Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/qCwleTge9FVIeDSIaTyl_itGPJc.roa
File: qCwleTge9FVIeDSIaTyl_itGPJc.roa (raw, json)
Hash identifier: GgyYwHCuTtAxDd7Rw8YrnVjz+mlCUAVIVNVqA/oXPUc=
Subject key identifier: A8:2C:25:79:38:1E:F4:55:48:78:34:88:69:3C:A5:FE:2B:46:3C:97
Certificate issuer: /CN=a9d2ecc9a61781ae87f4f6f82c119bb14b8223e6
Certificate serial: 019F2368B6A91EEACEDBFA27085FF25B1DC1
Authority key identifier: A9:D2:EC:C9:A6:17:81:AE:87:F4:F6:F8:2C:11:9B:B1:4B:82:23:E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/qCwleTge9FVIeDSIaTyl_itGPJc.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 30849
IP address blocks: 193.23.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b6:a9:1e:ea:ce:db:fa:27:08:5f:f2:5b:1d:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9d2ecc9a61781ae87f4f6f82c119bb14b8223e6
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a82c2579381ef45548783488693ca5fe2b463c97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:e1:19:37:aa:7f:85:03:9f:13:b7:35:e4:81:
0a:29:b3:06:6b:86:42:da:2b:60:dc:c6:d0:6e:51:
3e:d8:e0:b4:95:b6:d1:07:00:0f:11:85:ed:34:fc:
60:7f:fe:7d:bc:ff:de:6e:5c:ed:92:c6:bc:04:e2:
5f:83:7a:71:1c:f9:70:a1:a6:0e:de:9a:36:2d:99:
da:63:95:d7:da:52:d0:00:63:25:c1:b7:44:89:eb:
6b:10:9f:c1:20:55:29:07:08:7c:70:d5:f3:a6:52:
cf:cc:9b:7f:7b:d9:f6:f0:fe:b0:5c:a7:e6:91:bb:
4e:c4:d3:16:2c:e1:f2:10:48:a2:3f:aa:98:41:89:
0f:05:c6:1d:2a:33:8a:c4:e6:11:4b:fe:75:d2:4a:
ca:9d:2f:07:aa:81:21:2e:c2:1d:72:ee:04:3c:13:
e8:49:ed:8a:b0:e0:d4:12:e5:4f:36:76:42:ff:84:
5f:70:39:ed:26:bb:8d:c3:e5:28:40:9c:ef:b5:52:
c0:6b:9d:fd:08:98:79:62:17:04:13:a3:56:da:4c:
05:ea:12:8d:c5:13:5e:42:e3:c8:7e:b4:e8:58:30:
63:44:cd:6d:b6:b4:9b:d0:36:9d:21:01:46:bc:ff:
4b:ae:01:d2:e1:b9:cf:a0:9c:dc:93:f6:69:10:be:
a5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2C:25:79:38:1E:F4:55:48:78:34:88:69:3C:A5:FE:2B:46:3C:97
X509v3 Authority Key Identifier:
keyid:A9:D2:EC:C9:A6:17:81:AE:87:F4:F6:F8:2C:11:9B:B1:4B:82:23:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/qCwleTge9FVIeDSIaTyl_itGPJc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/3a90f5-65b5-40b5-8ed9-98c095c07e24/1/qdLsyaYXga6H9Pb4LBGbsUuCI-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.23.157.0/24
Signature Algorithm: sha256WithRSAEncryption
57:9a:08:6d:ee:0d:a7:35:60:a6:ff:eb:ea:4a:8e:1b:77:63:
e4:f3:6e:b8:fc:11:37:44:e8:ea:bf:08:04:90:9f:f4:fc:dd:
28:1f:3a:79:6d:4e:7e:b3:04:ad:5a:c2:ac:b5:ab:fc:1f:6b:
6f:51:87:5f:c1:f9:a6:f9:1d:d3:55:c8:51:bb:c9:7c:53:38:
52:70:0b:dd:09:fc:96:08:b1:84:80:45:31:66:79:f0:aa:68:
a3:8e:eb:92:5f:c8:40:b2:c8:ab:0c:8c:f1:51:e5:07:11:20:
0d:3b:e9:ed:ee:ea:90:75:7d:02:8f:1b:bc:1b:32:5e:27:89:
b6:25:09:53:b4:5b:1c:42:e8:19:36:f6:e3:e3:dd:27:3b:38:
b8:c7:69:ff:68:9b:f4:88:9e:b9:73:7f:17:e0:4e:2b:4e:39:
e8:37:76:41:36:fa:6f:a1:c7:91:97:f3:99:f5:9d:fe:36:61:
d4:c0:40:81:a1:5f:7c:38:f4:85:4b:7d:74:3a:f7:5f:0a:8f:
59:2c:87:ae:af:0b:d6:65:58:0f:0a:ea:f3:d0:8a:1f:6a:83:
ce:d6:8d:8a:16:e8:76:2a:8f:68:08:e4:95:dc:c8:fa:99:88:
4b:32:d3:a3:72:d2:da:45:a7:35:4f:86:48:e2:e8:9a:6c:44:
4f:4a:5a:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 22:22:02 2026 by rpki-client