Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/qrjp9YZoLT1ni6NBSvsDUG2FTzQ.roa
File: qrjp9YZoLT1ni6NBSvsDUG2FTzQ.roa (raw, json)
Hash identifier: Csm3yKV22mYIssa/Q+4j2wh1sclgSDQ7+zYJBUnMJQk=
Subject key identifier: AA:B8:E9:F5:86:68:2D:3D:67:8B:A3:41:4A:FB:03:50:6D:85:4F:34
Certificate issuer: /CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Certificate serial: 01A0397CE46DC5D8178E4440F99027449740
Authority key identifier: 51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/qrjp9YZoLT1ni6NBSvsDUG2FTzQ.roa
Signing time: Tue 25 Aug 2026 15:14:41 +0000
ROA not before: Tue 25 Aug 2026 15:14:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152698
IP address blocks: 77.246.220.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.mft
rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:7c:e4:6d:c5:d8:17:8e:44:40:f9:90:27:44:97:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5124fba1e401c03e5ba1cd77ae9ee39cfd631bfb
Validity
Not Before: Aug 25 15:14:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aab8e9f586682d3d678ba3414afb03506d854f34
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:fc:90:cb:b0:5d:de:4e:6f:08:a7:9b:c5:66:
01:57:5b:e9:86:b7:7a:fb:5d:e4:5c:db:3a:8d:a9:
cc:f6:e5:2d:c3:00:fd:4e:db:79:96:b4:c4:ac:6e:
59:d5:48:55:f2:e0:2c:99:0b:64:9f:07:ec:97:b9:
4b:d1:58:07:60:af:22:61:48:99:7d:1d:cb:ef:7a:
c4:33:0c:e2:17:a3:64:d2:9f:4c:f6:c3:72:02:d2:
86:e1:e6:4f:7f:39:1e:96:52:41:c0:e1:5d:fa:3d:
98:cb:cc:c5:b4:8d:3d:cb:1e:17:fd:3e:c1:ae:61:
51:c6:81:92:ec:97:68:6d:45:c8:ca:27:f0:4a:80:
e6:7a:9c:02:85:c6:e9:6f:51:9b:5a:03:28:8c:66:
b8:a7:97:66:98:4a:24:ed:0e:22:94:37:03:e3:13:
cc:bb:3c:4c:5e:25:de:9f:00:e4:60:c3:d4:50:c6:
dc:df:f2:c5:d0:e4:39:b2:01:f5:2b:a3:2d:0c:d9:
ac:ed:f5:21:32:13:2b:00:81:c0:c9:f9:d2:92:b6:
19:89:eb:ca:42:9e:f0:7e:89:eb:3d:84:a3:eb:ca:
83:72:e2:9c:94:fc:78:01:96:00:16:15:2f:0f:41:
7f:93:99:57:d7:3a:50:19:56:24:4e:d1:c5:75:ab:
32:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B8:E9:F5:86:68:2D:3D:67:8B:A3:41:4A:FB:03:50:6D:85:4F:34
X509v3 Authority Key Identifier:
keyid:51:24:FB:A1:E4:01:C0:3E:5B:A1:CD:77:AE:9E:E3:9C:FD:63:1B:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UST7oeQBwD5boc13rp7jnP1jG_s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/qrjp9YZoLT1ni6NBSvsDUG2FTzQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b714ad-1f78-4a10-8e61-ab8f1f3387ee/1/UST7oeQBwD5boc13rp7jnP1jG_s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.246.220.0/24
Signature Algorithm: sha256WithRSAEncryption
74:46:87:54:34:a9:a6:8c:51:2f:ce:95:45:88:e3:81:93:26:
7d:5c:96:44:3f:65:ac:5e:41:c8:77:c6:82:da:fb:09:68:72:
4e:85:47:c0:59:49:92:b0:60:6a:43:4a:a6:bd:15:11:94:0e:
bf:10:5b:2f:da:f7:39:e7:2d:53:82:d7:76:65:b9:70:2d:b0:
77:c3:ce:ef:d0:d4:95:88:62:ce:ac:f5:73:cd:10:4f:2a:fd:
f9:d0:40:26:d2:b9:a6:42:05:f6:1f:68:14:fe:f2:9e:f2:10:
32:94:ce:9d:48:46:ce:90:b4:6e:d9:59:c6:f9:29:66:6a:ef:
60:84:f6:3c:a7:69:4f:aa:0c:d7:7d:c2:6f:bb:79:0b:8d:8e:
b4:b6:57:c3:e9:3c:f8:dc:57:c8:56:df:52:2a:ae:ba:e5:75:
83:fb:93:b1:6b:ee:3e:92:70:8b:55:8e:a9:b7:6a:42:45:c8:
8b:79:e9:1e:2e:2b:7a:4e:02:8e:d2:a2:c0:7d:eb:52:59:ec:
d0:83:32:cf:73:09:6a:65:ca:25:32:ab:a1:d5:9f:b1:ea:7d:
1d:27:8b:17:b8:7f:26:42:2c:58:aa:a1:c6:5a:93:82:ed:7e:
0d:0c:08:7a:3d:ed:1b:5d:98:d1:51:c1:7d:35:17:c5:9b:35:
96:a0:bd:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 26 20:25:59 2026 by rpki-client