Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/qFAp9vwtBvnM0TAN1d2-KFx1frk.roa
File: qFAp9vwtBvnM0TAN1d2-KFx1frk.roa (raw, json)
Hash identifier: os8SWww/ujG1WxOzifi0QqtVtj4TDuro/d64iAaXdcM=
Subject key identifier: A8:50:29:F6:FC:2D:06:F9:CC:D1:30:0D:D5:DD:BE:28:5C:75:7E:B9
Certificate issuer: /CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Certificate serial: 01A15BB77CBC2DB273288EAF601C6F182CF7
Authority key identifier: BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/qFAp9vwtBvnM0TAN1d2-KFx1frk.roa
Signing time: Tue 20 Oct 2026 23:48:34 +0000
ROA not before: Tue 20 Oct 2026 23:48:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43969
IP address blocks: 167.104.96.0/22 maxlen: 22
167.104.164.0/22 maxlen: 22
167.104.168.0/24 maxlen: 24
167.254.242.0/23 maxlen: 23
194.29.186.0/24 maxlen: 24
194.29.187.0/24 maxlen: 24
212.52.0.0/24 maxlen: 24
2a0a:c880::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5b:b7:7c:bc:2d:b2:73:28:8e:af:60:1c:6f:18:2c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb796955d6c64ddfa15cd4ac88ce54d3f8cb1344
Validity
Not Before: Oct 20 23:48:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a85029f6fc2d06f9ccd1300dd5ddbe285c757eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:03:90:b0:2a:64:30:5a:ca:21:d4:d9:ba:03:
55:55:35:82:e2:02:13:0e:28:cd:ea:3d:35:fe:9f:
44:54:34:54:53:a0:66:29:5a:e7:18:40:6e:a1:22:
73:ec:ff:30:18:85:7a:d1:b3:5a:07:ec:f3:f7:a0:
32:92:ef:b0:40:ac:d5:70:9a:c3:06:42:e7:0d:0c:
7f:06:b2:c8:28:e3:6b:a7:25:b5:e2:5e:b1:36:a9:
a5:cf:9d:22:3e:49:ef:31:b1:c7:bc:65:43:86:05:
cb:e1:1d:3a:b6:a6:ec:2b:7f:43:4a:45:02:9d:28:
7b:f2:0d:3a:dd:fc:f8:e6:7a:2a:ef:0c:d6:6e:5b:
fd:83:53:30:85:19:a4:46:da:6c:ab:7e:6f:55:c3:
79:fb:1d:8c:31:9e:42:f2:84:bd:ed:bb:75:63:35:
f3:e1:90:84:d1:4c:c2:d6:a5:88:98:38:fc:96:cf:
d9:67:9f:f5:36:c2:d8:25:ee:be:f9:3d:6a:ab:fc:
f2:74:0c:57:73:52:1e:6c:c2:27:ce:06:61:bb:22:
60:57:b0:f2:10:54:8a:bc:34:8f:67:00:b7:80:a1:
67:67:e7:cc:da:86:12:a0:ae:a9:39:b8:8b:f7:1c:
51:3b:ba:ec:bf:9b:94:00:bc:07:12:1e:a5:1d:5c:
b6:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:50:29:F6:FC:2D:06:F9:CC:D1:30:0D:D5:DD:BE:28:5C:75:7E:B9
X509v3 Authority Key Identifier:
keyid:BB:79:69:55:D6:C6:4D:DF:A1:5C:D4:AC:88:CE:54:D3:F8:CB:13:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/qFAp9vwtBvnM0TAN1d2-KFx1frk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/732a87-4db0-4ef1-bafb-ac4016120cb9/1/u3lpVdbGTd-hXNSsiM5U0_jLE0Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
167.104.96.0/22
167.104.164.0-167.104.168.255
167.254.242.0/23
194.29.186.0/23
212.52.0.0/24
IPv6:
2a0a:c880::/32
Signature Algorithm: sha256WithRSAEncryption
7c:25:71:01:f2:50:ab:b2:ca:e4:a8:32:4f:e8:68:9d:ef:7a:
ca:89:95:b8:bb:3b:f1:6a:54:fa:4f:08:6e:4d:58:9f:17:33:
17:33:2a:3d:d5:87:f6:b8:d8:bc:8e:f5:af:c0:57:4d:b4:33:
2e:d0:6f:04:4e:30:03:a9:7e:c1:b7:d3:0e:cc:96:cb:b8:b6:
8d:5a:a8:d2:36:2f:7d:7b:1a:af:d5:70:97:d7:a0:ed:89:b1:
c6:a7:65:91:c9:67:51:8d:1d:d3:4d:5d:38:ec:c5:fa:16:0c:
8b:49:c7:60:95:a5:c3:75:fc:a2:76:5f:69:c8:ac:bd:37:8b:
b6:3e:ea:b1:39:89:dd:f8:75:19:05:ed:42:d5:f6:e2:35:60:
19:fc:c2:ca:94:bf:91:68:a2:00:88:d2:cf:ac:58:aa:7e:3f:
f3:3f:57:a8:eb:d3:fb:2c:04:28:f2:dd:2a:08:f3:5d:64:79:
67:a8:e9:94:09:56:7c:2c:c5:0e:d8:e8:37:d1:6d:69:f7:94:
bf:48:bd:36:31:3f:54:01:7d:bc:cf:f6:be:58:7c:ac:1e:8c:
9a:f5:11:e4:ec:c9:be:af:20:5c:bc:67:0c:96:ca:a7:de:5a:
ff:28:77:b6:5e:ec:93:1c:9d:4a:c5:f9:1e:4e:32:52:f7:5b:
4b:05:31:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 09:58:03 2026 by rpki-client