Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/qyiVEH1YwkLH0sAEgDKOVXBdA_I.roa
File: qyiVEH1YwkLH0sAEgDKOVXBdA_I.roa (raw, json)
Hash identifier: iDOUGeKcdD6V1eq/ZjCXEfsnMVXSPyM428Wp1i5Qy0I=
Subject key identifier: AB:28:95:10:7D:58:C2:42:C7:D2:C0:04:80:32:8E:55:70:5D:03:F2
Certificate issuer: /CN=7373c1ff55403d4792346493f769f8d033bef02c
Certificate serial: 01A087F099E4888EFCC5DCA5C8ED3D43B60B
Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/qyiVEH1YwkLH0sAEgDKOVXBdA_I.roa
Signing time: Wed 09 Sep 2026 20:51:27 +0000
ROA not before: Wed 09 Sep 2026 20:51:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25098
IP address blocks: 165.65.208.0/20 maxlen: 24
193.201.70.0/23 maxlen: 23
213.230.192.0/18 maxlen: 18
213.230.255.0/24 maxlen: 24
2a01:70::/32 maxlen: 48
2a01:70:fffe::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 03:19:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:87:f0:99:e4:88:8e:fc:c5:dc:a5:c8:ed:3d:43:b6:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c
Validity
Not Before: Sep 9 20:51:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab2895107d58c242c7d2c00480328e55705d03f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:f4:ac:76:56:37:ab:be:8f:7c:8f:53:bb:7e:
87:d3:d3:6f:f1:23:e6:65:42:8d:1a:75:82:b9:97:
a0:d0:09:94:06:b9:10:d8:f0:c2:a7:e6:4f:a9:ac:
d7:2a:8a:08:29:f2:3c:b0:f0:29:37:a5:75:6a:1e:
c2:c0:58:7f:f0:86:de:96:43:20:c3:ea:76:6d:99:
1a:05:54:9f:24:82:31:fb:4e:e6:50:15:00:a7:7b:
e3:9f:f7:f5:18:56:fb:23:4c:a9:50:ed:22:3b:a7:
b2:2b:8c:ad:1c:0b:48:80:bc:33:24:0b:0a:63:ef:
3d:e3:92:ef:49:58:f4:c2:0a:dc:5c:e5:d3:cc:fb:
5f:e4:78:29:b2:4e:8d:85:8e:2a:bd:91:38:ba:2b:
09:03:6d:d6:c4:62:c9:7b:24:27:18:60:f5:3d:0a:
4f:12:87:17:83:16:db:47:ce:5d:c3:68:55:c3:30:
31:57:f8:8f:db:8c:53:48:f7:4e:b8:99:95:04:c5:
26:de:5a:e1:20:ca:af:97:e8:ea:54:22:fe:58:e9:
22:e6:e8:be:9c:8f:b8:db:df:4e:56:90:99:fd:d5:
03:df:ef:92:67:90:89:de:9d:17:11:d4:d6:94:18:
6e:68:8b:aa:26:39:50:dd:bc:23:86:b2:c9:4e:fe:
bd:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:28:95:10:7D:58:C2:42:C7:D2:C0:04:80:32:8E:55:70:5D:03:F2
X509v3 Authority Key Identifier:
keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/qyiVEH1YwkLH0sAEgDKOVXBdA_I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
165.65.208.0/20
193.201.70.0/23
213.230.192.0/18
IPv6:
2a01:70::/32
Signature Algorithm: sha256WithRSAEncryption
ae:ae:96:6d:99:0d:6e:16:d7:cb:4d:cc:5d:b6:99:b8:6b:da:
35:68:3b:80:85:30:01:9e:82:9c:11:23:76:6f:33:85:d5:f4:
82:44:aa:19:cb:c1:aa:39:2a:f0:bd:9a:de:4d:e1:ce:71:ba:
b3:0d:26:c3:39:a7:0f:a4:bf:38:fc:bf:9c:0e:14:da:79:f4:
90:13:b2:3b:5d:49:c7:bf:db:ec:ed:cd:0b:d6:9b:97:cc:e3:
cc:70:d0:b1:1a:7c:b0:d5:58:b2:67:8d:db:48:10:df:f3:07:
f9:95:32:63:ee:30:76:af:ab:85:77:18:be:d3:c8:26:f4:a5:
0f:5e:b5:da:0f:8f:1f:da:05:fe:90:b0:d0:63:e0:d7:95:6e:
3f:9d:5d:38:f7:c0:b6:f1:75:94:4e:c1:89:3e:2b:16:d3:31:
48:d9:75:04:27:fb:d3:4c:95:d5:51:79:66:dc:3d:42:49:32:
72:19:be:6c:bf:d2:76:ea:20:ff:19:3d:5c:28:81:c4:34:56:
ec:13:ce:a4:0c:8d:a6:15:58:73:8b:56:9c:8b:12:b9:9e:2a:
14:bd:2b:9b:43:ea:12:f1:05:a7:e3:54:70:2c:d8:05:6f:09:
74:65:25:9a:da:af:77:ea:7d:c4:13:5f:db:1e:48:4d:24:28:
7b:7d:8a:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 09:10:55 2026 by rpki-client