Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Q0o4Ar9c7IhT20dgrjlja9KOlIc.roa
File: Q0o4Ar9c7IhT20dgrjlja9KOlIc.roa (raw, json)
Hash identifier: 77INPd0MKvRcCWXGWUWPs28bMkr7mqMGCYN7Yt7SLCA=
Subject key identifier: 43:4A:38:02:BF:5C:EC:88:53:DB:47:60:AE:39:63:6B:D2:8E:94:87
Certificate issuer: /CN=583d76051017d0afa915fcfb790a00f4667b0a88
Certificate serial: 01A04BD9D6029A44D7831C1CCD01BB164B7A
Authority key identifier: 58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Q0o4Ar9c7IhT20dgrjlja9KOlIc.roa
Signing time: Sat 29 Aug 2026 04:49:22 +0000
ROA not before: Sat 29 Aug 2026 04:49:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219466
IP address blocks: 94.184.40.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.mft
rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4b:d9:d6:02:9a:44:d7:83:1c:1c:cd:01:bb:16:4b:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=583d76051017d0afa915fcfb790a00f4667b0a88
Validity
Not Before: Aug 29 04:49:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=434a3802bf5cec8853db4760ae39636bd28e9487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a6:3e:18:3b:69:92:ff:92:ac:3b:97:ec:32:
c5:8e:5b:50:f7:79:da:ae:44:10:40:6e:c2:ed:93:
5c:bf:95:27:a1:47:ce:2e:63:46:db:02:bb:fd:8b:
9a:48:ef:81:30:37:f6:09:8c:e4:9e:51:1a:6a:22:
0c:59:9f:15:18:00:1e:ec:60:74:44:a1:d2:dc:fa:
b8:ba:66:3a:69:1a:2d:64:59:f7:2d:23:22:16:08:
45:58:15:e5:74:cc:75:cd:52:77:af:d9:96:02:0e:
86:e6:51:b7:da:1d:1d:93:01:0d:64:4f:30:e3:c2:
18:73:44:f2:77:92:7b:e1:99:41:47:25:43:be:20:
47:f3:c9:ab:3a:a2:78:c6:14:a2:40:a1:72:b6:55:
ac:3e:95:37:ca:9a:e7:0f:e4:1f:0c:91:97:fd:81:
06:15:c3:68:04:8f:9d:a1:c3:21:e5:fc:1a:1f:94:
46:8e:ae:66:da:34:83:7e:60:6d:1b:1b:0f:4e:4c:
bc:b7:4c:13:d9:0a:1e:52:b4:90:0c:57:14:fa:f2:
9c:ad:49:e1:64:a7:7c:fc:ce:0b:81:5e:85:10:b3:
e2:5b:68:bf:3b:db:ae:c2:93:58:29:05:c6:96:6b:
7a:a7:00:ac:e9:98:08:24:8a:aa:49:37:0e:fa:24:
4e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4A:38:02:BF:5C:EC:88:53:DB:47:60:AE:39:63:6B:D2:8E:94:87
X509v3 Authority Key Identifier:
keyid:58:3D:76:05:10:17:D0:AF:A9:15:FC:FB:79:0A:00:F4:66:7B:0A:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WD12BRAX0K-pFfz7eQoA9GZ7Cog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/Q0o4Ar9c7IhT20dgrjlja9KOlIc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/4f1b27-326a-4679-a64b-da6153885f3b/1/WD12BRAX0K-pFfz7eQoA9GZ7Cog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.184.40.0/24
Signature Algorithm: sha256WithRSAEncryption
89:ea:be:01:b4:dd:3d:14:93:b9:c9:b5:05:6e:6a:3d:a7:77:
a9:f7:c8:ac:42:df:ee:45:fe:1e:7b:16:6c:df:7d:a7:a2:18:
ac:81:76:81:af:2c:a9:25:90:b8:4e:1c:a4:71:70:13:ca:71:
4d:d2:e6:0d:99:70:0a:8b:17:70:f2:9c:f1:80:57:90:b4:74:
b4:3f:20:ff:14:82:cf:f3:2c:ec:d9:72:79:30:2b:51:18:2e:
14:51:21:bb:3d:20:f4:29:9c:bc:9e:3b:a0:4e:f5:17:5c:37:
a7:c2:53:5d:c9:65:e3:87:c5:24:d6:cb:f7:7c:b7:ae:19:76:
a1:26:14:61:30:e9:a6:90:2b:ef:22:17:e6:f8:b0:98:e1:58:
5c:f6:58:20:ba:d3:f4:99:fc:81:d0:0d:2e:60:1f:25:a9:ec:
89:23:52:99:85:a8:85:5b:99:d6:27:e6:73:5d:56:ca:99:f9:
2d:50:0f:80:c2:07:27:be:80:60:1b:8d:b9:f9:68:fd:05:0e:
c5:fc:80:5d:97:63:51:03:16:6c:00:7e:20:c0:70:f7:e1:15:
a5:d5:d8:7a:09:e4:c2:10:5c:cd:42:b0:04:b3:e0:f2:4d:5d:
a1:3b:b8:af:91:9f:94:59:37:d7:d3:08:49:20:aa:b5:02:a0:
dc:90:a1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 16:04:29 2026 by rpki-client