Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qbxQ-KybkWQdgqCjp2RfVjceYaA.roa
File: qbxQ-KybkWQdgqCjp2RfVjceYaA.roa (raw, json)
Hash identifier: 2URCPSNRYsSzTvyG2/th+uq+KWr+90Huilvbn+oOJao=
Subject key identifier: A9:BC:50:F8:AC:9B:91:64:1D:82:A0:A3:A7:64:5F:56:37:1E:61:A0
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23690B85FAF5D4E483073BF92311A4DE
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qbxQ-KybkWQdgqCjp2RfVjceYaA.roa
Signing time: Thu 02 Jul 2026 15:18:34 +0000
ROA not before: Thu 02 Jul 2026 15:18:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214677
IP address blocks: 213.218.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0b:85:fa:f5:d4:e4:83:07:3b:f9:23:11:a4:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9bc50f8ac9b91641d82a0a3a7645f56371e61a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:43:1a:c5:c8:c4:12:ab:f6:a0:65:0f:d1:36:
2e:5c:25:6c:27:6b:fd:9c:51:fa:4b:ca:54:72:01:
ea:fb:60:1a:0e:87:b4:f1:2d:f1:72:58:a8:16:99:
3d:d9:9f:27:27:a9:e7:6b:83:65:66:49:3c:70:3c:
03:b1:3c:c2:97:69:b8:ec:44:b0:ac:7b:ec:f1:af:
3b:23:9e:f9:14:7c:1a:3c:21:20:5f:d4:14:4a:fd:
b2:f5:36:0b:9f:9b:b3:ac:e9:6b:bd:dc:02:73:5b:
8f:7f:94:c3:cb:20:5a:74:f3:58:af:62:a3:3e:36:
52:e6:42:2d:d9:b7:05:84:ec:0b:23:13:50:06:ce:
3b:2b:28:eb:d4:42:33:9c:9f:73:c3:55:c2:9b:b1:
4d:e9:51:78:08:8e:58:11:bf:45:9a:dc:b3:cf:8b:
49:6d:07:17:4d:15:1d:cb:c4:74:e9:b1:6b:66:fb:
50:7e:4f:bd:90:a8:dc:6c:f4:b0:6f:44:58:ff:7f:
d9:38:65:80:7a:cf:e5:4a:44:88:1c:ce:a5:14:62:
83:78:57:c3:08:d7:39:d6:40:1d:e1:72:e5:84:fb:
47:14:a2:13:51:9d:6c:4e:8d:11:a3:67:fc:0c:d0:
68:57:e8:84:ed:8c:3b:28:d1:e8:2c:20:cc:b5:60:
60:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BC:50:F8:AC:9B:91:64:1D:82:A0:A3:A7:64:5F:56:37:1E:61:A0
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/qbxQ-KybkWQdgqCjp2RfVjceYaA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.210.0/24
Signature Algorithm: sha256WithRSAEncryption
01:8f:26:98:38:5f:f3:75:9c:a8:40:24:10:73:b1:fd:bf:e8:
22:52:11:a5:4d:37:8d:31:8c:52:ef:b3:37:1b:4a:18:71:d1:
59:0c:7c:07:07:86:60:73:9e:b3:22:29:f8:26:d5:16:e3:26:
3e:98:ca:64:6c:76:23:4a:42:b6:6e:3a:a8:1a:80:6e:e2:33:
22:7a:0d:a7:11:ba:4d:83:65:8d:33:da:10:51:d8:c5:87:7f:
90:45:bb:d3:64:86:d0:30:97:c3:78:6a:0d:cf:b2:b5:83:1e:
29:87:ad:7e:75:74:05:34:53:a1:2b:83:fb:7d:df:25:6e:0c:
bb:2a:1b:cb:31:d5:0f:86:f5:3b:3a:31:69:95:c7:1d:9c:d1:
6c:31:02:bc:e4:41:95:4c:57:79:d3:26:ad:11:c7:5d:04:fa:
a8:7f:a7:83:80:50:d1:b1:59:09:b1:26:e2:3e:f9:60:93:85:
4e:90:53:82:2a:56:7a:0e:cf:fb:6f:7e:d3:cf:4e:9f:3a:d4:
6d:90:7c:3a:f6:c1:95:6f:78:47:7a:fa:eb:ba:be:ef:fe:36:
d1:dd:80:5e:6f:32:6e:4e:9a:a3:ef:3f:4c:2b:5e:1a:ad:c2:
ea:bc:c4:d5:91:19:37:cf:6e:95:c9:9c:ac:c3:f5:40:02:b3:
c8:cf:0c:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 3 18:19:02 2026 by rpki-client