Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qrlmfi03LjR09yKaLpO3mHxLFUo.roa
File: qrlmfi03LjR09yKaLpO3mHxLFUo.roa (raw, json)
Hash identifier: hn1tF0MMV6WbBgWc3GqyJlwGh9ZWHquZoVAnU5erdgY=
Subject key identifier: AA:B9:66:7E:2D:37:2E:34:74:F7:22:9A:2E:93:B7:98:7C:4B:15:4A
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A024F0FF69104CF03D1F8CA33B3C049A4A
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qrlmfi03LjR09yKaLpO3mHxLFUo.roa
Signing time: Fri 21 Aug 2026 15:29:28 +0000
ROA not before: Fri 21 Aug 2026 15:29:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213607
IP address blocks: 82.109.176.0/22 maxlen: 24
212.135.112.0/20 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:f0:ff:69:10:4c:f0:3d:1f:8c:a3:3b:3c:04:9a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 21 15:29:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aab9667e2d372e3474f7229a2e93b7987c4b154a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:87:f2:0c:e5:1f:fe:4c:65:e1:15:21:2a:8b:
35:e4:dc:b1:e2:4d:77:bc:e0:c0:0f:dc:9b:04:16:
75:3e:50:cd:ca:9f:dd:1b:99:23:5d:d0:41:74:bd:
6d:db:c2:85:ac:17:20:7b:a4:1f:75:9f:d0:9a:20:
ca:13:3a:15:52:40:a1:e5:90:c0:7e:5a:bc:e2:fa:
ea:e2:c8:53:92:c4:ab:8e:dd:0a:a1:31:f1:12:0f:
c0:c5:99:a3:4d:69:e7:60:e4:11:00:06:3a:ea:d6:
10:1a:9d:7c:7b:ed:13:51:c0:3b:47:3d:83:62:b1:
60:b5:b2:27:da:92:f7:c1:06:ea:ef:22:9a:6b:f9:
57:e0:3a:b7:38:3c:1e:ca:ef:90:7e:43:9e:25:db:
aa:29:a4:95:f5:13:86:45:00:64:96:ac:dc:44:72:
5b:62:55:b7:7f:6a:0a:56:e5:10:e7:81:62:9a:65:
5d:e4:b6:01:46:7c:26:90:a9:54:82:99:a6:70:2b:
f5:f9:89:f0:b1:a4:fc:54:cf:f2:09:4c:53:27:a9:
db:e3:51:0e:19:b3:2f:0d:86:43:91:44:1d:39:1c:
78:42:a2:f5:34:ce:36:ba:a1:c6:ca:b9:89:3c:a2:
17:e5:21:f1:69:8a:15:92:68:4f:eb:d2:2f:3d:5e:
82:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B9:66:7E:2D:37:2E:34:74:F7:22:9A:2E:93:B7:98:7C:4B:15:4A
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qrlmfi03LjR09yKaLpO3mHxLFUo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.109.176.0/22
212.135.112.0/20
Signature Algorithm: sha256WithRSAEncryption
48:64:7f:f9:1c:3b:51:45:6f:3f:14:cf:36:93:48:e0:b0:10:
a1:03:c2:0e:cb:59:2b:a5:54:91:8e:ea:d9:ed:88:78:af:f1:
57:9e:af:b9:c0:fa:69:e2:08:4a:9c:4e:ba:a3:4c:70:5e:07:
84:83:e4:2b:53:47:a7:4e:b9:92:12:bf:26:e6:b4:9f:bb:db:
c4:16:a8:49:0b:6b:d4:d2:13:9a:63:d4:61:d3:ae:6f:e1:ca:
7a:7d:4e:93:fd:80:83:1e:6e:8c:73:4a:13:9f:95:85:b2:3e:
8b:26:fb:dc:2b:20:34:b1:91:23:c2:0a:4e:c2:54:4a:74:22:
7f:c6:f5:1b:2c:e2:de:80:58:b7:ee:cd:42:3a:93:dc:2d:39:
92:fc:93:e3:b8:0f:ee:d1:30:96:2a:c8:9e:3a:c5:59:03:1e:
2f:d8:d7:5a:c8:3c:3c:fd:36:8f:4b:cf:9b:1f:7f:12:61:95:
14:9e:cd:d8:99:4c:3a:ce:01:a2:21:f9:c6:f6:7b:56:94:4a:
94:73:00:5b:76:cf:83:c7:ee:52:e7:0a:ef:55:74:2d:28:a9:
5c:27:7a:62:8e:01:0c:94:0a:96:01:af:57:a7:43:3c:42:cd:
bb:05:0d:ac:05:41:bd:75:dd:7c:88:a4:ea:33:8e:a2:e2:b5:
89:01:a1:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:38:48 2026 by rpki-client