Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/i_QNXSEubOFTZEbHyeOmfAnx51Y.roa
File: i_QNXSEubOFTZEbHyeOmfAnx51Y.roa (raw, json)
Hash identifier: Ct+gnGpg7fCLzkedsqbQFmR3763ftmSsKtbnNI8iSuw=
Subject key identifier: 8B:F4:0D:5D:21:2E:6C:E1:53:64:46:C7:C9:E3:A6:7C:09:F1:E7:56
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019FAF3CF09FD51A631C1E5D70F6ADAC5796
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/i_QNXSEubOFTZEbHyeOmfAnx51Y.roa
Signing time: Wed 29 Jul 2026 18:57:14 +0000
ROA not before: Wed 29 Jul 2026 18:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46450
IP address blocks: 9.151.240.0/21 maxlen: 21
9.232.16.0/21 maxlen: 21
9.232.28.0/22 maxlen: 22
9.232.128.0/19 maxlen: 19
9.233.120.0/21 maxlen: 21
135.132.0.0/19 maxlen: 24
135.132.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:af:3c:f0:9f:d5:1a:63:1c:1e:5d:70:f6:ad:ac:57:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Jul 29 18:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bf40d5d212e6ce1536446c7c9e3a67c09f1e756
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:91:bb:d3:85:11:75:b9:b5:0d:37:88:43:48:
6d:b5:d6:78:fa:2f:3a:6d:40:7e:91:40:ca:3a:d9:
10:e8:af:b6:f3:6b:8f:9c:33:20:5d:c2:60:46:58:
20:7e:db:69:a0:29:19:29:50:8d:77:1c:8f:06:46:
83:80:0e:29:11:53:e0:7f:f6:30:d1:0a:7f:9e:d3:
1e:b1:e1:f9:00:9d:ad:a1:67:1c:2c:1b:0c:d1:51:
14:c7:50:76:ad:51:85:69:68:b6:8b:cf:ed:d0:29:
33:3d:13:ea:bc:fb:df:9b:cb:5b:74:2c:67:a3:0e:
93:f2:d0:18:26:e1:a7:b0:a3:a4:3d:1d:98:e3:9b:
83:f9:13:4d:fe:6d:22:62:95:2c:0d:14:46:78:04:
2a:7c:62:33:b5:aa:e8:20:c0:14:11:bf:77:3a:db:
5f:6f:d2:21:cf:a4:dc:4d:b6:50:70:99:f3:75:51:
3f:3e:ee:db:10:1d:78:96:6b:58:3d:d8:37:c8:ad:
b8:69:42:8c:4b:db:5e:5b:e0:f4:59:eb:1e:18:40:
ad:53:ad:8b:1e:42:68:81:2a:0d:0a:c2:8a:aa:c7:
f1:6a:ad:23:a6:a3:76:04:f3:65:7a:46:2a:1a:12:
43:28:2d:9c:bd:2c:01:1b:24:68:93:99:95:a2:fa:
cd:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F4:0D:5D:21:2E:6C:E1:53:64:46:C7:C9:E3:A6:7C:09:F1:E7:56
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/i_QNXSEubOFTZEbHyeOmfAnx51Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.151.240.0/21
9.232.16.0/21
9.232.28.0/22
9.232.128.0/19
9.233.120.0/21
135.132.0.0/19
135.132.96.0/19
Signature Algorithm: sha256WithRSAEncryption
9c:39:f7:d7:5f:71:2b:41:04:e5:c1:2f:c7:e6:20:ec:42:38:
34:6b:19:d4:75:c0:08:1f:5c:5b:8d:27:60:04:dc:6f:aa:5a:
73:29:40:f9:20:e5:50:60:e2:f5:80:9d:ad:66:42:7b:6d:7c:
61:3c:1e:55:73:b2:0a:8a:ca:58:b4:9f:4c:98:8e:59:76:e1:
2c:79:9e:9f:c4:26:89:c0:d6:c8:5a:55:67:12:b9:ce:f6:35:
eb:7a:ed:52:0e:5b:c0:c2:68:8b:82:f4:9c:40:ac:8f:8c:3d:
ac:f2:d0:98:59:a8:e0:83:69:6c:9d:b9:8d:d9:04:d9:fd:50:
bb:49:7d:ba:51:f2:44:7a:9f:93:9e:67:2c:64:2b:7b:a4:0a:
ce:57:95:4f:1c:b8:1d:8a:8f:89:e9:20:7f:12:b4:13:15:1c:
38:34:0d:fe:39:42:73:bf:72:fb:5d:88:13:e8:ca:a8:91:8f:
46:f6:fd:f1:1d:1a:00:cb:5a:b8:19:f8:8a:f8:e6:7d:0a:e4:
94:58:ca:d7:4c:77:b0:92:f6:d8:c6:a2:96:3d:81:08:c6:02:
e1:5a:09:df:ec:75:f6:2d:bd:f6:71:35:5a:a4:4f:b4:3b:d1:
b2:18:03:54:c6:f6:4f:06:c4:ac:37:3a:68:81:76:29:92:dc:
d5:e4:06:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:47 2026 by rpki-client