Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/CQNCk_8JUvxiya1fY6uZ4O0cGnM.roa
File: CQNCk_8JUvxiya1fY6uZ4O0cGnM.roa (raw, json)
Hash identifier: q4eeH69RkITHAJ0YT3SMEtqAB5691SG8O5lMxJGEw0M=
Subject key identifier: 09:03:42:93:FF:09:52:FC:62:C9:AD:5F:63:AB:99:E0:ED:1C:1A:73
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A145E407B2BA617A93B0CE0EE6B34830CD
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/CQNCk_8JUvxiya1fY6uZ4O0cGnM.roa
Signing time: Fri 16 Oct 2026 18:05:34 +0000
ROA not before: Fri 16 Oct 2026 18:05:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213438
IP address blocks: 205.234.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 03:05:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:45:e4:07:b2:ba:61:7a:93:b0:ce:0e:e6:b3:48:30:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Oct 16 18:05:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=09034293ff0952fc62c9ad5f63ab99e0ed1c1a73
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:81:9e:85:5b:e4:29:61:52:e4:ed:89:8a:46:
c9:30:54:12:f1:5c:68:b8:6e:6c:0d:22:43:00:13:
e6:c1:b3:bb:58:fc:40:67:2b:63:b2:85:27:be:32:
a9:fb:1c:ea:38:b4:49:b7:ee:70:18:6b:47:e7:e3:
ff:9a:43:d1:63:4e:60:29:41:45:a9:99:e8:9c:31:
32:7a:8d:be:a9:a4:34:e3:fe:00:d2:63:ce:71:2a:
91:41:34:04:4b:51:23:64:ea:4a:f5:5a:23:14:4c:
4b:61:91:25:ae:68:b1:c3:25:ee:b0:77:a0:5a:f3:
8a:43:f2:5f:f8:96:13:75:09:87:1a:e3:d7:f3:3c:
93:d2:b4:7f:7a:30:69:42:e0:82:d6:a9:ab:1e:fc:
ff:17:6a:fe:12:a6:ae:97:a3:63:c0:de:c1:80:c1:
90:94:9c:58:ba:14:1a:f1:b7:7f:ce:a6:39:eb:eb:
74:08:da:ac:0b:20:97:42:6e:c4:87:0a:8a:7f:43:
92:2a:da:61:63:f1:ff:5a:6d:42:4e:4b:88:50:fd:
b3:69:b7:ac:f4:65:82:09:ce:92:6b:3f:b4:fb:86:
f1:b7:71:13:ac:a5:60:d9:9a:0e:8d:fb:9d:6e:79:
86:f4:1e:95:80:b0:3e:90:24:4a:50:9e:09:a5:87:
f1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:03:42:93:FF:09:52:FC:62:C9:AD:5F:63:AB:99:E0:ED:1C:1A:73
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/CQNCk_8JUvxiya1fY6uZ4O0cGnM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.234.121.0/24
Signature Algorithm: sha256WithRSAEncryption
9b:a1:a7:7c:01:bd:08:ce:21:6d:56:3e:69:9c:05:3e:d0:39:
e0:18:d0:36:37:33:a6:2e:11:48:1a:5b:38:af:16:2c:83:fc:
a4:95:0d:1f:48:10:60:e6:89:ce:32:8c:ed:fe:9e:bc:bf:fe:
c0:69:59:1a:14:79:b9:b1:c4:a4:6e:90:bc:50:21:06:d8:ae:
e8:cd:62:b4:97:60:f1:94:56:02:74:ff:9d:0f:84:67:45:d4:
cc:94:21:2a:74:fb:48:a3:22:26:d3:6a:14:48:0a:70:34:e0:
01:78:70:2d:c7:f7:b0:94:08:0d:df:b6:e3:29:34:49:5f:7e:
6a:55:4c:0a:6f:fb:1c:fa:96:d6:e4:c6:8b:7f:25:db:a3:de:
db:f1:11:77:99:9e:bc:9c:40:6a:3b:2c:17:d6:e9:8a:b5:57:
1a:3c:05:87:38:1d:af:84:96:2f:09:3e:96:8f:a3:7f:10:55:
df:77:d7:82:33:ee:4f:5f:9c:42:81:c9:e2:d7:21:4a:f5:29:
f7:02:3b:0b:e8:b6:40:a0:d6:11:72:ba:5a:83:15:7a:a2:9f:
10:28:95:56:69:42:04:08:5d:27:4c:13:56:95:33:5c:90:22:
da:09:a2:68:28:05:6d:f6:bc:7d:0e:ca:7c:24:ba:7a:51:20:
ee:b5:b6:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 08:27:04 2026 by rpki-client