Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Q_LmjXEQqB1RR_QsgLcTwbwGWzo.roa
File: Q_LmjXEQqB1RR_QsgLcTwbwGWzo.roa (raw, json)
Hash identifier: ayLYDRlChd53KMCxV6BBGmuzoiljA3ZFaYMa3hptfCY=
Subject key identifier: 43:F2:E6:8D:71:10:A8:1D:51:47:F4:2C:80:B7:13:C1:BC:06:5B:3A
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019FC68697D42554F99C7A1007C2DDE12CF0
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Q_LmjXEQqB1RR_QsgLcTwbwGWzo.roa
Signing time: Mon 03 Aug 2026 07:28:57 +0000
ROA not before: Mon 03 Aug 2026 07:28:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207343
IP address blocks: 89.213.205.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 18 Aug 2026 14:17:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c6:86:97:d4:25:54:f9:9c:7a:10:07:c2:dd:e1:2c:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Aug 3 07:28:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43f2e68d7110a81d5147f42c80b713c1bc065b3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:49:be:40:ac:9a:36:50:f4:83:65:3f:3d:25:
d2:9d:f5:b7:7c:bc:50:cb:57:06:69:a9:db:7e:b9:
94:95:0d:0f:7e:62:09:55:13:25:47:b8:83:f6:b0:
5c:43:dc:af:4f:a6:d5:4e:04:eb:4b:44:df:fa:b9:
82:10:2e:93:a3:16:2f:a2:8d:9e:18:9e:94:9b:3d:
b6:de:12:07:f2:51:d6:c7:48:c8:9b:4b:5f:a2:3a:
e2:67:ff:0f:e6:06:aa:32:b3:bf:85:78:88:aa:f0:
51:4f:11:46:e5:45:a4:b8:27:dc:79:6f:8d:f8:a1:
ac:b3:f4:41:6c:92:9e:af:6b:bb:66:76:8d:93:ab:
6c:c1:3a:12:83:a7:2d:65:d7:ab:db:c2:aa:be:eb:
98:00:bf:08:43:67:5f:c7:95:ce:39:ae:65:3d:09:
0f:70:48:cf:29:4e:20:9e:9d:5e:03:8e:bf:39:07:
4c:cf:21:6e:f5:be:e4:e4:97:9b:9b:b8:94:6e:69:
71:64:b5:73:b6:6a:b0:c1:65:df:51:83:c6:a9:9b:
a9:1f:df:d7:3b:c3:91:60:12:e2:e2:24:2b:a8:5b:
3c:5c:8e:e7:c2:e5:68:9f:2d:dd:41:d0:3d:7e:8b:
31:f1:0e:01:21:5c:4b:37:29:32:aa:aa:7f:d2:9f:
0e:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F2:E6:8D:71:10:A8:1D:51:47:F4:2C:80:B7:13:C1:BC:06:5B:3A
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Q_LmjXEQqB1RR_QsgLcTwbwGWzo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.205.0/24
Signature Algorithm: sha256WithRSAEncryption
53:6d:0a:c6:f1:72:94:99:f9:59:26:55:ca:5e:97:48:58:54:
60:25:a6:ce:0c:89:7a:ba:00:4f:3d:41:90:cb:b9:fa:ae:87:
d3:a2:12:b5:31:f3:10:2e:ff:43:09:6f:73:b1:53:45:6a:6f:
d9:f3:67:e0:cd:76:fc:fb:be:d1:24:a5:9f:91:0b:6a:fb:39:
e6:5b:c8:53:0f:9e:15:a3:95:40:02:b1:e9:46:48:07:0d:a7:
9b:a3:fc:db:a2:66:08:d3:11:7c:c0:63:27:7f:24:12:18:26:
90:07:4f:95:b9:8e:25:5e:72:16:50:61:7d:2e:ea:eb:c5:f7:
0d:1a:6b:66:c8:8f:eb:86:97:88:a6:49:e3:96:c4:0c:8e:89:
2e:57:de:3f:bd:30:e8:53:1e:cb:31:d7:54:9e:2d:ee:70:78:
df:85:7a:ff:e2:ed:a5:9a:e4:2c:e5:c4:c0:d3:bb:eb:4b:5e:
20:e4:36:81:11:66:43:79:d2:8f:88:d3:e4:66:ed:8d:d3:30:
cc:70:b0:c9:d6:ad:b7:27:bd:a3:99:8f:cf:ae:50:3b:96:30:
ab:86:fd:7e:3d:9d:1a:5d:a1:58:b0:e0:6e:ba:e8:c3:1e:b0:
80:6d:24:c4:2d:ea:70:07:ba:8b:5a:8d:90:a6:13:b0:78:64:
fb:fa:a6:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 17 22:10:12 2026 by rpki-client