Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qbuszqc-cA1PMQimKmPe22XN9Cs.roa
File: qbuszqc-cA1PMQimKmPe22XN9Cs.roa (raw, json)
Hash identifier: CtzqlTVs5KIlzaOtJQIDpShBIvl5WpqBEHbtj8my6rU=
Subject key identifier: A9:BB:AC:CE:A7:3E:70:0D:4F:31:08:A6:2A:63:DE:DB:65:CD:F4:2B
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A02A2E421AA4BEAEBB1BD7AA6A65417C5C
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qbuszqc-cA1PMQimKmPe22XN9Cs.roa
Signing time: Sat 22 Aug 2026 15:54:29 +0000
ROA not before: Sat 22 Aug 2026 15:54:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219283
IP address blocks: 2a06:de07:f800::/38 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 13:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:2a:2e:42:1a:a4:be:ae:bb:1b:d7:aa:6a:65:41:7c:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Aug 22 15:54:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9bbaccea73e700d4f3108a62a63dedb65cdf42b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:e9:9a:47:52:89:5d:7a:f7:22:28:db:bd:bf:
a8:60:a3:e6:31:6c:82:dd:37:e2:bc:9b:61:79:ed:
65:86:e0:7e:10:9d:60:17:bf:31:79:89:f0:ed:4c:
4a:cd:5c:1f:97:2d:ac:1f:7c:50:81:60:a9:8f:5f:
77:a0:00:dd:6d:a0:c0:63:d4:44:8e:46:43:1d:a8:
29:6c:61:83:c8:75:9f:87:a8:b0:36:c7:3c:ed:d2:
3d:e7:b5:f9:3d:b5:38:8f:7e:5a:37:95:91:9f:ba:
bd:58:c0:da:ca:ee:ef:a0:96:98:37:7d:d8:d9:4a:
56:8c:3e:9b:57:ec:97:b2:21:c4:4b:25:e1:46:c2:
b9:db:8f:97:35:75:50:60:e1:80:bb:7f:af:fa:aa:
2c:dd:fa:e7:ce:b4:40:d1:45:3a:55:c8:9e:df:a8:
23:6f:bc:6b:55:48:12:98:70:89:ca:f9:92:53:28:
7e:2f:dc:bb:b7:fd:f7:9d:2d:9c:fd:c4:86:80:51:
7f:f5:d6:ea:fa:3c:e7:ed:a1:bf:a3:07:48:63:3e:
57:2d:63:d2:ab:74:d8:2c:a6:b8:f0:54:b9:9b:19:
2a:77:0a:d4:00:54:ff:98:4e:65:19:4b:2d:5a:d9:
2e:94:08:3f:84:af:ee:88:be:3c:28:82:25:40:00:
80:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BB:AC:CE:A7:3E:70:0D:4F:31:08:A6:2A:63:DE:DB:65:CD:F4:2B
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/qbuszqc-cA1PMQimKmPe22XN9Cs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de07:f800::/38
Signature Algorithm: sha256WithRSAEncryption
aa:27:5f:65:be:7f:d8:c2:1e:9c:30:93:32:48:62:33:b1:f1:
b4:c0:92:9b:4b:86:39:fd:7c:6d:e2:b2:5c:39:ac:c8:6f:b7:
0c:3a:97:20:0b:35:be:65:66:d5:4c:b4:f5:24:e9:7b:52:b8:
23:c4:8d:12:6e:b2:2f:77:e5:6f:2d:cb:c6:88:74:d8:b2:6f:
c3:bb:e6:f3:9f:f8:84:51:f9:73:2d:d1:88:a4:42:0a:81:9a:
ca:f8:75:35:89:00:4e:26:5e:a4:61:2c:88:51:d2:dc:f1:c0:
70:c7:c0:c5:10:85:d6:62:df:3f:c4:01:a0:43:67:53:56:e8:
17:7c:09:e8:cc:d4:11:22:d5:ea:97:4f:6a:bf:59:b0:fd:85:
9d:09:7c:74:26:a5:19:4b:21:e5:0f:e8:b0:60:3e:1a:6b:01:
59:e7:19:93:e0:12:4c:c7:ef:84:16:4f:47:61:8d:c8:b9:45:
a7:5a:c9:f4:4d:19:1d:55:97:33:3f:ea:64:75:b7:95:05:06:
59:32:80:05:60:ce:cd:1e:34:96:c5:b2:15:24:35:dd:37:51:
68:b5:7e:dc:7f:03:bb:5d:47:cc:64:32:48:49:bc:34:6f:26:
3e:4a:0b:86:d6:e1:45:ac:8f:9d:17:e4:23:7c:e1:db:25:8b:
87:76:8e:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 23 20:20:19 2026 by rpki-client