Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/Sq_qOTsf7wVB0vwgreS3nB_jIPk.roa
File: Sq_qOTsf7wVB0vwgreS3nB_jIPk.roa (raw, json)
Hash identifier: OK/CHpHTM2yPPc6litBPMbap80Y0eTVdGYncN8WvmXg=
Subject key identifier: 4A:AF:EA:39:3B:1F:EF:05:41:D2:FC:20:AD:E4:B7:9C:1F:E3:20:F9
Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial: 01A08C96C9616CB5DC1B34AC1A29D5C8F9D5
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/Sq_qOTsf7wVB0vwgreS3nB_jIPk.roa
Signing time: Thu 10 Sep 2026 18:31:27 +0000
ROA not before: Thu 10 Sep 2026 18:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207567
IP address blocks: 2a10:ab80:100::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 13 Sep 2026 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8c:96:c9:61:6c:b5:dc:1b:34:ac:1a:29:d5:c8:f9:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Validity
Not Before: Sep 10 18:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4aafea393b1fef0541d2fc20ade4b79c1fe320f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:4d:71:0c:b2:e2:fe:dc:2e:de:00:b5:4b:7b:
08:42:4c:12:e7:cb:cf:63:f5:66:c1:c2:58:26:61:
cc:d1:15:28:36:f5:57:27:80:1b:f1:96:b8:7f:6d:
27:1e:ef:c8:56:b2:ce:5f:18:f0:d6:f7:d0:d7:47:
59:62:c6:e6:45:60:27:74:a2:8c:0a:aa:31:7c:21:
74:fb:72:1e:63:55:10:3f:25:d4:b1:64:43:d7:92:
14:e9:2c:c7:74:df:8b:34:53:c6:f3:3b:a4:17:35:
56:a6:16:9e:aa:f6:3f:9c:36:1f:1c:d9:ff:d2:c3:
9b:cc:48:4c:f9:e8:16:47:56:ef:a4:e9:74:87:f0:
fc:97:f4:a8:62:3b:1f:48:53:46:b8:e0:42:55:73:
d2:99:43:42:55:99:23:bd:67:38:3d:b7:b7:c1:be:
6b:c4:41:f1:ea:bf:dd:19:88:f8:4b:69:2c:e0:8b:
c6:ca:06:90:76:f6:18:5d:a7:2f:3a:26:74:89:30:
ee:da:9c:30:58:08:ca:59:a7:d4:ae:85:5d:81:7d:
1b:bc:86:e6:ee:30:0b:c9:26:8a:9d:89:cb:01:09:
02:31:49:d2:35:1b:ef:a1:b2:4b:43:19:74:fd:d7:
84:0d:32:e0:f4:30:61:85:61:5a:b4:1c:9e:df:d9:
62:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AF:EA:39:3B:1F:EF:05:41:D2:FC:20:AD:E4:B7:9C:1F:E3:20:F9
X509v3 Authority Key Identifier:
keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/Sq_qOTsf7wVB0vwgreS3nB_jIPk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ab80:100::/44
Signature Algorithm: sha256WithRSAEncryption
73:33:36:44:1d:9f:72:9c:bf:b2:1c:e1:d3:b3:9e:b9:78:65:
dd:cf:5d:06:f5:d3:fe:5d:b2:4e:c1:8e:6c:21:02:7f:a5:df:
fa:c4:78:60:21:0d:d0:ee:bb:ae:6b:e0:42:1c:a4:7b:22:a6:
f6:8b:63:f7:ee:08:9b:3d:5b:d9:65:67:d9:a9:2f:df:ee:e5:
47:0a:1d:0b:d0:dd:92:9f:1e:3d:bd:2b:ed:dd:9a:40:5e:24:
76:94:c7:45:26:b8:0c:e4:4d:c9:96:8b:fe:30:3a:d4:32:2e:
49:d0:d1:fe:5c:6c:de:0c:42:9d:bf:d8:22:e7:31:83:f0:6d:
cd:57:67:ef:10:0e:45:8f:bb:2d:f6:a3:14:59:38:6f:5d:ef:
e3:14:0d:46:29:95:28:c3:71:26:d5:1e:b6:06:89:4d:71:7b:
6c:3f:b5:b8:14:79:5a:31:9e:d9:f9:b2:91:ea:37:f7:09:b5:
b3:d0:10:7b:53:dd:23:72:0d:d6:c0:35:31:0d:8a:10:14:53:
fa:3a:51:dd:e5:b9:ef:59:76:2c:cd:22:e3:f4:ab:79:ae:81:
5a:1b:63:d8:09:ee:a9:c8:ec:5c:c8:d9:98:f2:e0:f1:ee:78:
82:79:b3:cb:35:6a:e2:2b:cb:ad:d0:b5:a4:f9:6d:db:fa:6a:
22:8b:8f:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 12 21:32:31 2026 by rpki-client