Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/qQh8Ea6WfJPSa--99ZPG599-K5o.roa
File: qQh8Ea6WfJPSa--99ZPG599-K5o.roa (raw, json)
Hash identifier: lcYkdnY9FrHkVWlxdS8gfgs1tGrcmc2midRbLooz/Uc=
Subject key identifier: A9:08:7C:11:AE:96:7C:93:D2:6B:EF:BD:F5:93:C6:E7:DF:7E:2B:9A
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 019F41698C971F972D167333C2FDE13BDACD
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/qQh8Ea6WfJPSa--99ZPG599-K5o.roa
Signing time: Wed 08 Jul 2026 11:07:44 +0000
ROA not before: Wed 08 Jul 2026 11:07:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133150
IP address blocks: 91.217.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 23 Jul 2026 14:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:41:69:8c:97:1f:97:2d:16:73:33:c2:fd:e1:3b:da:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Jul 8 11:07:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9087c11ae967c93d26befbdf593c6e7df7e2b9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:46:81:0b:b0:99:8c:b5:e1:37:05:d8:34:c8:
3e:f9:31:1d:2e:0c:c7:c1:1b:f7:5e:26:d8:09:c2:
38:3d:f1:03:2c:2d:3d:56:72:2e:fa:2e:c3:63:35:
72:7b:fa:61:c2:d1:bb:ab:c9:39:9a:6f:a4:f1:8e:
12:5b:fd:2b:b2:d7:e1:d7:c2:75:60:b1:a9:ef:8d:
92:33:60:7d:1d:ad:88:e3:d8:07:06:8d:9f:b0:08:
3d:8e:fc:4d:c9:64:ea:5e:13:64:e7:69:93:86:8f:
45:a4:c0:7b:f7:7d:2a:9d:ab:49:b6:7a:ee:3c:b7:
71:16:c6:01:d0:a8:93:ba:c3:6c:5f:12:c9:00:8e:
11:fe:60:6d:de:c8:75:2e:1d:b9:bd:af:f4:8a:e4:
a2:6a:b7:4c:a2:1f:ac:f8:7e:dd:6d:55:60:67:b2:
20:5f:c3:55:fd:b5:0d:ab:29:32:9f:9f:33:ee:25:
c2:57:ee:e6:d7:9a:9a:a0:ec:5f:d9:91:74:74:2d:
6b:b9:26:04:13:1c:94:1b:bb:3e:fe:44:48:f7:48:
41:19:8a:72:b6:e5:83:a6:fc:0e:1a:41:1b:5d:b7:
ac:01:2d:ed:b0:3e:19:aa:a0:aa:10:a8:f7:de:2e:
15:7b:3f:eb:8d:f3:3b:84:75:9b:5c:7c:64:94:a4:
84:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:08:7C:11:AE:96:7C:93:D2:6B:EF:BD:F5:93:C6:E7:DF:7E:2B:9A
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/qQh8Ea6WfJPSa--99ZPG599-K5o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.223.0/24
Signature Algorithm: sha256WithRSAEncryption
47:66:cf:17:f7:f2:1e:9b:5f:ae:53:51:e2:12:2d:1b:ce:46:
8b:79:bd:e1:b1:97:01:91:09:01:f2:66:65:7b:bd:5f:8a:d8:
6b:d3:a8:dd:f8:b7:fd:d2:f8:9b:54:b2:e3:5a:c9:b9:b2:c9:
bd:71:7c:29:61:ae:3e:6b:26:ef:12:b9:d8:b1:dc:e2:fd:87:
7a:9d:6c:d6:14:da:87:a3:df:44:a2:cd:99:8e:9f:38:86:e7:
da:c2:1b:96:37:d1:5d:e7:aa:86:25:0b:34:ce:90:8d:9c:eb:
3c:2f:11:82:18:a5:c9:c0:67:59:79:69:df:b5:e5:51:4a:54:
d6:3e:56:ab:c4:19:b6:cb:da:ac:04:c9:f4:de:eb:a3:dd:06:
e3:2b:0c:52:4d:f8:61:86:14:2b:37:c2:87:7e:91:05:04:44:
0c:b9:73:4d:90:98:da:8a:ce:10:fe:50:e9:87:c4:34:6b:e2:
83:22:4d:56:b7:8c:5d:25:14:69:7e:db:78:d0:ae:4f:75:a4:
95:04:c3:e6:a1:fb:2e:35:7e:0c:a4:92:6b:06:e0:e5:7c:69:
5b:de:3c:a3:8a:71:83:b5:10:e8:d7:e1:7d:76:02:76:84:0d:
1d:a4:b0:1f:9a:1a:1e:c2:bd:e6:98:e5:cc:a5:bc:dc:9f:0d:
c6:4f:fb:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 22 21:39:07 2026 by rpki-client