Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/qhjXSVae45XrXbVkk9AZF0CUio8.roa
File: qhjXSVae45XrXbVkk9AZF0CUio8.roa (raw, json)
Hash identifier: Sf5R8Fapzo94xI7m6HtziodxGr/J+IeiXCujYPmnk3A=
Subject key identifier: AA:18:D7:49:56:9E:E3:95:EB:5D:B5:64:93:D0:19:17:40:94:8A:8F
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019E5B0DDA59F7732568DA552B9C9AF47912
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/qhjXSVae45XrXbVkk9AZF0CUio8.roa
Signing time: Sun 24 May 2026 17:34:54 +0000
ROA not before: Sun 24 May 2026 17:34:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 130.49.20.0/24 maxlen: 24
155.212.113.0/24 maxlen: 24
170.168.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 19:44:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5b:0d:da:59:f7:73:25:68:da:55:2b:9c:9a:f4:79:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: May 24 17:34:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa18d749569ee395eb5db56493d0191740948a8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:2d:38:9a:16:f4:87:6d:98:7a:ba:33:7f:88:
20:db:db:76:fe:a2:0a:d7:80:27:8a:ab:92:5f:9e:
dc:0b:db:01:e1:c3:cd:d8:2a:8f:a2:cc:9c:71:69:
d3:9c:3c:6a:3d:c5:5d:73:98:2a:a3:bf:08:ce:a9:
c4:86:d5:ad:cb:45:d8:2c:0b:e3:f6:31:3d:fe:39:
0c:aa:21:b5:d1:8d:b0:58:48:90:47:c5:a5:e5:ff:
ba:90:f9:52:f8:f4:be:c6:77:f9:6b:25:0b:0e:01:
73:3a:7d:e1:77:d3:08:5c:08:00:d7:2d:64:e2:5b:
f3:27:39:48:7d:9d:fe:35:d1:c3:ab:6f:f7:7f:5b:
86:ae:d8:bd:d2:ba:1c:c0:8b:cf:40:f4:4d:bf:6f:
b4:6a:98:50:4e:d0:f0:c7:d8:87:12:2f:03:d2:fa:
ad:5e:b7:55:ac:fd:29:f7:b0:47:28:ee:f3:f8:14:
b7:f8:45:3b:63:73:07:21:1e:18:67:80:8a:98:ec:
d0:ee:f2:df:99:11:38:d1:44:c1:99:35:49:f8:6e:
9c:f5:d9:5a:6e:f3:cb:93:f3:fd:0a:64:ca:cd:1d:
70:85:17:c8:82:a2:fc:1e:de:ba:b0:4c:7e:7f:bc:
3f:d8:69:0d:59:ad:2c:4f:f0:c1:3f:d4:bc:dd:66:
61:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:18:D7:49:56:9E:E3:95:EB:5D:B5:64:93:D0:19:17:40:94:8A:8F
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/qhjXSVae45XrXbVkk9AZF0CUio8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.49.20.0/24
155.212.113.0/24
170.168.164.0/24
Signature Algorithm: sha256WithRSAEncryption
31:33:0a:09:3b:b8:b8:6a:81:0c:f3:1d:74:74:31:71:b6:c5:
fb:2f:43:e5:dd:44:76:28:dd:13:76:9f:3c:12:19:28:2d:68:
a4:28:23:0e:dc:85:ae:84:fb:5f:0a:6f:27:bf:54:cb:5f:a6:
35:5f:e9:c6:ce:5d:bd:4c:84:d1:13:96:ca:13:50:54:15:17:
df:f5:bd:7e:26:e6:b5:22:94:ce:f5:66:15:60:ef:a4:fa:04:
c5:a6:0e:6f:75:87:f1:d5:37:aa:fc:23:26:91:5d:91:4b:04:
e3:20:d4:fc:90:6c:6a:a0:90:2b:23:c2:ce:32:fb:fc:ed:6d:
2b:a3:05:92:99:46:f3:33:1e:d8:cd:1b:d4:cc:b4:47:9c:01:
d2:1d:9b:b5:6f:0b:2f:2a:d4:54:0b:73:a4:66:da:6e:74:30:
0a:87:f8:44:40:98:cc:72:72:42:68:26:7c:51:2b:e4:ac:34:
bd:0b:04:bc:0a:05:ed:4e:0d:e5:99:37:90:98:47:32:e2:0f:
7d:d2:96:6e:19:bb:6f:cb:9b:51:14:6b:8e:6a:a7:df:54:cb:
36:2d:bc:bc:5d:a3:5d:40:59:cb:3b:50:a0:cd:01:b4:ac:5e:
24:dc:d0:63:44:3c:30:4d:db:ac:ee:a7:a0:e5:cc:54:44:79:
f5:7f:c3:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 12 02:49:42 2026 by rpki-client