Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/65/e7fcc4-02c9-4145-a9bf-998cd6a8adcd/1/SQy9KFYGS0joum7xiy0EFIa-uMc.roa
File: SQy9KFYGS0joum7xiy0EFIa-uMc.roa (raw, json)
Hash identifier: K8Xt2yKjTOyr4Toq8xfdaP+3iGEcOlOO5N/bQ9n6hLY=
Subject key identifier: 49:0C:BD:28:56:06:4B:48:E8:BA:6E:F1:8B:2D:04:14:86:BE:B8:C7
Certificate issuer: /CN=d098142e5ed33bd9b8b564d09007847f03c58ced
Certificate serial: 01A0EC8CAF5E587CB17139B297DA13B3DE17
Authority key identifier: D0:98:14:2E:5E:D3:3B:D9:B8:B5:64:D0:90:07:84:7F:03:C5:8C:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0JgULl7TO9m4tWTQkAeEfwPFjO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/e7fcc4-02c9-4145-a9bf-998cd6a8adcd/1/SQy9KFYGS0joum7xiy0EFIa-uMc.roa
Signing time: Tue 29 Sep 2026 09:43:57 +0000
ROA not before: Tue 29 Sep 2026 09:43:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 139.184.0.0/16 maxlen: 16
139.184.0.0/17 maxlen: 17
139.184.128.0/17 maxlen: 17
192.12.1.0/24 maxlen: 24
192.33.16.0/24 maxlen: 24
192.188.63.0/24 maxlen: 24
192.188.64.0/24 maxlen: 24
2001:678:718::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/e7fcc4-02c9-4145-a9bf-998cd6a8adcd/1/0JgULl7TO9m4tWTQkAeEfwPFjO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/e7fcc4-02c9-4145-a9bf-998cd6a8adcd/1/0JgULl7TO9m4tWTQkAeEfwPFjO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/0JgULl7TO9m4tWTQkAeEfwPFjO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:8c:af:5e:58:7c:b1:71:39:b2:97:da:13:b3:de:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d098142e5ed33bd9b8b564d09007847f03c58ced
Validity
Not Before: Sep 29 09:43:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=490cbd2856064b48e8ba6ef18b2d041486beb8c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:bc:9a:cf:ac:cb:56:79:5e:17:3d:ef:4e:7d:
d1:ea:1d:d3:d5:85:d7:79:0d:34:bf:5a:ef:3f:f1:
34:ff:15:12:68:71:e0:f5:bd:14:4f:b2:2b:ba:de:
db:ae:dd:08:43:7a:ec:ea:d7:11:a0:72:5f:7a:2f:
8c:c9:c1:22:07:a0:18:0e:30:96:e8:26:0b:77:10:
22:03:97:0c:08:68:97:54:c8:db:87:c0:dd:a4:47:
d2:c0:e5:01:6a:98:7b:fb:c5:09:22:e3:36:66:fc:
f0:79:cf:d6:17:41:d1:5b:73:f6:a6:c7:6e:5b:f4:
b3:e9:e0:df:08:4b:4d:f6:4e:7e:c5:35:e1:cf:40:
05:64:66:a1:f3:aa:3c:46:b9:3e:0e:5c:7a:5b:2a:
f6:fc:f1:86:24:95:56:c4:a2:c0:a6:19:cf:1a:bc:
ec:41:a3:e2:52:36:96:3a:05:39:42:ba:72:59:88:
f3:7a:df:8f:3c:89:86:c0:7c:10:ec:de:b9:ef:63:
4f:5c:e4:02:ee:8a:e4:37:c6:ec:63:ee:a0:e0:c8:
1e:6f:71:df:61:42:5c:e4:e1:50:de:e0:f3:8d:ab:
ea:ff:b0:84:17:35:ab:84:e0:c7:d2:30:a4:49:73:
ee:b2:79:1e:3c:b0:67:3d:1a:91:00:be:04:74:4e:
22:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:0C:BD:28:56:06:4B:48:E8:BA:6E:F1:8B:2D:04:14:86:BE:B8:C7
X509v3 Authority Key Identifier:
keyid:D0:98:14:2E:5E:D3:3B:D9:B8:B5:64:D0:90:07:84:7F:03:C5:8C:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0JgULl7TO9m4tWTQkAeEfwPFjO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e7fcc4-02c9-4145-a9bf-998cd6a8adcd/1/SQy9KFYGS0joum7xiy0EFIa-uMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/e7fcc4-02c9-4145-a9bf-998cd6a8adcd/1/0JgULl7TO9m4tWTQkAeEfwPFjO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
139.184.0.0/16
192.12.1.0/24
192.33.16.0/24
192.188.63.0-192.188.64.255
IPv6:
2001:678:718::/48
Signature Algorithm: sha256WithRSAEncryption
45:9e:e7:b7:89:1e:a2:ac:95:c6:b8:77:ad:cd:bf:d0:f4:52:
49:60:73:d4:6d:ce:1f:af:ed:41:7d:2f:55:cb:c7:cf:c3:25:
dd:2e:ce:fe:28:19:f9:da:ea:aa:5b:6f:c8:7f:26:d2:18:24:
f2:35:59:3a:9f:b2:c2:2a:e1:a7:08:80:43:da:40:4c:39:9c:
0a:53:87:3a:7d:ef:08:31:84:e4:2c:0f:01:1f:35:c8:67:21:
00:ac:b1:5c:20:88:8a:10:d2:7f:b1:a7:0e:95:4d:e9:88:dc:
36:47:60:be:df:05:cb:ea:49:8c:84:12:3f:0e:9d:d5:d7:b6:
07:c7:e3:9e:78:54:eb:19:0e:91:bd:fe:df:75:ff:44:c4:cc:
1a:d5:9a:84:98:7f:4c:af:9f:e9:2e:71:ea:0f:8b:ed:58:52:
ab:a5:84:d6:e7:c6:cc:e6:24:18:0e:0b:79:51:93:88:83:21:
0d:7e:08:fa:43:4f:63:27:97:39:14:b5:bf:e0:75:ed:de:fb:
ca:d0:c4:32:3c:a3:21:8e:d9:7e:a3:ea:5b:0d:a5:ee:5a:bf:
33:4c:d1:fb:d1:7b:8d:32:72:7f:19:3b:95:78:70:a7:69:b4:
21:6a:29:11:67:fb:4c:15:fa:5c:8f:f0:52:f5:4b:b3:c8:cf:
8a:3a:4e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 21:09:28 2026 by rpki-client