4f:95:c4:c1:04:ba:7a:c3:5d:4b:ef:3e:dc:b5:f3:77:1c:
93:b4:18:aa:fc:93:b2:ee:38:48:3e:47:65:5a:4f:d6:9b:48:
49:ec:19:8f:ad:0b:e5:c1:a7:06:89:e4:22:68:e7:6d:d8:bb:
7b:a4:6a:c1:b7:d6:2c:1b:1c:72:2f:cf:71:9c:ff:0e:5b:29:
84:33:be:80:b5:72:74:63:d1:b5:4a:e9:5d:89:df:a7:44:10:
bb:40:c5:8c:b2:f7:30:b2:0c:4b:2d:fa:25:13:41:cf:9d:bc:
7e:23:89:18:8c:22:7f:51:ef:2c:d8:fe:dc:77:35:f4:a1:11:
35:4a:94:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 04:13:43 2026 by rpki-client