Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/q-7qaVBFrJZgKzKf2IlEtHX7tRQ.roa
File: q-7qaVBFrJZgKzKf2IlEtHX7tRQ.roa (raw, json)
Hash identifier: AbFdrSgj+ktF4k/A6rSmhTKtXZYnjEwiA026VSlfrgg=
Subject key identifier: AB:EE:EA:69:50:45:AC:96:60:2B:32:9F:D8:89:44:B4:75:FB:B5:14
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A067BF39D546247D61F2F6B2CAA4BDDC79
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/q-7qaVBFrJZgKzKf2IlEtHX7tRQ.roa
Signing time: Thu 03 Sep 2026 14:49:40 +0000
ROA not before: Thu 03 Sep 2026 14:49:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48031
IP address blocks: 201.3.225.0/24 maxlen: 24
201.4.74.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:67:bf:39:d5:46:24:7d:61:f2:f6:b2:ca:a4:bd:dc:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Sep 3 14:49:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abeeea695045ac96602b329fd88944b475fbb514
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:b1:1b:b3:d5:ed:db:5d:64:95:0a:24:b2:e5:
39:c9:57:ab:e3:8c:c1:37:18:b3:6c:f2:c8:a1:df:
61:5c:03:21:90:5e:02:42:8e:bb:62:45:bd:b5:06:
d7:aa:fc:a3:15:59:07:a8:d5:b9:f1:b2:af:ad:7f:
69:f3:b9:79:77:9a:fa:e5:28:9d:01:47:53:43:96:
93:cd:1d:2f:82:97:8d:79:4d:8d:cd:71:e7:96:4e:
7b:13:da:ff:08:1f:b8:4c:58:14:b9:06:5f:d5:00:
8d:2d:a2:f1:8e:01:ff:3b:2c:ce:52:37:53:8b:ad:
84:2f:7d:d9:af:e1:be:b8:91:f8:da:f7:24:30:0d:
1f:e6:52:bd:ff:5e:f8:e5:8b:0f:2c:5b:ad:6c:fa:
95:49:8e:45:d1:81:5d:26:ba:51:d8:04:a8:7a:5e:
e7:50:c1:9e:87:9f:02:c2:95:96:c6:2a:7e:09:e9:
dd:26:97:01:d6:72:45:bc:04:00:a9:21:f7:de:d6:
e0:09:9e:eb:72:53:c4:b6:b0:ce:ca:f0:12:61:9e:
78:ec:33:56:41:e1:ee:f2:c7:26:0e:4f:cd:5b:2f:
d9:bc:e0:de:b7:05:e9:3c:90:56:9c:30:f0:d4:a4:
97:d6:da:e0:eb:22:ce:64:82:bb:84:d0:db:fa:ad:
9a:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:EE:EA:69:50:45:AC:96:60:2B:32:9F:D8:89:44:B4:75:FB:B5:14
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/q-7qaVBFrJZgKzKf2IlEtHX7tRQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.225.0/24
201.4.74.0/24
Signature Algorithm: sha256WithRSAEncryption
5a:f9:ab:ce:c2:43:7c:36:d5:34:47:46:cd:7f:b3:71:51:cd:
ae:64:36:5e:d6:f8:54:79:f1:e6:1b:71:f3:d3:4d:33:bb:40:
13:08:17:cd:80:b5:0e:bd:09:e6:d1:0b:5f:69:6d:6b:4f:13:
56:56:2b:db:57:63:fd:b4:91:af:c8:fb:15:d0:d9:a7:8d:0d:
26:4b:8b:64:a7:b4:6c:f1:80:4f:67:34:d8:38:f8:2a:59:96:
a3:a3:e2:47:9f:df:54:0d:52:6f:11:f8:c9:ac:5d:15:5b:80:
ab:75:73:f6:58:3a:df:0f:59:ee:5b:7b:8d:c3:87:88:74:83:
66:e9:95:d8:d8:18:ca:fc:52:8a:86:e3:ed:4f:6e:bf:69:ce:
e9:dd:c6:d6:55:61:7a:a4:73:05:2b:c0:63:39:ac:99:a0:4b:
fc:c5:ea:90:74:f6:1d:75:31:a5:f1:47:62:bb:a2:1c:cf:88:
5c:f2:5d:51:de:1a:f3:e4:dd:69:36:8e:ac:e2:a1:10:fa:92:
da:af:48:1d:18:cf:28:75:2f:34:ff:00:5d:21:f4:33:8a:14:
07:74:46:6e:58:11:4a:65:03:cc:5c:f3:07:17:cb:54:60:c2:
36:1f:d4:91:7a:92:e7:0b:5c:c6:63:81:17:bb:c8:a7:6c:2f:
bf:21:37:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:16 2026 by rpki-client