Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/qsZILvHhUD5atVe56CMbQMX9BQA.roa
File: qsZILvHhUD5atVe56CMbQMX9BQA.roa (raw, json)
Hash identifier: nOyOuxZrTHnD4A9JzbbAHdCO/Q5zojodi32HnVLBWNs=
Subject key identifier: AA:C6:48:2E:F1:E1:50:3E:5A:B5:57:B9:E8:23:1B:40:C5:FD:05:00
Certificate issuer: /CN=4142d3f9b31126e0850265715c9fc32174b557a4
Certificate serial: 01A03E99E35CCB0B8F11ADCC0E67F9880E3F
Authority key identifier: 41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/qsZILvHhUD5atVe56CMbQMX9BQA.roa
Signing time: Wed 26 Aug 2026 15:04:27 +0000
ROA not before: Wed 26 Aug 2026 15:04:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214021
IP address blocks: 46.28.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 20:21:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:99:e3:5c:cb:0b:8f:11:ad:cc:0e:67:f9:88:0e:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4142d3f9b31126e0850265715c9fc32174b557a4
Validity
Not Before: Aug 26 15:04:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aac6482ef1e1503e5ab557b9e8231b40c5fd0500
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:e8:2e:bc:2f:97:35:62:97:43:9b:bc:cf:
59:f2:8b:4d:c8:a5:77:16:11:5d:05:c5:be:7d:e9:
ea:64:a8:3d:ab:28:2f:b3:95:3c:45:e8:6c:b2:3b:
78:a9:92:58:98:28:08:7c:45:7a:1d:51:55:40:71:
3d:f5:4d:84:e0:6f:b0:2a:0e:2a:f1:df:f3:18:c5:
5c:82:83:28:4e:1c:a4:0f:1a:d0:e9:7f:99:36:70:
c7:69:64:e4:9b:a4:03:00:45:6c:bf:a1:17:67:30:
40:6d:1f:b5:05:1e:21:96:bb:fc:c5:ed:fa:14:a8:
71:c3:a9:1b:a3:72:3e:cb:5e:4f:3d:25:8e:4f:66:
34:84:08:39:68:7a:d7:b9:8d:9e:de:9f:dc:78:52:
ec:01:2b:5f:60:fb:e4:f7:b8:02:b8:26:c8:25:cc:
2c:6c:7f:a3:3e:18:46:ae:82:db:5a:d6:7d:93:14:
7e:9c:57:ba:b7:a0:f7:ac:50:ec:fc:79:6c:cd:d9:
7e:95:58:3d:91:b8:ed:2f:51:8d:44:ca:4f:18:d1:
92:bc:32:59:e7:98:43:af:5d:9f:0f:1b:73:ce:83:
d1:4c:1f:93:ef:86:61:d8:32:34:fb:c0:7b:90:b1:
ac:5c:fa:dc:d8:c6:e6:ac:9b:62:4c:30:6a:ef:50:
dd:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:C6:48:2E:F1:E1:50:3E:5A:B5:57:B9:E8:23:1B:40:C5:FD:05:00
X509v3 Authority Key Identifier:
keyid:41:42:D3:F9:B3:11:26:E0:85:02:65:71:5C:9F:C3:21:74:B5:57:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/qsZILvHhUD5atVe56CMbQMX9BQA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ae1953-bfc4-42b5-950b-9c98d11197b7/1/QULT-bMRJuCFAmVxXJ_DIXS1V6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.28.239.0/24
Signature Algorithm: sha256WithRSAEncryption
84:4c:73:dd:7c:d0:76:bc:4c:c8:79:1e:0d:ca:cd:3f:38:bd:
9e:74:15:61:b1:cb:8f:5f:85:2f:96:74:75:24:37:34:49:1b:
78:c3:a3:2d:a9:df:51:8b:e2:db:1a:74:af:77:07:9f:77:16:
9e:75:24:29:1e:19:ac:34:3a:10:5f:71:c3:1e:62:21:bf:25:
e7:22:13:2a:46:5a:5a:15:02:5b:8f:72:cb:45:8a:39:44:eb:
79:98:89:bb:7d:ab:ce:2a:24:df:46:5a:fd:42:cb:bd:15:88:
00:89:c6:b9:49:3a:af:d0:95:92:97:c4:d3:9c:4d:77:d2:92:
1b:c2:29:39:69:7a:fb:bd:06:f5:06:48:11:ef:6a:77:6e:86:
31:1b:c3:46:d3:e3:d5:09:4d:c9:5b:95:d6:da:49:c2:ab:15:
fe:be:7c:55:09:65:d0:4f:92:a6:2c:be:5f:42:b4:b6:5b:96:
21:39:64:0e:ec:d4:1a:ab:73:30:2f:ad:ce:c1:43:05:2f:76:
4f:19:da:43:9d:02:d9:f7:c1:13:d4:78:82:be:fb:70:6d:ed:
2d:bb:9c:23:8d:3d:3a:2c:9c:a5:a1:89:49:53:9d:06:84:f4:
52:83:46:c6:45:9f:2d:d0:33:37:ac:57:e5:ae:66:39:6f:22:
0e:e2:06:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 05:59:09 2026 by rpki-client