Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/YQwoRbVJD8wPTte4SudK2hw-faQ.roa
File: YQwoRbVJD8wPTte4SudK2hw-faQ.roa (raw, json)
Hash identifier: eNsrAq2dj18KF34GmXgwk+NuVuMtXt7GfjC/VnMUCuU=
Subject key identifier: 61:0C:28:45:B5:49:0F:CC:0F:4E:D7:B8:4A:E7:4A:DA:1C:3E:7D:A4
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A00F6C412BE4D5A1DD424D6F7B828CC819
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/YQwoRbVJD8wPTte4SudK2hw-faQ.roa
Signing time: Mon 17 Aug 2026 11:12:27 +0000
ROA not before: Mon 17 Aug 2026 11:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58061
IP address blocks: 138.249.14.0/24 maxlen: 24
170.168.51.0/24 maxlen: 24
170.168.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:6c:41:2b:e4:d5:a1:dd:42:4d:6f:7b:82:8c:c8:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Aug 17 11:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=610c2845b5490fcc0f4ed7b84ae74ada1c3e7da4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:76:12:e0:d3:de:21:44:3b:89:7e:ed:90:73:
b5:7d:47:69:2c:37:e0:79:75:d1:1a:12:77:e6:53:
7f:d2:43:52:5c:02:f8:21:77:6e:3f:12:3b:f8:4c:
42:b5:db:87:fc:fa:a0:78:97:77:70:75:66:b8:f4:
4c:61:a4:17:ef:3b:fc:ba:fe:b1:d0:52:2e:15:5a:
39:de:c0:3c:fa:20:e7:a9:a0:e4:5d:63:16:85:41:
49:19:40:1f:e1:96:8a:47:dc:bc:74:78:87:4a:6f:
59:68:61:0d:d3:96:55:61:da:49:aa:26:1c:79:94:
70:06:29:4f:7a:4a:21:5e:36:89:cf:c7:ef:9e:15:
5c:44:30:bc:c9:d8:0b:03:16:c7:bc:cc:bf:2b:19:
cd:f0:67:2f:fa:b4:b8:13:b3:48:9b:85:4e:b0:24:
6e:c8:56:c5:23:34:3a:1b:43:d9:7a:a0:d7:ca:27:
67:ef:7b:aa:56:5e:f7:55:96:e1:3a:ae:51:38:80:
41:7f:8e:71:bf:3f:ee:df:1f:fc:ff:60:34:b0:76:
d4:36:f2:27:df:a9:ac:a6:34:7b:99:c5:c6:20:6c:
f0:ba:44:58:8e:83:38:b8:31:83:19:dc:15:09:2c:
85:2c:52:04:81:8c:99:42:9d:ce:cf:cf:51:9c:c4:
b4:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:0C:28:45:B5:49:0F:CC:0F:4E:D7:B8:4A:E7:4A:DA:1C:3E:7D:A4
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/YQwoRbVJD8wPTte4SudK2hw-faQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.14.0/24
170.168.51.0/24
170.168.117.0/24
Signature Algorithm: sha256WithRSAEncryption
42:b7:82:28:5d:86:bc:1b:3e:51:fa:85:81:73:60:ef:b5:16:
46:01:ec:56:d9:10:27:d5:2f:f3:c3:59:01:5c:c2:fe:97:88:
2c:6f:a7:96:de:11:23:10:2f:95:35:28:0a:a7:b5:b3:56:9c:
7f:80:58:0a:02:ce:ad:4d:c8:33:71:00:be:7e:d2:a9:93:87:
26:5c:c0:1c:ce:36:55:73:88:51:fb:3d:87:d7:eb:46:96:fb:
ec:ee:92:24:37:ea:16:aa:d2:e4:32:75:5d:43:a0:91:59:ff:
a0:56:92:db:2d:1a:a2:1a:2a:0d:4c:ae:de:06:61:8b:1d:39:
b6:5f:8a:9b:e2:e2:fe:d0:bf:c0:74:d7:5d:ae:3a:5a:14:a1:
a8:a1:55:e1:14:36:c8:da:bb:b2:24:f0:35:1a:c6:83:89:6f:
fc:b3:86:8a:08:10:c3:2f:46:db:86:9b:fa:45:ab:4b:d6:26:
6f:18:80:cc:1c:68:3f:dc:44:76:69:f3:e3:f3:96:26:c9:51:
f3:05:ba:27:3b:5a:77:76:e0:44:86:e3:90:30:41:72:80:07:
f5:d8:c1:e8:24:b0:e2:c7:ea:da:43:1a:50:fb:54:a2:a9:d4:
d2:64:61:2d:86:be:a9:4c:3a:7c:c4:5d:60:bd:2c:dc:85:1e:
c7:01:61:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 9 03:40:16 2026 by rpki-client