Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/qNQtpZ31xCBZ7jlCgsqAROFMFHM.roa
File: qNQtpZ31xCBZ7jlCgsqAROFMFHM.roa (raw, json)
Hash identifier: JKT+acw/t3oDo8c/gc4XKUn/7tP2lMPBsWZvkZY0KUc=
Subject key identifier: A8:D4:2D:A5:9D:F5:C4:20:59:EE:39:42:82:CA:80:44:E1:4C:14:73
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A1A70533382E10E127F0F5094F54CAC58A
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/qNQtpZ31xCBZ7jlCgsqAROFMFHM.roa
Signing time: Wed 04 Nov 2026 14:44:58 +0000
ROA not before: Wed 04 Nov 2026 14:44:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48207
IP address blocks: 88.218.64.0/24 maxlen: 24
138.249.8.0/24 maxlen: 24
138.249.14.0/24 maxlen: 24
138.249.20.0/24 maxlen: 24
138.249.127.0/24 maxlen: 24
170.168.102.0/24 maxlen: 24
170.168.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 23:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a7:05:33:38:2e:10:e1:27:f0:f5:09:4f:54:ca:c5:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Nov 4 14:44:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8d42da59df5c42059ee394282ca8044e14c1473
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:9f:59:22:a4:17:03:8f:6e:20:d0:b1:89:2a:
a5:bd:fc:2a:0b:a1:a0:43:6e:8c:59:8d:96:5a:cf:
0b:4d:72:cc:30:2f:0b:c6:d7:b6:5d:38:98:dc:82:
8b:50:c6:d1:75:c2:e0:f2:7c:99:fe:9b:18:31:70:
81:e2:10:bd:34:d3:30:e6:42:5c:9f:5b:6d:a0:00:
e3:21:e7:8e:0f:1d:23:a9:35:5e:3f:b7:99:bb:dd:
1f:d8:b7:b3:90:ca:38:a8:7d:d8:08:81:06:da:ad:
71:f5:f5:11:43:1d:d4:1a:f0:cd:c1:1f:b3:48:9f:
e4:3d:6f:4b:fb:5f:4b:4a:f7:db:dd:9f:32:ee:c2:
e2:33:4f:a8:a5:b7:dd:47:73:e0:11:50:9c:2a:53:
0d:e1:f5:3d:4c:05:fc:12:db:9e:fa:3b:da:ef:01:
f4:00:2f:b1:fc:15:1b:e2:f3:80:0f:f7:4a:61:06:
cb:b3:fc:48:f3:ec:b8:bf:20:ed:d9:47:3f:73:82:
5c:3c:4e:ef:f5:fe:13:f0:8f:a8:d8:10:93:5f:c1:
5a:b5:92:d4:a0:73:b5:04:e8:77:28:34:eb:d5:ec:
cb:97:50:fa:45:94:d9:5e:58:70:74:a3:d3:fc:c9:
6e:a9:4c:0b:cd:dc:93:58:60:ac:c1:32:3c:df:55:
5a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D4:2D:A5:9D:F5:C4:20:59:EE:39:42:82:CA:80:44:E1:4C:14:73
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/qNQtpZ31xCBZ7jlCgsqAROFMFHM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
88.218.64.0/24
138.249.8.0/24
138.249.14.0/24
138.249.20.0/24
138.249.127.0/24
170.168.102.0/24
170.168.191.0/24
Signature Algorithm: sha256WithRSAEncryption
79:81:48:67:62:37:c6:b2:2f:81:a3:f4:a0:86:5b:d4:43:e8:
58:8b:cc:65:c4:8a:0b:5e:fb:ed:86:55:06:4c:99:53:0e:66:
b7:c0:02:80:ca:7a:10:5d:40:e4:f4:b5:cd:45:28:2e:83:9f:
70:14:9c:29:af:55:93:0e:1b:47:31:a6:f5:94:19:8c:6a:70:
66:44:2b:be:d7:f0:3b:5d:6d:38:3a:06:99:49:90:5f:c4:f1:
8c:08:4e:ee:e2:8d:fb:08:e3:cf:51:9b:9b:0d:16:e0:08:49:
05:51:da:b7:c8:dd:76:56:12:5b:31:6d:38:83:fe:90:a8:40:
8d:aa:10:45:58:88:18:39:dc:3c:e8:30:4d:6f:f6:8b:9d:b5:
3e:63:98:3d:72:b6:a4:55:b9:31:81:7a:b0:61:a1:a1:42:6f:
f5:d5:b2:60:c7:d6:5f:b8:46:39:15:e1:8a:94:82:0f:24:f6:
9a:b4:a1:2e:9b:be:f2:73:e8:ce:14:b7:09:2e:64:36:9a:b8:
46:fc:04:f1:1c:04:0f:15:6e:67:d1:91:5f:ea:e7:ed:ae:f9:
87:23:5a:af:22:76:0b:72:87:36:69:0c:fc:b3:a6:7c:fe:08:
b3:86:8d:3b:2f:58:f5:7c:fb:23:b5:03:f8:b8:d7:e4:69:a3:
d7:2b:73:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 9 11:19:29 2026 by rpki-client