Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/qAaCGqUgGB1bv-wwPthEh0dkyzs.roa
File: qAaCGqUgGB1bv-wwPthEh0dkyzs.roa (raw, json)
Hash identifier: W1i3bs0lJTzSlStZlkjrp/p749rK52qwJnMmbJmgcNc=
Subject key identifier: A8:06:82:1A:A5:20:18:1D:5B:BF:EC:30:3E:D8:44:87:47:64:CB:3B
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A09EB7C5F4571C61CD79D47CD9524DD890
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/qAaCGqUgGB1bv-wwPthEh0dkyzs.roa
Signing time: Mon 14 Sep 2026 07:00:38 +0000
ROA not before: Mon 14 Sep 2026 07:00:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35661
IP address blocks: 45.8.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 17 Sep 2026 16:27:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:b7:c5:f4:57:1c:61:cd:79:d4:7c:d9:52:4d:d8:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 14 07:00:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a806821aa520181d5bbfec303ed844874764cb3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:a2:03:2a:16:56:4d:42:9e:cb:ee:14:c3:89:
5c:7b:f4:ca:dd:a0:1f:ee:9e:11:06:96:38:3d:5b:
8f:a5:03:e4:3f:bf:f5:a4:43:ed:68:b3:e8:c8:c4:
90:4f:dc:23:f2:aa:79:f0:88:60:0f:ae:96:09:a4:
61:c8:40:cb:0f:ca:a1:b9:af:ec:cc:61:28:6e:e1:
4f:0c:5e:a5:78:16:57:16:a5:08:48:37:44:12:1b:
76:98:d0:24:4c:d6:9f:81:fd:5c:83:f1:0d:73:9b:
bd:6b:9a:23:4b:0f:64:80:12:38:3f:51:f1:d5:8c:
6d:8e:1e:b9:41:77:dd:ba:96:80:5e:74:78:ff:08:
87:73:6f:a5:b6:32:6a:20:57:28:82:49:0e:29:f4:
b0:6f:87:68:5e:e6:00:fa:3e:f1:6f:93:9e:6d:3d:
33:43:5c:0d:f9:cb:c0:66:82:30:c7:21:eb:3c:0a:
7d:49:5a:a8:3c:3f:48:c4:42:0c:c8:d6:d9:5c:c8:
22:88:eb:68:bd:5a:9a:f6:98:b3:98:5e:fb:fc:c4:
21:dd:23:a3:71:58:d1:38:8c:47:76:98:67:3a:3b:
3e:0a:de:57:5c:4e:5a:5a:82:4a:13:27:aa:05:13:
20:27:b1:67:66:7c:87:84:40:bf:0f:1c:05:c3:63:
a5:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:06:82:1A:A5:20:18:1D:5B:BF:EC:30:3E:D8:44:87:47:64:CB:3B
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/qAaCGqUgGB1bv-wwPthEh0dkyzs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.196.0/24
Signature Algorithm: sha256WithRSAEncryption
7a:82:be:79:9a:22:e9:e4:79:99:8f:a5:eb:b8:cb:e0:98:ec:
43:73:af:2e:bd:2f:77:8d:37:3e:9c:09:a3:08:0e:55:9f:57:
df:de:17:e0:1b:89:01:bf:8d:87:45:f5:98:4e:71:4b:be:fd:
f9:a3:5a:83:53:94:68:a7:08:11:f0:18:b4:2f:99:f2:de:42:
4b:85:ce:69:3b:59:7b:e1:c6:8c:1a:95:88:76:45:1a:48:34:
e4:29:db:26:f1:7b:83:73:48:20:a5:d6:e1:d0:1f:9d:5f:fc:
d6:e3:b1:77:7c:40:6a:ba:e5:4a:a9:09:6f:ed:dd:cc:14:b1:
1d:03:c8:d8:0b:cf:81:e2:e8:64:3a:6d:00:3f:ff:04:54:65:
a3:5f:c3:c0:e5:84:77:b2:9c:5c:df:c1:33:3b:ec:78:4d:8f:
2c:97:f5:ba:7e:4f:b6:59:63:2e:50:3b:e9:2d:f6:6c:1d:ac:
88:27:d1:09:54:aa:f6:7a:a8:c8:9c:25:97:89:e3:69:2f:0a:
29:d3:89:bd:b0:13:20:19:35:49:1a:1a:65:56:c5:5e:94:de:
af:fb:53:37:65:3c:d6:e9:80:dd:ec:23:6d:c5:bc:15:5f:d9:
b1:cc:7a:0f:e1:ee:a1:8b:dd:f7:7e:44:cb:08:c4:8e:69:d2:
93:51:1c:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 17 01:21:30 2026 by rpki-client