Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/qH1VTWt-4KrwL8x5likjxl704mw.roa
File: qH1VTWt-4KrwL8x5likjxl704mw.roa (raw, json)
Hash identifier: 4YYYIkykd4q8NCtsfVXnlE5hDVlIl6oGx0esdZITEMw=
Subject key identifier: A8:7D:55:4D:6B:7E:E0:AA:F0:2F:CC:79:96:29:23:C6:5E:F4:E2:6C
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 01A09365F408A12EF9383A7747AF5170AC54
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/qH1VTWt-4KrwL8x5likjxl704mw.roa
Signing time: Sat 12 Sep 2026 02:15:27 +0000
ROA not before: Sat 12 Sep 2026 02:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135392
IP address blocks: 80.86.208.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:93:65:f4:08:a1:2e:f9:38:3a:77:47:af:51:70:ac:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Sep 12 02:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a87d554d6b7ee0aaf02fcc79962923c65ef4e26c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:6f:44:d8:fc:4c:d7:af:48:ce:10:28:45:e1:
53:6a:17:75:89:a5:2e:22:a2:f5:dd:74:f2:c3:b3:
19:9c:10:59:be:39:c2:b1:8a:86:75:06:22:de:33:
11:98:6c:7c:bb:1f:dc:de:3f:a5:46:73:04:32:79:
c0:3d:74:84:14:8b:e5:3e:cc:3f:9e:49:39:7f:58:
49:a6:e7:45:a4:20:b0:8f:b2:7a:bf:88:57:6d:fc:
55:76:cc:75:74:54:fd:f9:cc:cb:e1:77:85:13:01:
13:88:e4:16:c2:50:03:d9:ba:cd:ae:18:02:d9:a9:
63:2f:2c:fc:1b:6c:fc:c6:48:e4:b5:71:71:b5:ca:
e4:5b:3d:19:3b:58:aa:e8:54:82:19:d0:20:f7:36:
65:7a:09:54:df:ae:ab:da:4e:66:d1:d2:fc:30:5c:
64:e8:94:cc:47:86:33:9c:db:3f:3e:4d:bb:e5:3b:
e4:07:0c:b7:b9:ff:83:4f:1f:3d:c9:ba:77:49:71:
0d:11:33:df:f9:8b:79:f9:3e:5d:17:e3:31:58:26:
88:af:5a:20:c0:9f:29:24:90:0e:87:2b:39:1f:34:
10:ef:06:dc:c5:8e:b2:e0:7e:9f:86:14:7c:ad:da:
df:05:b2:ce:49:32:e8:ba:40:d0:96:ec:81:31:f3:
0f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7D:55:4D:6B:7E:E0:AA:F0:2F:CC:79:96:29:23:C6:5E:F4:E2:6C
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/qH1VTWt-4KrwL8x5likjxl704mw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.208.0/24
Signature Algorithm: sha256WithRSAEncryption
68:13:0f:0a:1d:16:6b:cf:41:c2:a7:88:07:5d:c9:bc:ca:8e:
fa:d4:88:10:43:bd:85:bf:b3:df:e9:4f:f5:be:e1:53:0d:a4:
3e:90:12:da:f2:ed:0b:48:da:12:c5:23:9e:f8:57:56:f6:98:
6d:e6:04:6d:72:dc:53:ff:a4:c7:e8:b1:9d:16:c5:c7:1b:78:
c2:0c:b7:56:ec:ee:af:73:fe:f5:63:cf:e9:ce:ef:b3:5f:29:
76:e5:73:b9:2f:b2:6e:56:16:78:21:7d:2f:a6:be:1d:c7:3a:
86:55:48:8e:d7:3e:a8:58:95:b1:90:53:c0:43:b0:7a:2e:3a:
26:43:6e:82:23:ee:00:bd:2c:5d:69:5c:1b:dc:55:f4:10:06:
28:21:10:f1:8a:b7:da:db:66:d1:9a:ca:61:4b:26:c1:2d:4c:
51:f1:de:08:65:05:b0:b2:4f:92:93:c3:1f:ae:91:ff:73:4e:
df:6e:43:ea:06:df:2e:0a:f5:5d:e0:a1:35:9e:43:e8:88:de:
64:cf:9b:db:4c:cf:1d:75:f3:cb:49:a9:bc:e0:d2:2d:f5:fc:
dd:55:65:64:6f:83:e7:dc:12:36:f3:aa:31:e1:eb:aa:ef:a2:
f5:13:62:5d:37:dd:68:c1:0c:e8:a6:2a:a2:dc:9a:5e:7f:f9:
38:2b:fe:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 15:11:33 2026 by rpki-client