Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/qfTY39j6wENhgC39URgloBvaDwc.roa
File: qfTY39j6wENhgC39URgloBvaDwc.roa (raw, json)
Hash identifier: MJgSYqEnjtZo7TnO5PmqwrhzDK5fq5ePybyEEHZ72Z8=
Subject key identifier: A9:F4:D8:DF:D8:FA:C0:43:61:80:2D:FD:51:18:25:A0:1B:DA:0F:07
Certificate issuer: /CN=4459120809c23bf3033e3f573995276f0c7a2533
Certificate serial: 019F23688920B2F01506E13ED6F2818D05C5
Authority key identifier: 44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/qfTY39j6wENhgC39URgloBvaDwc.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 59729
IP address blocks: 91.218.176.0/22 maxlen: 24
91.232.8.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:89:20:b2:f0:15:06:e1:3e:d6:f2:81:8d:05:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4459120809c23bf3033e3f573995276f0c7a2533
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9f4d8dfd8fac04361802dfd511825a01bda0f07
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:69:b8:41:29:8d:65:ef:32:94:8a:2d:cf:cd:
18:93:f0:22:82:a6:93:df:8f:1e:18:df:f6:d4:fc:
f7:c4:be:92:4a:37:7f:1d:dc:78:56:ee:c2:da:91:
f4:e9:c5:93:11:76:72:12:99:5a:c3:d1:d3:a0:2a:
b0:c6:eb:5d:7c:15:39:82:ae:53:b5:df:1d:00:b4:
e3:6a:5e:56:8f:aa:7f:e4:b1:cf:96:6c:7e:23:00:
41:d8:6a:90:97:34:87:cc:ae:0a:3b:3f:ec:4d:db:
4b:4e:57:aa:24:fb:9e:15:08:a6:e9:79:f8:cf:38:
9b:ab:b2:c6:8d:eb:f1:0e:d2:ba:8c:cf:70:0b:7b:
8e:4a:11:9d:11:1c:5b:41:de:6e:13:3b:10:f2:8d:
b5:4b:dd:71:ac:4c:d2:7b:29:22:b5:0d:0e:3e:79:
ac:5e:d0:0f:8b:03:9f:a5:e9:ef:77:5f:e1:8e:9c:
20:7a:21:d6:b9:e0:45:33:7c:38:ad:a0:b5:e9:00:
71:68:4e:91:eb:79:6e:89:8d:90:d2:ae:ae:c0:50:
c0:92:11:b4:47:ab:89:cd:d7:bf:da:32:a3:3c:ec:
af:e7:ac:3f:5d:6e:64:a6:87:9f:dc:8c:82:32:71:
6e:54:27:41:4c:38:85:18:36:e4:68:32:aa:90:09:
ac:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F4:D8:DF:D8:FA:C0:43:61:80:2D:FD:51:18:25:A0:1B:DA:0F:07
X509v3 Authority Key Identifier:
keyid:44:59:12:08:09:C2:3B:F3:03:3E:3F:57:39:95:27:6F:0C:7A:25:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RFkSCAnCO_MDPj9XOZUnbwx6JTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/qfTY39j6wENhgC39URgloBvaDwc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/3c7af6-f466-4d87-b9f1-cca79a69820a/1/RFkSCAnCO_MDPj9XOZUnbwx6JTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.218.176.0/22
91.232.8.0/22
Signature Algorithm: sha256WithRSAEncryption
75:a8:59:c8:42:63:ad:d4:af:db:92:cf:94:51:07:f2:c5:84:
a4:df:45:55:35:14:37:6d:14:a7:75:a3:cf:d7:28:81:66:e8:
6d:ef:87:39:9b:80:5c:5e:ad:d9:07:98:97:2c:a8:66:d1:14:
98:aa:ac:29:e8:eb:d7:2a:4f:85:ae:a7:63:01:b3:e7:58:35:
01:2e:5a:56:59:29:2d:30:22:e4:64:4c:35:6f:71:54:19:ba:
15:f5:72:8f:20:22:a5:98:99:54:6c:ce:48:67:83:02:64:4f:
05:4d:42:57:a5:99:af:16:0c:d2:f8:6b:47:ae:25:ed:4a:9c:
b8:3e:85:11:e5:bb:18:b0:df:a2:a0:47:21:79:2a:42:c0:a0:
6c:f1:d8:9a:ff:32:c9:96:ca:95:9d:ca:d4:94:b1:48:9b:6e:
0b:d3:23:6f:d3:58:dc:50:cf:10:ad:aa:61:a9:9d:1a:0f:68:
d0:66:38:7f:1a:ee:35:25:e0:12:da:8e:ef:59:ae:1f:82:3e:
1f:f1:4a:3e:6e:bb:e0:2e:9d:8f:d1:d1:db:f4:37:f2:76:6e:
30:79:ef:71:af:41:6d:2d:22:bd:33:aa:18:e3:c0:65:0f:cd:
27:0b:d7:04:81:e1:67:00:48:b8:f9:27:5b:a1:8c:78:74:3e:
d9:b9:68:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 18 02:54:29 2026 by rpki-client