Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qlbWZSxizsb6OTqS9loFCN40BDU.roa
File: qlbWZSxizsb6OTqS9loFCN40BDU.roa (raw, json)
Hash identifier: VK2+yBj5fSBlsYhUg0Fb/smmYj8MSFtLHFNcArgXWZQ=
Subject key identifier: AA:56:D6:65:2C:62:CE:C6:FA:39:3A:92:F6:5A:05:08:DE:34:04:35
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019FD2B6AF3CF87BE3A760D08CEE0937C10E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qlbWZSxizsb6OTqS9loFCN40BDU.roa
Signing time: Wed 05 Aug 2026 16:16:55 +0000
ROA not before: Wed 05 Aug 2026 16:16:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154648
IP address blocks: 87.84.190.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d2:b6:af:3c:f8:7b:e3:a7:60:d0:8c:ee:09:37:c1:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 5 16:16:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa56d6652c62cec6fa393a92f65a0508de340435
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:d9:c1:1b:d1:98:6f:51:b4:98:05:1b:9f:15:
a3:be:a3:07:a9:3b:dc:44:9b:59:e4:82:5b:42:2d:
03:91:77:fc:23:2b:2d:9e:1f:15:e9:ec:02:86:f3:
a5:ee:7e:3f:5f:94:b2:77:da:9d:3d:76:6a:f1:aa:
5f:38:e0:b3:1d:e9:c8:be:f1:e3:33:18:0a:f7:fc:
e9:56:88:c4:13:eb:a8:3a:31:24:03:4c:0f:cf:13:
d3:2f:ae:70:81:14:63:d8:31:23:25:f7:ca:37:78:
7e:b2:20:9a:e7:60:21:57:80:59:b2:a3:9f:4a:b4:
e0:4b:67:d5:6a:d2:30:47:fe:56:c5:ad:93:de:20:
b7:7a:bf:b4:91:49:15:e9:a4:59:65:d7:df:8b:02:
43:ca:ab:95:cb:5b:85:49:17:37:0a:83:54:29:b5:
0b:b9:75:29:e1:3d:b8:63:90:f4:fa:18:60:b9:eb:
77:7b:b9:16:7d:9d:75:62:bf:03:da:f9:53:34:d7:
db:c1:c1:cc:da:54:77:ff:a3:55:1a:f0:0c:64:e5:
21:b3:d7:22:16:0b:93:d9:19:a7:10:c2:f0:fa:92:
38:fc:df:ec:6f:42:9f:ec:9d:05:14:a6:27:17:7b:
5d:1f:0e:4b:39:6f:26:a8:2f:e0:c6:9d:9c:7d:16:
b6:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:56:D6:65:2C:62:CE:C6:FA:39:3A:92:F6:5A:05:08:DE:34:04:35
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qlbWZSxizsb6OTqS9loFCN40BDU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.84.190.0/23
Signature Algorithm: sha256WithRSAEncryption
14:61:35:c3:d0:3b:3a:2d:87:3f:88:e8:b6:5c:c8:54:47:dd:
9d:74:33:a8:05:1a:92:79:b5:13:9c:b9:2d:6d:90:53:58:b4:
b1:73:d7:4d:a5:52:b1:15:7f:ab:c5:fd:b0:b2:aa:5a:2f:cd:
9f:1d:84:83:e1:ec:e0:a5:cc:db:3d:fb:53:18:5b:06:e4:42:
19:fd:65:37:41:0c:2d:1a:76:77:4d:2f:1d:da:6d:3f:23:21:
30:15:6d:17:df:b1:9b:44:86:19:cc:43:89:78:33:fa:cd:d4:
c8:51:78:db:08:cd:5f:f7:44:42:3b:1b:81:aa:91:9f:5b:96:
a2:74:71:ed:61:6d:60:f2:94:54:df:9b:ec:13:3f:4a:ff:68:
0c:48:b8:0e:bf:2c:92:2b:ae:a0:e0:4f:40:6b:d9:87:b4:c4:
96:5c:89:6a:80:75:94:71:34:5e:fe:93:7c:9e:84:53:64:0b:
8b:c3:fe:57:15:23:ba:57:63:6e:a5:1d:78:a1:e4:5e:86:30:
31:19:1a:a1:e1:31:61:97:7f:37:c0:ed:93:cb:8b:40:07:5e:
cf:93:bf:e4:22:24:9e:19:25:bd:75:e1:da:0e:78:46:88:d9:
23:08:85:b2:8d:0c:4b:23:fb:4f:01:05:54:35:3d:3a:72:b3:
df:6a:cc:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 19:08:11 2026 by rpki-client