Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/qThwM4VOPtwJ-fORifwyTLzk-FM.roa
File: qThwM4VOPtwJ-fORifwyTLzk-FM.roa (raw, json)
Hash identifier: inwDpdNUtTVuD4hxozBiGnVD6vXL05h5rizEBbo4mSI=
Subject key identifier: A9:38:70:33:85:4E:3E:DC:09:F9:F3:91:89:FC:32:4C:BC:E4:F8:53
Certificate issuer: /CN=a4537cbedad356819cbc77ae3fca17d65431c280
Certificate serial: 019F2368FF79908B5F61F60D9BBF11695B68
Authority key identifier: A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/qThwM4VOPtwJ-fORifwyTLzk-FM.roa
Signing time: Thu 02 Jul 2026 15:18:31 +0000
ROA not before: Thu 02 Jul 2026 15:18:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 45566
IP address blocks: 89.207.228.0/24 maxlen: 24
89.207.231.0/24 maxlen: 24
185.25.28.0/23 maxlen: 23
2a00:79e0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 09 Jul 2026 13:45:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ff:79:90:8b:5f:61:f6:0d:9b:bf:11:69:5b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4537cbedad356819cbc77ae3fca17d65431c280
Validity
Not Before: Jul 2 15:18:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9387033854e3edc09f9f39189fc324cbce4f853
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:40:fb:5f:be:38:97:4e:a2:09:94:aa:a7:51:
80:f9:4e:e3:7e:46:7c:50:1e:ef:09:aa:bc:1c:b8:
f3:3a:16:1e:e5:1d:a0:6c:33:42:ae:69:60:0d:21:
25:e0:46:ec:da:f3:76:db:4c:b0:15:50:d5:06:f8:
37:84:95:4a:3b:64:33:df:be:17:b2:70:91:26:e5:
5a:7c:d1:29:64:86:ff:88:f9:65:40:88:fc:9f:7c:
44:29:2b:f3:27:fd:91:5c:10:99:d4:e8:9e:b6:3c:
42:cf:09:c5:67:29:c9:1b:87:c4:33:99:2c:02:f6:
8e:86:e3:73:0a:bf:81:34:91:c8:6d:19:4c:83:41:
e2:d6:56:c8:c1:ef:9d:b3:48:c7:eb:38:86:b8:c1:
11:bb:98:b9:b2:e8:b4:2c:a8:a6:97:e0:6c:12:29:
24:4b:dc:50:67:56:fa:08:1e:4e:99:06:7b:76:5f:
83:a9:61:b5:ac:b2:93:1a:88:8d:c6:f2:2e:5a:9b:
4c:a3:a4:d4:bd:6d:6c:b9:b3:88:95:01:ef:26:32:
0e:d5:cb:0f:ba:75:f3:b2:19:51:7d:df:36:69:e0:
57:19:f7:83:73:11:08:df:29:e1:63:dc:e4:a5:0e:
39:8c:a6:42:c7:f2:f7:90:26:8c:bb:fc:42:5f:18:
94:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:38:70:33:85:4E:3E:DC:09:F9:F3:91:89:FC:32:4C:BC:E4:F8:53
X509v3 Authority Key Identifier:
keyid:A4:53:7C:BE:DA:D3:56:81:9C:BC:77:AE:3F:CA:17:D6:54:31:C2:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pFN8vtrTVoGcvHeuP8oX1lQxwoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/qThwM4VOPtwJ-fORifwyTLzk-FM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/2406ab-3bcb-41bc-a942-368608385883/1/pFN8vtrTVoGcvHeuP8oX1lQxwoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.228.0/24
89.207.231.0/24
185.25.28.0/23
IPv6:
2a00:79e0::/32
Signature Algorithm: sha256WithRSAEncryption
34:be:63:66:e2:88:d0:2f:fa:27:8a:86:b4:3a:b5:e7:d9:24:
a6:ce:20:7c:c0:3e:b3:33:a3:de:d3:f6:a1:53:21:15:00:f9:
55:f9:00:4d:b9:b7:97:85:c4:f1:b6:a3:09:0b:d8:a9:e1:93:
98:2f:09:72:94:50:34:0f:8e:54:5c:87:ba:d7:a5:7a:cc:e1:
85:62:d0:13:0b:bc:ca:cc:60:46:a9:56:31:32:fc:31:65:e9:
b2:55:65:ac:13:69:c5:f4:d5:d9:15:da:d8:b0:07:5e:90:af:
2c:8d:09:32:be:4f:66:99:b7:c7:e2:2b:59:bb:eb:0a:dc:d9:
84:cc:03:bd:dc:89:83:c3:64:e3:9c:9e:33:fa:23:0f:38:41:
10:80:cb:cb:d9:48:e6:6f:46:be:f5:76:fa:f9:76:fd:bf:7d:
a7:a5:56:13:c8:b4:7a:de:d7:33:28:5a:4f:b4:4b:20:c1:79:
62:4a:4b:55:fd:68:da:9a:2c:62:11:32:3e:35:84:e8:f5:3d:
09:f9:b0:c0:e3:ae:16:05:75:03:64:16:07:1f:d4:ff:53:7d:
5e:8a:7a:d9:4a:e3:c4:86:fd:fb:c7:e1:fb:35:fa:21:60:01:
50:3d:73:7a:3a:0b:d0:83:c5:8c:99:a6:19:b1:08:c7:c9:e2:
02:53:4c:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 8 19:54:36 2026 by rpki-client