Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/sMQ-1nZpgybI9ZwabptfhheDX74.roa
File: sMQ-1nZpgybI9ZwabptfhheDX74.roa (raw, json)
Hash identifier: zvln+53336ygn7VRFII602P9R5eFXnLjyVlGVFr69Is=
Subject key identifier: B0:C4:3E:D6:76:69:83:26:C8:F5:9C:1A:6E:9B:5F:86:17:83:5F:BE
Certificate issuer: /CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Certificate serial: 01A01554B3BEDBC409B417879380E665ABA6
Authority key identifier: AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/sMQ-1nZpgybI9ZwabptfhheDX74.roa
Signing time: Tue 18 Aug 2026 14:44:27 +0000
ROA not before: Tue 18 Aug 2026 14:44:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6712
IP address blocks: 82.117.240.0/24 maxlen: 24
82.117.246.0/24 maxlen: 24
91.250.0.0/19 maxlen: 24
91.250.32.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.mft
rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 14:07:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:15:54:b3:be:db:c4:09:b4:17:87:93:80:e6:65:ab:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae7a9b1745a5a70c3bf7bcc2c2ee166460aff7a8
Validity
Not Before: Aug 18 14:44:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b0c43ed676698326c8f59c1a6e9b5f8617835fbe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:20:32:4d:b5:4c:df:9e:f8:7a:22:ae:79:ce:
5b:1b:55:3e:87:82:6c:f0:5b:9a:a8:96:36:51:8b:
a5:c4:70:6b:52:17:12:6e:08:3a:97:cc:7e:6a:dd:
be:d3:6e:11:84:2e:7e:cd:bc:c8:ff:d9:3a:df:d7:
e2:35:58:bb:d0:65:01:06:57:ea:3b:65:91:99:a8:
02:39:c4:85:a7:5f:6c:aa:82:36:62:27:8f:5a:0e:
65:d5:64:ad:cc:6d:48:bb:0e:33:9b:a5:eb:e8:6c:
c2:62:26:76:42:29:55:e0:9e:be:60:63:eb:aa:ff:
6f:3e:b8:a5:5c:fc:72:97:66:18:a4:4a:c4:f6:dd:
88:c1:3d:b6:7f:93:40:fd:7d:28:a1:06:fa:71:0f:
2f:16:7c:dc:69:f1:bd:22:b8:99:af:64:2d:07:69:
b5:54:4b:fd:eb:e0:45:74:d0:ea:2b:5d:5c:ec:d3:
6c:c8:8d:3b:c7:28:7d:7a:95:61:b0:a3:60:7e:8f:
6c:fe:3b:44:da:d7:15:23:bc:75:76:63:da:86:8f:
0f:00:65:6f:e8:6e:9d:2f:24:d6:93:7a:1d:17:7e:
31:1c:a4:3e:04:50:f9:0b:33:8f:94:40:d0:fc:91:
86:37:9f:84:40:b9:38:b8:33:21:23:89:22:b9:63:
96:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:C4:3E:D6:76:69:83:26:C8:F5:9C:1A:6E:9B:5F:86:17:83:5F:BE
X509v3 Authority Key Identifier:
keyid:AE:7A:9B:17:45:A5:A7:0C:3B:F7:BC:C2:C2:EE:16:64:60:AF:F7:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rnqbF0Wlpww797zCwu4WZGCv96g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/sMQ-1nZpgybI9ZwabptfhheDX74.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/6e909d-d325-48a1-9443-cc9a758c9916/1/rnqbF0Wlpww797zCwu4WZGCv96g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.117.240.0/24
82.117.246.0/24
91.250.0.0/18
Signature Algorithm: sha256WithRSAEncryption
9f:30:84:04:dc:05:47:91:fc:bc:b7:ca:7a:76:a6:51:12:fa:
3e:50:c6:fa:fe:23:31:78:fa:4b:e9:15:99:c3:eb:bf:24:2f:
af:ca:36:fe:37:0c:b6:9f:f7:f7:e2:60:49:3f:28:6c:2b:95:
08:0c:4a:d8:29:54:dd:38:d8:50:36:11:23:51:c6:47:55:dd:
62:a8:26:e9:9e:25:73:2a:70:e3:fe:53:c9:52:51:82:f7:c6:
24:2d:b3:a9:d5:bd:f4:d7:09:0d:2d:36:95:43:35:b5:cc:44:
5c:88:fb:8e:c5:42:6b:a8:82:43:e1:bc:da:d6:f2:d3:8d:fe:
af:7c:e8:23:39:27:8a:c2:84:df:a7:4f:4b:56:8a:20:85:bf:
f4:76:37:66:dc:62:b2:16:47:a2:aa:09:b8:54:47:15:79:85:
1c:96:f2:74:59:69:59:13:9f:0d:e2:22:30:a4:5e:8c:6f:48:
fb:42:2e:6a:61:ee:01:ac:2d:ed:ac:89:5f:4e:ff:c8:38:98:
3c:de:9f:9e:00:32:a1:8d:6a:1d:0b:53:cc:f0:74:d8:63:aa:
96:a1:4b:44:9b:a3:79:a1:92:66:19:e8:b1:d9:2b:4b:c2:8a:
e3:f6:4a:d0:a2:43:33:8a:e8:80:92:0d:79:84:d0:a4:b2:e4:
f1:48:55:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 00:21:29 2026 by rpki-client