Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/q7vMD6mIfzpLb7CF7yl-IRDHtCE.roa
File: q7vMD6mIfzpLb7CF7yl-IRDHtCE.roa (raw, json)
Hash identifier: TesuII4qavrPBYGW0VDnkRRfFDra+Oiy77Suqk2EfWk=
Subject key identifier: AB:BB:CC:0F:A9:88:7F:3A:4B:6F:B0:85:EF:29:7E:21:10:C7:B4:21
Certificate issuer: /CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Certificate serial: 01A15EE62563334D4246316C6AEB8AE57400
Authority key identifier: 27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/q7vMD6mIfzpLb7CF7yl-IRDHtCE.roa
Signing time: Wed 21 Oct 2026 14:38:23 +0000
ROA not before: Wed 21 Oct 2026 14:38:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6205
IP address blocks: 91.102.164.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.mft
rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:27:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:e6:25:63:33:4d:42:46:31:6c:6a:eb:8a:e5:74:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27c8b427c313598a92e8d8ec60e2950da39fc2c9
Validity
Not Before: Oct 21 14:38:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abbbcc0fa9887f3a4b6fb085ef297e2110c7b421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6a:76:45:10:70:0c:58:af:c8:70:a1:29:09:
6c:dc:14:d8:83:8d:f5:e7:9e:1b:9f:11:af:24:17:
b3:01:17:b9:ed:e4:89:2d:6e:0f:de:f6:2a:e9:d8:
fc:65:ed:67:fc:9a:42:e9:ee:9b:7c:d1:22:40:3f:
7d:93:b9:65:46:df:03:7e:74:5f:df:9f:8f:6a:e6:
4c:aa:ac:60:76:da:ec:26:04:d8:e6:5a:23:f3:63:
a6:ea:f9:90:b3:78:cf:12:b2:e0:4d:62:95:c4:07:
29:89:fb:00:15:94:52:4e:c2:08:2a:6b:9c:39:20:
49:5f:4b:ed:16:56:07:32:10:3f:0f:5d:5c:dc:9d:
20:79:7a:c0:4f:1a:16:28:78:78:e3:cf:42:48:00:
f5:79:ae:20:69:70:b0:40:73:6b:3f:52:a8:96:df:
66:3a:58:3b:ee:fa:e1:c6:72:48:67:30:08:29:d6:
80:14:47:5e:72:b9:1e:e1:e0:74:44:3c:d4:df:d5:
c1:1c:7b:a8:62:b7:2a:4e:0b:7f:c5:5c:1d:c8:02:
7f:8f:21:6c:8f:10:b8:29:f2:f2:b9:07:c3:de:28:
37:42:62:50:b0:8c:c8:2c:e2:bb:53:c9:bb:4e:87:
92:16:5d:01:f6:85:49:21:47:08:a6:73:f6:03:b1:
18:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BB:CC:0F:A9:88:7F:3A:4B:6F:B0:85:EF:29:7E:21:10:C7:B4:21
X509v3 Authority Key Identifier:
keyid:27:C8:B4:27:C3:13:59:8A:92:E8:D8:EC:60:E2:95:0D:A3:9F:C2:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J8i0J8MTWYqS6NjsYOKVDaOfwsk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/q7vMD6mIfzpLb7CF7yl-IRDHtCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/a7cdbf-da8e-4d43-bdc7-1c6ee44e11ad/1/J8i0J8MTWYqS6NjsYOKVDaOfwsk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.102.164.0/24
Signature Algorithm: sha256WithRSAEncryption
50:80:3a:54:b0:bf:f1:38:52:ea:1d:de:c2:c8:cc:22:d0:6e:
c4:da:fc:f3:56:9b:c3:90:f2:6f:e4:bf:06:cd:71:ad:b2:20:
f7:a7:87:e6:10:8b:1e:87:6a:b9:ec:49:47:41:7e:67:ad:26:
ca:5e:68:54:21:42:55:48:b5:94:49:7a:de:91:92:2f:b7:f8:
2b:50:85:a6:fb:ca:e6:b1:1b:4e:75:35:49:3f:c3:0c:cf:4d:
f9:dc:13:7a:46:27:fe:01:a9:04:98:c0:dd:97:97:b7:81:02:
dd:0a:ad:90:d4:c3:d0:b0:a9:20:a9:54:9a:b0:4c:d8:52:0f:
bb:a2:63:89:6b:73:46:0f:e6:d6:f7:87:6d:c0:73:70:f5:24:
8c:b8:26:78:46:f0:29:db:e0:88:d5:9a:cc:56:4f:3b:33:24:
93:5e:9c:6f:90:d0:02:cb:ef:d4:cc:46:5f:7f:5a:ec:18:d3:
ee:a1:7e:e3:7c:2e:14:07:23:83:50:f9:e4:cc:ef:a8:0f:37:
db:7e:83:08:3a:dc:1b:18:74:29:cd:d8:c2:cb:db:3a:b6:e6:
47:68:ca:5c:84:5f:e8:24:1e:53:84:c2:d4:ea:e2:03:f6:3e:
6c:26:e1:04:f9:06:80:d0:11:89:b1:a3:8f:2a:2d:a3:b0:81:
2a:ca:a5:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 23:46:46 2026 by rpki-client