Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/qXO8sV99E8jX69UU2OPbSmbSckg.roa
File: qXO8sV99E8jX69UU2OPbSmbSckg.roa (raw, json)
Hash identifier: pOQG5Q4Xe4MsPGCFx3jpOHWzff9w+YTejnS8AqtrGbU=
Subject key identifier: A9:73:BC:B1:5F:7D:13:C8:D7:EB:D5:14:D8:E3:DB:4A:66:D2:72:48
Certificate issuer: /CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Certificate serial: 01A1364D319BFE54E70738CCA42BEC00EE5B
Authority key identifier: BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/qXO8sV99E8jX69UU2OPbSmbSckg.roa
Signing time: Tue 13 Oct 2026 17:26:30 +0000
ROA not before: Tue 13 Oct 2026 17:26:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33993
IP address blocks: 45.67.230.0/24 maxlen: 24
94.131.113.0/24 maxlen: 24
94.131.121.0/24 maxlen: 24
103.113.68.0/24 maxlen: 24
185.234.59.0/24 maxlen: 24
185.235.242.0/24 maxlen: 24
185.250.149.0/24 maxlen: 24
2a09:7c47::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:36:4d:31:9b:fe:54:e7:07:38:cc:a4:2b:ec:00:ee:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb830630f23b070a2b7bdf529f73948c97eacd40
Validity
Not Before: Oct 13 17:26:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a973bcb15f7d13c8d7ebd514d8e3db4a66d27248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:e5:ec:91:0d:5c:9d:21:47:5c:34:18:bd:12:
d5:6b:90:f3:a5:b9:6e:61:e7:fc:cc:db:27:3a:c0:
97:0a:a8:8b:de:de:79:8e:23:15:b0:cb:6b:40:94:
4f:bd:7a:c6:59:22:6e:b8:58:ba:ae:36:9e:55:6d:
f2:0c:70:44:69:70:ce:63:5c:14:43:f7:ee:08:25:
e5:57:69:0a:01:44:33:d0:d6:e3:ff:cf:63:67:20:
ca:88:45:78:32:dc:e0:43:22:20:81:f2:7a:55:26:
54:c0:b7:cd:b5:ed:f3:4a:fb:5b:84:82:ae:b8:27:
be:5f:67:3b:3d:75:6c:0a:bc:78:32:9e:71:00:d7:
d1:90:50:08:c0:14:9e:32:f5:64:da:8e:e8:06:c6:
b7:18:71:d8:6f:2b:6e:6f:4b:cd:f3:88:87:74:ce:
96:24:6e:f8:3f:b7:a5:a1:cb:e8:c2:6a:fb:5f:50:
a5:f8:49:c1:6b:2d:ba:a5:90:b3:42:d8:0c:e9:0d:
19:c0:9f:89:52:d3:cc:dc:a5:25:ad:50:9e:47:51:
0c:31:df:37:df:ce:9b:10:83:f8:f8:dd:a7:1a:04:
e5:85:9b:d9:15:68:62:1f:2a:f6:5d:12:39:be:f1:
ab:80:27:94:74:cf:d0:b2:21:dc:a3:b1:4e:ec:df:
79:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:73:BC:B1:5F:7D:13:C8:D7:EB:D5:14:D8:E3:DB:4A:66:D2:72:48
X509v3 Authority Key Identifier:
keyid:BB:83:06:30:F2:3B:07:0A:2B:7B:DF:52:9F:73:94:8C:97:EA:CD:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u4MGMPI7Bwore99Sn3OUjJfqzUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/qXO8sV99E8jX69UU2OPbSmbSckg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/f76e20-5859-415d-86b3-119efcbb2023/1/u4MGMPI7Bwore99Sn3OUjJfqzUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.67.230.0/24
94.131.113.0/24
94.131.121.0/24
103.113.68.0/24
185.234.59.0/24
185.235.242.0/24
185.250.149.0/24
IPv6:
2a09:7c47::/32
Signature Algorithm: sha256WithRSAEncryption
7d:60:ed:25:6d:63:fd:e9:69:33:dc:e6:02:e8:17:ea:ba:10:
78:1f:09:72:13:24:c6:97:54:d4:ee:a4:1c:df:50:a6:67:33:
63:16:59:dd:87:7b:6a:40:e2:bd:98:73:a9:1b:b0:d1:4e:b6:
b7:d0:20:95:63:84:5d:63:b7:6a:e9:3d:03:74:99:b8:8a:7b:
3f:9d:4f:51:f3:4f:f9:e0:d6:f8:7a:47:c6:fe:8b:6a:b5:2b:
4b:f9:1c:36:90:b8:4b:4b:f4:ab:09:40:8f:73:7e:80:42:f8:
4a:b6:fd:3c:80:10:84:49:bf:16:6f:f9:d4:68:d1:df:3f:2c:
96:74:90:41:61:4d:2a:01:70:13:f9:ad:21:49:dc:32:25:45:
0a:25:1b:ad:0b:3c:d9:1f:72:a2:df:c6:55:6a:6e:4f:94:5f:
7e:06:8d:69:e0:55:94:7c:d4:55:05:88:74:36:5e:c8:97:d9:
d3:fb:60:ed:1e:3f:bc:ed:c5:cc:58:79:bd:72:84:49:c9:bf:
40:de:4a:3d:7d:f3:2b:f6:e6:3e:91:a4:1d:a5:89:91:08:7e:
91:f2:f7:60:73:1d:05:c4:71:9c:33:8f:03:d2:a5:64:cc:e6:
9a:40:c4:6b:ea:d5:60:87:19:e2:91:72:c5:01:dd:74:31:66:
b7:dc:bb:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 22 17:39:19 2026 by rpki-client