Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Q9pgTVhxV-RjXHU8wgo9T-q4N7Q.roa
File: Q9pgTVhxV-RjXHU8wgo9T-q4N7Q.roa (raw, json)
Hash identifier: la4K2sY65Ko7CPC677ObyB11CZjyJSdBTCdwSUrHwMo=
Subject key identifier: 43:DA:60:4D:58:71:57:E4:63:5C:75:3C:C2:0A:3D:4F:EA:B8:37:B4
Certificate issuer: /CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Certificate serial: 01A15331435C3C9EAC8D02797156B37C6CC7
Authority key identifier: 6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Q9pgTVhxV-RjXHU8wgo9T-q4N7Q.roa
Signing time: Mon 19 Oct 2026 08:04:59 +0000
ROA not before: Mon 19 Oct 2026 08:04:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9498
IP address blocks: 2.18.241.0/24 maxlen: 24
2.20.0.0/22 maxlen: 22
2.20.156.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:31:43:5c:3c:9e:ac:8d:02:79:71:56:b3:7c:6c:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b5fcbbea48937a442babdb3302132c4bc9bd6aa
Validity
Not Before: Oct 19 08:04:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43da604d587157e4635c753cc20a3d4feab837b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b4:9c:66:1e:01:62:4f:0d:ce:e6:36:ba:d4:
aa:80:ab:6f:ad:04:0d:67:67:43:4b:19:19:54:28:
35:52:2e:85:d8:38:9f:e2:0a:e2:87:99:1a:02:e0:
90:48:dd:4c:12:70:e2:c1:7e:12:2f:08:58:6a:81:
69:00:4f:d6:55:e8:69:d5:b2:b1:a1:bb:9c:25:f7:
95:9a:bc:ff:7f:f3:3d:0d:36:bc:40:71:2c:7e:19:
4e:99:68:b9:10:29:c7:61:99:83:23:58:08:a3:90:
6f:15:5e:00:18:f1:0e:a1:b7:77:ff:47:34:4c:8a:
55:5e:89:04:ba:d5:76:2d:df:ce:8e:05:b7:92:63:
a1:97:75:63:46:67:1e:3a:6d:10:85:36:ab:59:8c:
75:81:d6:f8:86:d6:26:5d:99:d5:da:fe:d5:ec:7f:
93:e3:62:f0:47:07:41:17:ee:7e:a8:5c:37:de:a8:
7f:b5:75:7a:0f:d2:96:89:18:d8:2c:58:3e:e4:e4:
3e:32:d2:19:7b:98:b8:ac:3e:32:26:9f:d0:15:4c:
a6:4e:8e:6c:7b:9d:5e:91:74:09:3c:01:1c:c7:67:
c0:3f:47:5e:2b:71:09:aa:a6:e1:03:a7:d7:f2:5f:
6a:40:7c:d3:d0:6d:a0:85:a4:49:a3:97:18:a8:95:
26:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:DA:60:4D:58:71:57:E4:63:5C:75:3C:C2:0A:3D:4F:EA:B8:37:B4
X509v3 Authority Key Identifier:
keyid:6B:5F:CB:BE:A4:89:37:A4:42:BA:BD:B3:30:21:32:C4:BC:9B:D6:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1_LvqSJN6RCur2zMCEyxLyb1qo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/Q9pgTVhxV-RjXHU8wgo9T-q4N7Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/042188-dfb6-4ad4-91a4-88d1cac9e4f1/1/a1_LvqSJN6RCur2zMCEyxLyb1qo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.18.241.0/24
2.20.0.0/22
2.20.156.0/22
Signature Algorithm: sha256WithRSAEncryption
22:56:84:57:6e:ea:ab:e4:b7:4a:6e:38:df:84:bb:b5:3e:63:
1a:c7:eb:c2:dd:f2:d5:bc:6d:2a:4f:a8:94:91:be:cf:cf:fd:
e2:ea:ba:e8:26:87:49:4f:5f:c3:38:62:c0:5e:e7:f9:6b:0f:
84:92:e6:f4:27:e9:9c:22:0d:ea:bc:61:f4:d5:3b:a5:ea:25:
3a:fa:8e:b9:66:81:98:19:33:8d:48:65:5b:79:df:97:00:42:
a4:cf:38:df:3d:52:ba:93:df:51:a4:88:71:67:53:fd:65:15:
61:f2:d5:65:7b:d4:05:bd:fc:1e:c6:3b:17:1c:80:5e:0e:9a:
e4:1d:11:ca:01:0d:bb:dc:8d:4f:1e:01:c3:fe:d1:5a:f9:19:
8b:5d:11:f2:2e:ab:bf:44:a5:a7:19:b9:99:7e:b3:36:2b:f6:
cf:5e:73:3b:63:7e:3f:a9:1e:d9:07:ec:a1:5a:3f:70:a6:43:
11:1a:89:53:d3:bb:b1:7b:15:12:f7:3c:1c:59:62:0f:37:9d:
2a:d6:8d:97:ea:43:90:37:54:47:d1:32:59:c3:9e:ae:84:50:
82:e1:88:94:57:31:c5:ab:25:86:16:2c:84:f4:ea:a9:6a:e8:
f3:41:2f:5c:a7:89:90:d8:06:19:67:ea:b8:23:87:70:93:1c:
dd:f2:51:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:12:02 2026 by rpki-client