Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/1-Qr0P0jIKcccnE3gjEKW3JhJPrM.roa
File: 1-Qr0P0jIKcccnE3gjEKW3JhJPrM.roa (raw, json)
Hash identifier: mlOgIynYmDyMrBDqJbMVjKyNJ/vt1PWSy2Z5XlwpP78=
Subject key identifier: F9:0A:F4:3F:48:C8:29:C7:1C:9C:4D:E0:8C:42:96:DC:98:49:3E:B3
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A0D836F330588114B06ED822B2F6C64E9B
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/1-Qr0P0jIKcccnE3gjEKW3JhJPrM.roa
Signing time: Fri 25 Sep 2026 10:57:54 +0000
ROA not before: Fri 25 Sep 2026 10:57:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211270
IP address blocks: 138.249.15.0/24 maxlen: 24
138.249.27.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 17:01:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d8:36:f3:30:58:81:14:b0:6e:d8:22:b2:f6:c6:4e:9b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Sep 25 10:57:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f90af43f48c829c71c9c4de08c4296dc98493eb3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:86:c2:5f:af:3b:23:82:11:68:ba:22:fd:5e:
64:8d:82:41:78:ee:3d:8e:fc:68:c1:24:ca:49:a9:
bd:30:ce:ad:4a:32:25:13:bc:89:dc:a7:9d:80:ea:
66:93:9d:c1:0a:21:5b:57:f3:0c:36:6f:49:c5:5c:
14:23:23:a1:a8:77:a9:3a:60:9e:f2:6c:e7:51:ac:
21:a5:75:59:ac:c6:9b:72:59:fb:7b:97:1d:71:6b:
42:8c:0b:14:5a:aa:e0:14:fa:9c:ca:ee:51:dd:65:
1d:fc:2b:82:cc:fa:ae:06:d7:13:2c:9e:a6:29:92:
fe:d5:24:f4:eb:ba:de:cd:6b:b4:25:1f:d7:2a:e3:
da:31:38:6c:79:ac:2d:8a:d9:f0:d8:79:49:8e:3b:
4f:6c:1f:c9:b8:99:35:a8:db:71:fc:44:03:02:59:
89:28:77:e1:12:2a:94:02:d7:5e:45:85:87:f1:f2:
e6:50:1e:6b:aa:b5:77:ce:2e:86:12:a0:20:a9:f1:
eb:00:8e:c2:ef:a5:89:7d:20:46:ba:a9:3d:73:f9:
be:f4:9d:75:b1:96:5f:cf:4b:72:0d:6a:fc:75:0e:
24:e9:7d:b4:32:3f:59:a7:6d:59:11:cb:2e:f4:a4:
92:6f:d4:39:a3:6f:db:74:75:3f:e0:b8:0b:aa:6b:
94:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0A:F4:3F:48:C8:29:C7:1C:9C:4D:E0:8C:42:96:DC:98:49:3E:B3
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/1-Qr0P0jIKcccnE3gjEKW3JhJPrM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.15.0/24
138.249.27.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:78:15:03:84:73:32:fd:11:af:83:76:e5:fe:86:88:21:3d:
47:08:19:c8:fa:5f:db:b6:7d:e8:5f:fe:9e:cf:f1:7b:0e:8e:
0c:15:5e:ec:07:b9:50:72:87:9a:d4:13:e6:0f:ff:ff:d0:86:
44:eb:4a:fa:95:20:79:9c:36:8c:da:b8:09:1a:74:d9:a9:e4:
57:8f:a7:87:1e:b7:b8:70:6a:28:37:3e:ea:7d:c5:65:e8:a0:
4c:6f:7e:78:3f:fc:c9:ed:57:97:fc:a8:e3:dc:8b:f7:98:6b:
4c:d3:6b:0d:71:7e:ea:e5:e8:7c:ea:36:68:4f:fe:37:ba:fa:
24:b9:0a:fe:02:24:eb:ba:60:ef:59:14:ce:42:e6:80:b3:54:
05:13:cf:c4:99:37:02:6c:60:5c:db:3f:c0:3b:2e:75:b0:5f:
9d:b2:00:87:0e:51:ba:71:0c:57:3a:ac:94:54:da:09:51:81:
2a:1a:96:2f:8d:5c:ea:16:10:57:36:0d:bf:84:34:20:a5:2a:
b5:25:24:b7:3e:93:09:4b:e4:91:83:c1:24:1a:fb:38:f5:f0:
7b:58:79:ed:cc:a7:63:2f:81:9c:5a:9c:b3:1c:fc:4f:56:1a:
57:3d:44:e0:73:19:55:72:c8:35:ed:7f:08:db:e1:71:b2:7a:
44:7f:3c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 03:08:31 2026 by rpki-client