Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/qk2AR7jznFXiFm-S-E3sbOW-SkI.roa
File: qk2AR7jznFXiFm-S-E3sbOW-SkI.roa (raw, json)
Hash identifier: yUznZqr9C+30ftomfZZOKQPBfudgJpWTkkmTi0wpzJw=
Subject key identifier: AA:4D:80:47:B8:F3:9C:55:E2:16:6F:92:F8:4D:EC:6C:E5:BE:4A:42
Certificate issuer: /CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Certificate serial: 019ECFF8DD8D96132BAF49C263E358070AAB
Authority key identifier: 8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/qk2AR7jznFXiFm-S-E3sbOW-SkI.roa
Signing time: Tue 16 Jun 2026 10:27:33 +0000
ROA not before: Tue 16 Jun 2026 10:27:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23532
IP address blocks: 2a11:c940::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:f8:dd:8d:96:13:2b:af:49:c2:63:e3:58:07:0a:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8eb441dadbbecb6965d4ea1f046cc5c8e28817fc
Validity
Not Before: Jun 16 10:27:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa4d8047b8f39c55e2166f92f84dec6ce5be4a42
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ea:a1:98:a5:a2:e4:36:b2:c6:e0:f6:94:02:
68:d1:1e:5f:1b:8b:3b:dd:6c:e9:cf:8f:b9:e1:6b:
75:18:01:a9:5b:4e:94:b6:5d:5d:b5:b4:99:82:e5:
4e:3e:67:14:56:ed:e6:92:38:61:2e:6e:55:b6:69:
cf:7d:f8:32:61:66:49:26:7b:7c:c5:7e:48:6c:ed:
0a:36:64:79:4a:bc:56:7d:bb:23:86:a6:46:19:a0:
7f:d0:69:e5:8d:63:a6:9b:37:00:6c:35:49:02:b9:
67:82:d6:5a:2e:79:50:a9:0e:b0:96:1a:45:b0:fe:
de:e4:55:af:1b:ea:38:61:7d:95:85:b2:98:f7:f4:
6c:5c:0d:16:73:be:f4:0d:64:b9:4f:d7:ae:55:18:
2d:9b:4b:6a:0f:37:da:26:8b:3e:33:82:22:8c:3b:
25:1e:1c:18:ac:42:fd:e2:1d:5d:96:97:29:b8:12:
56:af:a9:82:49:f1:99:3b:1e:da:ce:09:0e:31:10:
bb:81:50:8d:db:37:4b:c5:57:33:43:48:c9:f9:36:
66:90:b5:2e:55:30:8c:6b:12:de:25:68:c3:7d:39:
df:cc:99:2c:bc:23:9e:21:89:99:77:a5:50:1e:e3:
4c:71:cd:d8:df:11:ff:4c:a5:ce:f2:0a:dd:9d:9d:
f2:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4D:80:47:B8:F3:9C:55:E2:16:6F:92:F8:4D:EC:6C:E5:BE:4A:42
X509v3 Authority Key Identifier:
keyid:8E:B4:41:DA:DB:BE:CB:69:65:D4:EA:1F:04:6C:C5:C8:E2:88:17:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jrRB2tu-y2ll1OofBGzFyOKIF_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/qk2AR7jznFXiFm-S-E3sbOW-SkI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/978d0f-9297-4c71-9cfb-46b949092cbe/1/jrRB2tu-y2ll1OofBGzFyOKIF_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:c940::/29
Signature Algorithm: sha256WithRSAEncryption
1a:dd:51:79:cc:a5:37:f2:ff:9e:05:0c:93:c3:cb:3b:2a:d0:
dd:28:0b:e7:ad:c8:19:65:35:86:a1:06:58:f2:6f:18:f1:07:
7e:5d:dc:b5:94:fe:72:ab:f8:0b:5e:87:11:79:88:d9:55:50:
60:ab:f9:f4:46:44:b0:22:1d:bc:a5:6e:77:24:7c:c7:cb:7a:
cb:22:92:e4:08:4a:6a:4c:08:54:df:21:85:d5:13:cf:74:29:
41:19:db:95:a2:69:29:11:ea:7f:73:22:9d:2e:45:e4:d4:7a:
c5:7c:c8:45:cc:73:45:11:46:e0:4c:83:e1:43:96:b7:6f:10:
c1:7c:92:4d:31:82:7c:6b:8a:e5:b7:3c:35:c3:cb:23:2b:9d:
e9:e3:2f:6d:44:70:66:b9:0b:b3:3c:93:5a:1f:fa:48:e8:f9:
75:d4:2a:2f:af:96:1d:b3:07:4c:d6:50:4a:b0:c5:58:e0:0f:
92:95:13:11:da:e6:9c:4e:d1:b6:70:a7:88:86:bd:a5:ef:80:
48:61:11:0f:5f:2b:2f:04:90:50:be:b8:0e:c1:1b:e7:16:24:
75:ea:6e:a0:64:a7:4f:8e:10:95:9b:63:1b:02:a7:2b:e0:b4:
03:18:8a:5d:a1:f8:7d:35:85:3b:4c:d7:a4:53:80:e4:ba:99:
c6:de:14:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 27 22:29:10 2026 by rpki-client