Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qZWRVGNGSKxfIBtaaWUqNTa_rDc.roa
File: qZWRVGNGSKxfIBtaaWUqNTa_rDc.roa (raw, json)
Hash identifier: kKYbqmVKl8HkROMn/h2kxxwhT2ux0Degz4HHmd0T8BM=
Subject key identifier: A9:95:91:54:63:46:48:AC:5F:20:1B:5A:69:65:2A:35:36:BF:AC:37
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F236908362347F21541AA9A13278762F9
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qZWRVGNGSKxfIBtaaWUqNTa_rDc.roa
Signing time: Thu 02 Jul 2026 15:18:33 +0000
ROA not before: Thu 02 Jul 2026 15:18:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214432
IP address blocks: 80.240.90.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:08:36:23:47:f2:15:41:aa:9a:13:27:87:62:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9959154634648ac5f201b5a69652a3536bfac37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:27:35:06:ee:8d:fe:af:9a:6b:12:27:8d:b7:
33:f9:ab:a7:4a:41:6e:11:d6:65:53:d3:2f:11:c6:
4c:43:f5:5f:38:07:3c:fe:95:d7:67:43:6c:8c:1e:
40:c1:c0:fb:33:89:09:81:cb:de:e9:b7:bc:d8:b1:
5e:48:ee:6b:71:39:a6:01:1e:80:a5:6d:6a:47:38:
8c:89:23:a2:86:9f:8c:dc:69:ce:67:22:d8:b8:81:
22:87:d3:e3:4c:07:26:5c:97:5c:f7:09:9f:14:eb:
86:d2:50:65:06:49:db:9f:67:dc:89:29:46:56:57:
4e:b6:33:31:94:3b:8a:5f:3a:11:a6:8b:ae:2b:58:
92:b8:6d:71:fc:2a:b0:92:b8:5d:1c:2a:7f:bc:d3:
77:f0:80:f1:1b:36:95:92:89:45:9b:5b:d5:5f:ce:
b1:b9:6b:76:d5:8c:15:64:5e:b0:7d:13:a0:6c:6a:
08:85:b7:ae:66:88:f5:27:b1:8a:e5:56:9c:cb:ec:
9c:a7:1e:46:a3:ae:78:e7:1e:c7:f3:dd:56:2c:77:
a5:3b:47:bd:6d:bc:63:74:70:f2:39:bc:33:0a:d5:
65:fe:a5:a7:a4:0c:fc:27:5f:45:92:13:e1:a8:7c:
6c:9c:ed:ad:63:5f:d0:91:32:78:24:15:81:fc:94:
fb:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:95:91:54:63:46:48:AC:5F:20:1B:5A:69:65:2A:35:36:BF:AC:37
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qZWRVGNGSKxfIBtaaWUqNTa_rDc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.90.0/24
Signature Algorithm: sha256WithRSAEncryption
69:49:39:44:36:2e:7f:bf:2a:ae:3a:19:48:b0:02:13:ac:b0:
cb:62:68:4d:c4:35:31:da:79:47:df:e5:d3:67:a6:c9:bc:41:
3f:86:74:b6:56:ec:e7:10:41:cc:f2:1a:a7:76:8e:83:61:6b:
b8:6c:41:9c:d3:2a:a5:43:7b:a6:02:09:bb:0c:ed:c1:8e:e2:
28:f2:e8:05:25:79:c5:dc:73:79:2e:25:2f:dd:a5:be:b1:63:
a2:d7:a6:e0:b6:b0:65:fe:8e:68:b3:a1:6c:33:21:0b:e9:ef:
ef:3d:1f:c7:ea:38:10:0d:db:9c:0c:d7:c3:21:da:b1:1c:54:
c7:6c:12:90:70:0e:ef:d7:37:71:24:5e:49:47:85:db:7d:89:
e6:6b:42:6a:1c:8f:e5:fa:2c:eb:d3:b3:eb:95:62:53:30:93:
26:ad:fb:64:eb:7f:b9:f6:d3:9a:f9:65:73:29:19:90:93:c4:
7a:bf:db:fa:ed:07:0b:72:bc:a4:06:ea:ad:20:55:dc:38:b3:
b4:85:e6:f4:ef:87:de:a2:59:8d:79:56:cb:6b:a7:ae:84:36:
72:f8:32:e4:1b:d9:20:2a:54:98:1a:22:60:6b:49:c3:4d:31:
a2:37:6d:df:fc:0d:70:1f:98:aa:d3:13:2a:ee:a4:ea:fb:a2:
7e:25:b2:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:16:52 2026 by rpki-client