Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/qkeJhJN0QtZceHnAHCmJT2X0h5k.roa
File: qkeJhJN0QtZceHnAHCmJT2X0h5k.roa (raw, json)
Hash identifier: Sx3eIYeKwHXjmlOHh2WKSSlEFJciEMJBS092d+tyFiY=
Subject key identifier: AA:47:89:84:93:74:42:D6:5C:78:79:C0:1C:29:89:4F:65:F4:87:99
Certificate issuer: /CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Certificate serial: 019E91CB24EB60BDA32582E84A3A43421471
Authority key identifier: 9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/qkeJhJN0QtZceHnAHCmJT2X0h5k.roa
Signing time: Thu 04 Jun 2026 08:41:10 +0000
ROA not before: Thu 04 Jun 2026 08:41:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 132359
IP address blocks: 84.247.75.0/24 maxlen: 24
89.149.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.mft
rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 12 Jun 2026 13:27:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:91:cb:24:eb:60:bd:a3:25:82:e8:4a:3a:43:42:14:71
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9e459aa4602bffa2d2650ba66818458c89fc4582
Validity
Not Before: Jun 4 08:41:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa478984937442d65c7879c01c29894f65f48799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:1e:a1:b7:59:55:7b:7f:18:eb:63:1f:8a:93:
7f:f8:55:59:99:7f:d1:46:b2:0d:30:06:ad:b2:1b:
d8:ed:a2:f9:6f:00:ca:5e:ad:de:ca:a3:b4:a5:5a:
cc:79:d0:bd:a8:31:ba:25:37:80:ca:22:d0:95:68:
03:3d:52:3d:30:bc:67:46:93:6e:90:90:aa:96:ef:
67:e9:a9:69:57:f8:84:ff:ae:61:b3:23:d0:d9:ce:
96:cc:7e:6e:b3:87:48:35:75:cd:b2:ca:bb:1f:42:
ff:01:e8:b3:36:72:2a:7d:9a:87:c3:a6:fd:20:e0:
63:38:9e:0f:f8:06:26:2c:08:14:3f:1e:b4:ec:4a:
ee:71:30:f7:e8:03:79:a6:61:f9:ac:ff:e8:bc:45:
3e:9a:92:26:8b:14:5f:80:8a:97:62:4b:0d:d0:21:
89:3e:76:fd:b4:cc:02:29:e0:ae:4f:35:18:fb:aa:
ba:fe:ef:d1:ea:7e:69:a4:ac:69:85:60:26:f3:ee:
61:50:fa:6b:1b:64:51:30:2d:e1:73:fd:6c:49:a9:
59:06:98:1f:7b:90:26:33:8a:3c:fb:9f:53:d3:42:
b7:ff:0f:00:98:a3:c8:66:26:ca:d5:52:03:8b:53:
81:b6:11:41:98:50:82:31:3a:4f:82:94:48:74:d6:
c1:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:47:89:84:93:74:42:D6:5C:78:79:C0:1C:29:89:4F:65:F4:87:99
X509v3 Authority Key Identifier:
keyid:9E:45:9A:A4:60:2B:FF:A2:D2:65:0B:A6:68:18:45:8C:89:FC:45:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nkWapGAr_6LSZQumaBhFjIn8RYI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/qkeJhJN0QtZceHnAHCmJT2X0h5k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/9cc333-68d5-4692-9c5b-28a841da0bfd/1/nkWapGAr_6LSZQumaBhFjIn8RYI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.247.75.0/24
89.149.17.0/24
Signature Algorithm: sha256WithRSAEncryption
56:e6:25:de:43:82:e6:e3:ba:cb:6e:c3:f7:a7:ae:85:e1:77:
ca:77:6e:1e:fb:50:16:96:11:9a:1f:1c:c5:10:a5:99:b0:74:
2d:3f:c0:c1:63:fb:d0:02:5b:af:5d:74:6b:70:17:75:6e:ba:
3f:28:86:86:87:9f:ce:ed:d1:4c:3d:a3:97:23:95:d6:3b:15:
f5:e4:5c:64:ca:2d:2a:cd:12:d0:a1:ee:bc:48:e2:d7:09:ca:
8f:dd:d1:b9:0f:55:bd:8a:c0:d8:ef:9d:9b:50:d9:18:f4:ce:
44:0e:47:1c:8a:48:e9:be:c3:c6:cb:81:15:5b:c9:b3:b1:77:
e1:b6:08:45:80:4d:16:eb:b9:98:01:c8:59:70:ae:c0:96:39:
3e:03:83:5f:80:e9:0c:57:6e:42:b3:e3:50:6b:05:d6:77:fa:
dd:01:20:50:43:c4:b7:03:43:97:13:77:27:69:e2:a5:b4:42:
d4:28:6b:3b:a3:54:1b:0e:d4:fd:ec:b2:1e:aa:9a:28:24:60:
38:8a:c9:63:64:b3:26:9d:03:fd:e2:92:18:6c:cc:08:4b:e4:
32:7b:3f:8f:d8:4d:55:6d:2b:0f:03:87:b3:bb:43:35:3e:2b:
21:40:dd:a5:7f:fd:f0:a8:f5:e6:48:47:2d:a6:52:8d:21:b5:
fe:44:3f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 11 22:51:09 2026 by rpki-client