Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qFj5z_uk5KndVGQwmWP9LLD5EfU.roa
File: qFj5z_uk5KndVGQwmWP9LLD5EfU.roa (raw, json)
Hash identifier: BnUcdhRwE/zLP744a3FezJrhHPQHJgyQ7C1droHDs7E=
Subject key identifier: A8:58:F9:CF:FB:A4:E4:A9:DD:54:64:30:99:63:FD:2C:B0:F9:11:F5
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F2368FDC496A482503142F1275EE01F3A
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qFj5z_uk5KndVGQwmWP9LLD5EfU.roa
Signing time: Thu 02 Jul 2026 15:18:30 +0000
ROA not before: Thu 02 Jul 2026 15:18:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213250
IP address blocks: 89.213.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:fd:c4:96:a4:82:50:31:42:f1:27:5e:e0:1f:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a858f9cffba4e4a9dd5464309963fd2cb0f911f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:cd:d5:0f:27:88:23:00:63:37:0c:77:8b:b4:
91:34:a9:33:f3:ff:3d:47:28:3d:fe:8f:5b:9a:38:
5c:e6:89:d3:36:a1:ba:e5:98:37:13:b8:cd:db:98:
38:bc:3e:18:7c:02:3a:22:8b:c9:ff:e2:74:95:79:
45:0e:66:82:d3:5d:da:3f:89:5a:63:7f:32:41:db:
ee:be:06:5e:4f:ae:05:ce:34:5b:18:77:4f:73:a0:
8b:f9:a8:93:16:01:7a:8c:a5:20:35:90:fb:4e:8e:
91:db:15:36:ff:72:e6:8d:18:8a:bb:80:8d:97:c2:
f4:8b:ba:fc:8a:97:50:bb:5f:0a:a0:d2:cb:aa:25:
93:b8:fd:d0:fd:9c:32:eb:ee:c0:f7:02:4b:94:44:
47:aa:d7:e3:67:cd:ef:58:2c:ff:38:61:ab:de:23:
2c:55:56:e2:dd:46:9e:65:b2:4d:f2:78:14:b9:18:
64:a5:48:11:84:dd:5d:df:43:cc:d2:72:7d:7b:43:
f5:32:ba:61:d9:e2:53:4b:47:75:c0:b6:47:6f:b9:
38:c6:e1:4a:ce:92:84:f2:b6:69:77:b1:cd:29:12:
e6:e9:d7:04:e6:e1:ee:c8:2c:0c:2a:54:8d:d3:b8:
94:a0:de:b7:8b:25:80:34:8c:43:0c:e0:c5:43:01:
70:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:58:F9:CF:FB:A4:E4:A9:DD:54:64:30:99:63:FD:2C:B0:F9:11:F5
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qFj5z_uk5KndVGQwmWP9LLD5EfU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.118.0/24
Signature Algorithm: sha256WithRSAEncryption
71:a0:e8:d6:01:4b:82:a5:fb:ce:1a:61:b0:bf:35:6b:b5:90:
9d:36:2a:42:fe:5f:9e:48:4e:8d:33:ba:92:f2:c2:9b:ce:c2:
8b:2a:e6:93:bc:f8:e8:28:69:26:75:75:98:af:67:64:e2:40:
25:72:7c:fb:35:5f:84:65:ca:24:3a:46:65:dd:26:6d:33:52:
fa:a8:a7:0d:aa:67:a8:9f:77:4a:d8:6b:3c:87:d0:ee:c4:8a:
75:60:03:b1:a4:d2:bb:01:8a:c2:e2:f9:c3:42:73:73:45:58:
9a:92:00:ab:b2:3c:90:89:13:14:57:cc:4c:08:08:0e:96:6b:
a4:06:81:85:8f:a9:3f:2f:a2:e6:24:0b:ea:45:ae:b5:c1:d2:
7a:49:90:f9:ad:5f:b2:b4:b7:90:ee:79:96:07:ee:06:67:09:
9d:fa:26:3f:5f:56:97:ed:8f:24:a7:8e:1c:69:e0:df:b8:8c:
1c:7e:93:9b:c0:72:1b:13:c2:de:08:54:9d:8c:17:0d:76:d4:
3f:ba:38:c0:c5:44:05:8d:fa:19:9a:0d:a2:db:d5:3d:05:15:
bd:cc:18:06:d5:00:ee:bd:c6:05:5d:3c:d6:e9:77:71:dc:11:
18:d0:fd:f1:ec:fe:b7:d5:12:9d:63:fa:74:de:97:a1:eb:44:
fd:11:16:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:17:56 2026 by rpki-client