Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/q0L4UH47dCCDH60yZ_7AGNsn8qc.roa
File: q0L4UH47dCCDH60yZ_7AGNsn8qc.roa (raw, json)
Hash identifier: R7WRquGBsi9blcrsLvQ+AKqFw8Ezybqro9Uldd7Wbk8=
Subject key identifier: AB:42:F8:50:7E:3B:74:20:83:1F:AD:32:67:FE:C0:18:DB:27:F2:A7
Certificate issuer: /CN=03db95b436f531c4e602f39610ad53e26fdff153
Certificate serial: 01A04F87C5B4356726BF24D1CD8073C71359
Authority key identifier: 03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/q0L4UH47dCCDH60yZ_7AGNsn8qc.roa
Signing time: Sat 29 Aug 2026 21:58:13 +0000
ROA not before: Sat 29 Aug 2026 21:58:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56694
IP address blocks: 77.91.89.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.mft
rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4f:87:c5:b4:35:67:26:bf:24:d1:cd:80:73:c7:13:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=03db95b436f531c4e602f39610ad53e26fdff153
Validity
Not Before: Aug 29 21:58:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab42f8507e3b7420831fad3267fec018db27f2a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:95:b8:58:aa:b2:bb:b3:32:6c:49:b1:00:69:
f7:6a:a8:1f:61:79:1a:1d:99:c4:45:2b:89:58:de:
55:f9:10:ea:49:4c:19:3c:81:79:5c:90:91:84:66:
7b:9e:37:00:5f:70:99:ae:90:c8:ad:06:f4:cb:90:
c2:2b:c3:fb:5d:70:dd:f0:07:c8:82:21:9d:14:da:
2b:b1:d1:11:83:ab:5b:8a:cd:99:06:5e:75:93:3d:
f3:3f:30:0d:03:64:78:fd:0a:75:c1:df:22:dc:28:
6a:41:42:16:ef:e7:60:7d:dc:a5:8c:e3:bd:46:61:
4e:9f:2c:f5:1b:09:82:13:f7:b4:06:f0:56:21:f7:
d8:eb:8e:0d:7f:a0:e9:4c:a7:e4:77:31:61:4f:04:
64:5c:a1:4e:90:7a:ca:96:b1:e1:2e:c1:1a:7c:c9:
08:c9:e6:9d:d9:5e:c7:fe:be:63:d2:3d:e8:b9:4c:
eb:5a:cf:91:19:de:d2:df:e8:9a:bd:63:62:21:29:
51:7e:b9:77:c0:77:ac:69:44:6c:7c:18:7e:4c:15:
ec:90:ad:36:3b:4c:46:40:17:9e:c4:b5:c3:15:5c:
8e:4a:d3:fb:7f:20:1b:c5:0c:de:71:96:f2:74:72:
cf:41:d9:c3:66:54:2e:1c:8b:02:6c:b1:d4:d1:7a:
bb:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:42:F8:50:7E:3B:74:20:83:1F:AD:32:67:FE:C0:18:DB:27:F2:A7
X509v3 Authority Key Identifier:
keyid:03:DB:95:B4:36:F5:31:C4:E6:02:F3:96:10:AD:53:E2:6F:DF:F1:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A9uVtDb1McTmAvOWEK1T4m_f8VM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/q0L4UH47dCCDH60yZ_7AGNsn8qc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/31d238-944b-4283-b710-337133abb3e0/1/A9uVtDb1McTmAvOWEK1T4m_f8VM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.91.89.0/24
Signature Algorithm: sha256WithRSAEncryption
41:c7:2d:f5:4a:be:5d:9b:5c:6a:5d:7b:4a:03:29:3d:88:cf:
2f:f5:04:1a:6b:21:0e:0a:8a:62:8b:e5:0f:f0:0d:af:dc:9b:
c6:d8:f2:62:0f:6c:99:85:5f:86:00:77:fc:9b:bb:60:f1:83:
d7:65:52:60:b3:78:95:43:39:51:0c:3a:00:bf:2e:0a:0a:da:
a0:d7:17:4f:55:25:04:f8:89:c1:85:d7:a6:f4:9c:e6:68:11:
b9:3a:66:91:5c:1a:d3:10:ac:1d:d7:21:e1:b3:a8:7e:34:f5:
c1:1e:49:a0:56:51:9c:0a:bb:da:aa:12:67:56:78:75:71:56:
68:f7:f6:84:ce:00:15:b5:b7:be:e0:81:ba:ef:6d:09:be:4a:
a0:fd:72:8d:23:44:54:77:bb:73:08:c3:46:a8:59:f8:de:7a:
38:85:d9:38:4f:5d:0a:ca:d3:99:68:95:13:a5:38:71:95:86:
e1:e4:88:ed:16:fd:10:f1:c0:3e:db:3c:cc:51:dc:c8:a0:dc:
21:d5:19:8c:3a:f6:18:08:ca:c6:39:ae:21:c4:b4:a6:32:61:
df:d2:69:e8:3d:68:3a:8c:94:bf:e7:3c:53:08:91:f4:9b:d7:
9c:d7:7e:d6:44:a9:a6:3b:51:7e:f2:2b:d6:ed:e9:37:b8:fa:
e7:64:79:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 23:06:44 2026 by rpki-client