Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qgyLt7vvuS8TQvO6A_IGYdc4FcY.roa
File: qgyLt7vvuS8TQvO6A_IGYdc4FcY.roa (raw, json)
Hash identifier: 5Lb+ZAOoEigqMilSf/DoMefYC8YS1M6URebwEVKZeao=
Subject key identifier: AA:0C:8B:B7:BB:EF:B9:2F:13:42:F3:BA:03:F2:06:61:D7:38:15:C6
Certificate issuer: /CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Certificate serial: 019FCC1D8AB1A136ACED29B356BD1038B793
Authority key identifier: F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qgyLt7vvuS8TQvO6A_IGYdc4FcY.roa
Signing time: Tue 04 Aug 2026 09:31:55 +0000
ROA not before: Tue 04 Aug 2026 09:31:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 89.42.82.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 08:01:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cc:1d:8a:b1:a1:36:ac:ed:29:b3:56:bd:10:38:b7:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1d46e0e3e8caaaed4a529bd7d7308bd1ef01c1d
Validity
Not Before: Aug 4 09:31:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa0c8bb7bbefb92f1342f3ba03f20661d73815c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:12:c6:f1:03:0b:b0:65:65:83:5f:47:6a:05:
50:17:49:ac:d8:89:65:27:85:53:2b:74:30:ee:f1:
5a:09:b6:65:3b:8d:bc:87:b4:ce:e1:35:5e:45:04:
7e:75:20:e7:f4:cb:24:3e:64:99:01:e5:78:0b:90:
c9:fc:d7:60:b3:47:dd:3f:1f:76:0e:48:bd:b1:2e:
64:34:67:8b:e8:83:16:a1:e8:f8:91:26:67:f8:4b:
70:53:cb:6b:da:13:31:68:67:da:39:2f:d0:5e:36:
2d:29:89:bd:5f:40:13:00:91:18:c8:15:f3:35:94:
fb:f5:34:9b:d8:37:cb:bb:07:8c:50:26:02:78:0c:
08:b7:fa:4e:1b:82:18:e4:27:48:f8:da:a1:f1:c5:
c6:0d:6c:23:68:04:37:56:37:97:be:28:06:b7:ef:
bd:a8:41:13:f0:40:de:5c:16:08:7f:f2:38:b9:0f:
31:81:76:7f:02:e7:f4:ce:7a:d0:d9:ca:2e:d0:d3:
56:cc:0e:72:98:d5:7f:b4:c7:41:39:73:f0:81:c0:
6d:7d:70:95:c2:d5:13:49:60:33:82:4f:9a:ec:77:
cd:3e:21:0d:85:65:d2:53:99:f6:a5:e8:c6:d2:ca:
57:b0:8d:27:f1:1c:9c:57:6c:1e:e9:81:4a:a3:ef:
f7:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0C:8B:B7:BB:EF:B9:2F:13:42:F3:BA:03:F2:06:61:D7:38:15:C6
X509v3 Authority Key Identifier:
keyid:F1:D4:6E:0E:3E:8C:AA:AE:D4:A5:29:BD:7D:73:08:BD:1E:F0:1C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/qgyLt7vvuS8TQvO6A_IGYdc4FcY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/84eb44-bbdf-46c1-b043-b42f23d828c3/1/8dRuDj6Mqq7UpSm9fXMIvR7wHB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.42.82.0/23
Signature Algorithm: sha256WithRSAEncryption
84:cb:87:fd:8c:73:69:48:11:a6:92:9e:25:95:a6:0b:1d:99:
86:ec:ce:8f:58:9f:28:0d:e4:9c:d4:1d:03:10:ee:d2:13:e5:
c7:48:20:98:fa:e3:fd:9f:cf:08:84:e0:c7:3f:80:24:e1:d0:
a0:4e:14:81:0f:36:d9:2a:f0:3c:04:58:ff:b9:9e:db:de:c2:
69:5d:b8:77:17:18:91:32:0d:0f:a9:fe:24:a7:50:49:ce:60:
db:5b:43:0a:bf:fd:e5:ea:b1:18:76:fc:c7:8e:a7:51:e4:52:
c4:51:4a:df:72:5d:17:1b:01:a7:64:08:f6:3a:42:99:95:89:
c0:be:43:2f:71:33:0a:84:04:5f:78:55:56:c7:93:08:89:b8:
64:28:1a:98:6f:2e:34:69:42:2a:1c:53:34:6e:73:54:92:e2:
bd:ca:e7:69:4f:56:1c:85:90:cb:c4:80:7e:fc:20:1f:ac:35:
54:90:84:cc:8d:99:e2:7c:5d:5a:fb:84:7b:94:0a:f0:ac:f0:
b7:be:cb:8f:e3:ea:ee:bc:6c:09:b1:35:48:b4:0e:b3:ff:7c:
0c:7d:1f:b0:bc:64:0a:30:c5:90:0f:85:c4:d8:d2:85:c2:fd:
21:50:e6:a7:83:78:e8:9a:78:4c:7e:57:83:3c:63:21:1e:95:
80:c5:5e:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 12:19:05 2026 by rpki-client