Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/qbQm-ojC8NhlNRep-LIqaD46vns.roa
File: qbQm-ojC8NhlNRep-LIqaD46vns.roa (raw, json)
Hash identifier: wegzZLeLbCSG4e1AqzziQ9orvPCcQrqrdU1VkS8Cudg=
Subject key identifier: A9:B4:26:FA:88:C2:F0:D8:65:35:17:A9:F8:B2:2A:68:3E:3A:BE:7B
Certificate issuer: /CN=00775d9471b85d963fef6d283590e2d942dd5c21
Certificate serial: 01A033307174CED73F71F6E0158784CA6E18
Authority key identifier: 00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/qbQm-ojC8NhlNRep-LIqaD46vns.roa
Signing time: Mon 24 Aug 2026 09:53:27 +0000
ROA not before: Mon 24 Aug 2026 09:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213807
IP address blocks: 87.107.172.0/23 maxlen: 24
87.107.188.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 05:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:30:71:74:ce:d7:3f:71:f6:e0:15:87:84:ca:6e:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00775d9471b85d963fef6d283590e2d942dd5c21
Validity
Not Before: Aug 24 09:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9b426fa88c2f0d8653517a9f8b22a683e3abe7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5d:49:17:74:dd:cd:f6:ac:31:c1:f5:06:9e:
bd:dc:8a:a9:f9:99:4e:dd:b6:dc:e6:22:86:a6:9f:
3e:bf:2a:89:0b:9f:25:dc:c7:96:ac:e9:0a:5b:a7:
16:86:cc:a1:64:c0:de:47:cd:cc:24:91:9a:53:bf:
5e:60:bd:39:72:25:54:de:dd:9f:ad:cd:a9:19:6e:
6f:b2:a0:f2:b7:42:4c:20:e5:d3:c7:b5:31:31:8a:
1c:83:2b:0f:db:1a:ae:f1:cb:eb:0e:0d:e5:57:e8:
1c:30:63:30:2b:0f:b0:71:4b:f0:7a:54:97:09:86:
9d:5c:79:7c:52:88:f3:97:81:e6:99:3a:81:1f:46:
d8:fd:e3:87:a8:aa:0a:8c:8f:48:c1:11:25:33:51:
25:46:06:08:9f:bc:65:b4:c9:0a:36:66:55:cb:94:
ad:7f:df:1f:7d:9d:80:1e:1f:4d:a2:2a:74:1a:42:
05:1a:62:f1:87:ca:c8:02:3e:16:c8:ac:73:e3:3c:
52:6b:31:a8:41:6e:fd:03:cf:d7:ac:31:1c:3d:32:
1c:14:81:35:cf:00:e0:18:4e:65:8e:98:d7:7e:46:
ea:a0:a3:07:7c:91:30:bc:2a:56:e5:1d:52:6a:94:
2f:7c:fa:5d:ae:61:fa:6e:a1:93:88:a2:56:3d:40:
e7:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B4:26:FA:88:C2:F0:D8:65:35:17:A9:F8:B2:2A:68:3E:3A:BE:7B
X509v3 Authority Key Identifier:
keyid:00:77:5D:94:71:B8:5D:96:3F:EF:6D:28:35:90:E2:D9:42:DD:5C:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AHddlHG4XZY_720oNZDi2ULdXCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/qbQm-ojC8NhlNRep-LIqaD46vns.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/63760c-e21b-4baf-a9a4-76b33e4ce821/1/AHddlHG4XZY_720oNZDi2ULdXCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.107.172.0/23
87.107.188.0/23
Signature Algorithm: sha256WithRSAEncryption
13:6d:bc:d3:43:05:d6:a7:3e:4a:c9:eb:83:03:bb:11:a1:fa:
4f:5a:c5:f0:69:ea:8f:a1:b1:30:69:20:f6:b7:55:d4:cc:0b:
44:0b:d8:a2:01:db:fb:67:fe:0e:14:1a:a5:e0:b0:f3:38:4e:
6a:97:15:20:11:26:17:58:cd:fa:9b:00:9d:96:68:5c:02:27:
bc:70:55:5d:ff:e9:f1:65:00:47:ed:ac:da:53:e1:de:36:7c:
b2:55:09:8a:c9:6c:39:e6:db:29:30:5d:1e:f6:ef:52:c9:4c:
52:09:85:32:69:92:49:1c:c5:48:6a:9b:51:65:44:9a:c9:1c:
f6:f8:6f:4d:41:65:2b:0c:b7:96:96:e0:98:e0:f5:c6:c9:21:
97:2f:f6:10:59:0f:17:62:d5:69:da:9b:76:54:62:98:f1:bc:
6c:4f:95:b8:c4:fc:5f:09:9b:3e:88:3b:65:36:ef:d2:0a:a8:
25:02:86:a3:d8:21:32:d3:40:cc:c7:4a:37:02:2c:b8:f4:25:
e9:f9:1b:93:a3:4b:8e:88:ba:63:96:a0:66:e9:58:2a:b6:e8:
4a:f2:39:ec:1f:52:f1:2d:32:22:28:56:67:52:b6:d4:74:b4:
94:51:cd:6c:98:6e:5a:07:8e:f6:e7:92:60:d1:47:e6:13:da:
a9:6d:28:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 14:27:44 2026 by rpki-client