Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/qMRSPE12atEvg7ojUu7pn-85sPs.roa
File: qMRSPE12atEvg7ojUu7pn-85sPs.roa (raw, json)
Hash identifier: i1E3+EN3J7gOiXY8d+5fJjLIhPvy1BBLBcxBzcXkTgU=
Subject key identifier: A8:C4:52:3C:4D:76:6A:D1:2F:83:BA:23:52:EE:E9:9F:EF:39:B0:FB
Certificate issuer: /CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Certificate serial: 01A0F1854DA8DDAA6424AC65EC77097FF8A2
Authority key identifier: F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/qMRSPE12atEvg7ojUu7pn-85sPs.roa
Signing time: Wed 30 Sep 2026 08:54:00 +0000
ROA not before: Wed 30 Sep 2026 08:54:00 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218535
IP address blocks: 2a03:5840:16a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.mft
rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 24 Oct 2026 07:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:f1:85:4d:a8:dd:aa:64:24:ac:65:ec:77:09:7f:f8:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f77705e89bb65b472e4e0184d6fe9bfb8c58635a
Validity
Not Before: Sep 30 08:54:00 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8c4523c4d766ad12f83ba2352eee99fef39b0fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:37:6f:1c:58:dd:3d:57:f2:66:51:cc:8d:5d:
9e:ab:0f:ce:ee:c4:ca:12:26:fd:e0:2d:34:fb:96:
9f:6a:fe:41:00:a5:ca:65:28:2d:49:08:82:a5:78:
17:21:be:35:ee:b6:76:b9:d0:85:d6:6f:d9:38:af:
97:ad:ea:8e:8b:ee:9b:d8:63:36:01:d6:59:86:10:
65:0e:27:be:1c:32:7b:8b:eb:de:15:95:ca:7a:15:
03:d2:55:0f:a3:5e:0f:a6:a1:d1:57:a5:33:4b:92:
3f:76:e5:5f:48:ff:e5:b1:d3:30:b2:f7:3b:7f:57:
ba:f5:20:b9:59:f7:cf:be:58:fa:c6:b4:1f:54:b6:
34:85:a4:8e:f3:ab:6e:b9:a2:68:da:8c:5c:10:3e:
8f:19:60:6b:73:0d:bf:2d:46:64:04:6f:cf:41:52:
65:b6:e4:10:5f:92:cf:85:46:34:8a:fb:1e:e9:16:
7c:7c:86:77:5b:01:fa:d0:e8:69:18:44:29:9c:6c:
bd:e6:51:b3:c8:7f:5f:f1:d4:c9:e8:94:6f:ba:ac:
d6:a3:d2:7d:96:33:3c:e5:94:7d:cb:64:c1:e8:86:
4a:8a:09:28:38:3b:af:fa:ef:ae:e9:97:3a:4e:81:
f6:6a:75:d2:27:09:4e:ad:bb:d6:07:b7:1b:e6:80:
04:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C4:52:3C:4D:76:6A:D1:2F:83:BA:23:52:EE:E9:9F:EF:39:B0:FB
X509v3 Authority Key Identifier:
keyid:F7:77:05:E8:9B:B6:5B:47:2E:4E:01:84:D6:FE:9B:FB:8C:58:63:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/93cF6Ju2W0cuTgGE1v6b-4xYY1o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/qMRSPE12atEvg7ojUu7pn-85sPs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/022839-6984-40d4-8716-6cb89791d7fd/1/93cF6Ju2W0cuTgGE1v6b-4xYY1o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a03:5840:16a::/48
Signature Algorithm: sha256WithRSAEncryption
64:8b:a7:dd:4c:67:a4:2f:e5:f3:5e:29:36:41:85:27:8b:45:
73:2f:c6:1b:9a:72:00:ab:25:29:c5:4d:8e:33:9a:b4:de:57:
74:05:e7:e7:06:26:d8:5a:b2:d1:39:ae:87:b0:df:50:d8:37:
d6:ea:a4:65:38:1d:5a:f9:79:5d:d9:a8:09:cb:c8:16:78:d9:
67:91:e8:cb:bc:41:ba:f2:68:98:10:f6:92:87:b0:d6:ed:ba:
88:9c:eb:01:c0:85:4a:e0:49:31:3f:3d:de:73:c9:fb:1a:66:
37:69:38:42:4a:19:31:9b:79:01:65:14:0e:1e:d5:63:05:87:
01:6a:8c:44:27:99:86:92:2e:02:d2:9f:dd:ca:e8:7b:ac:64:
6d:b1:18:88:c8:73:4a:88:de:d0:c3:9f:1d:e2:42:b3:3e:55:
b1:7b:07:be:88:06:8f:d2:fa:9b:46:3a:60:6d:7b:d1:b4:86:
a7:85:e4:e2:61:47:b4:83:57:f0:2b:86:55:41:8e:99:2c:1c:
1e:42:72:7c:f2:27:36:e8:19:fc:0a:e2:dc:21:7a:3e:8f:2d:
96:7b:6e:4a:df:8c:61:1c:45:47:93:b2:0e:da:d7:79:77:96:
c0:ff:b7:a7:20:af:d9:4d:98:6b:88:69:5a:39:0c:d4:e9:f3:
02:e5:e4:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 23 14:10:52 2026 by rpki-client