Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/q1vPhvt49fLh6iMn3ajUI50lDI0.roa
File: q1vPhvt49fLh6iMn3ajUI50lDI0.roa (raw, json)
Hash identifier: N7YmrGopVO2OY13Q4e8PzTa4UY393rPJ3ZmjEWwLGIo=
Subject key identifier: AB:5B:CF:86:FB:78:F5:F2:E1:EA:23:27:DD:A8:D4:23:9D:25:0C:8D
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 019CD8B4C592611CD104B44696483CCF819F
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/q1vPhvt49fLh6iMn3ajUI50lDI0.roa
Signing time: Tue 10 Mar 2026 17:04:11 +0000
ROA not before: Tue 10 Mar 2026 17:04:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 268624
IP address blocks: 91.190.102.0/23 maxlen: 24
203.159.80.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Mar 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:d8:b4:c5:92:61:1c:d1:04:b4:46:96:48:3c:cf:81:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Mar 10 17:04:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab5bcf86fb78f5f2e1ea2327dda8d4239d250c8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:ec:c0:dd:0d:d3:b7:fc:2d:92:dc:af:18:a1:
32:cb:c5:11:fe:28:44:a1:92:b0:6b:ba:d0:7f:d4:
95:11:34:01:39:b7:42:33:a1:36:3b:de:42:f6:7e:
ee:e5:05:2b:fd:41:8e:f2:01:f5:01:20:8a:0b:99:
f0:42:26:ed:55:19:7d:dc:03:dc:68:31:fb:03:7d:
24:c7:88:a4:b1:60:f3:40:5d:d8:1b:69:31:36:7a:
e9:aa:77:4f:6b:57:30:fd:ab:eb:99:49:c6:91:e2:
90:08:35:35:d0:4d:20:97:24:ae:f7:f9:2d:a1:21:
21:2b:97:14:ef:d8:f2:ba:0f:41:e9:a0:13:7f:2a:
1c:c4:25:cc:dc:46:78:59:09:3a:8b:73:4d:c8:65:
92:ed:25:f1:04:dd:12:9a:59:a3:ff:dc:b4:bd:49:
6d:aa:45:cc:56:6c:72:25:5c:40:12:83:d1:4f:2f:
c3:ec:29:1f:58:b9:f1:1d:32:62:01:98:64:98:f3:
cf:86:c4:ed:86:80:63:22:50:b0:1f:f2:70:01:10:
4d:51:e1:8d:ed:1b:61:5d:f9:cc:a9:e2:ef:34:53:
a3:63:dc:21:dd:37:71:6a:88:a4:61:f9:88:c1:09:
b2:d4:38:76:cb:61:d8:de:6a:47:26:49:da:83:a7:
c8:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5B:CF:86:FB:78:F5:F2:E1:EA:23:27:DD:A8:D4:23:9D:25:0C:8D
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/q1vPhvt49fLh6iMn3ajUI50lDI0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.190.102.0/23
203.159.80.0/24
Signature Algorithm: sha256WithRSAEncryption
16:47:57:fe:d3:a8:68:a6:24:ea:ac:71:40:a9:39:36:29:1c:
11:33:28:b9:41:79:4f:8a:07:02:4c:60:7b:2f:59:a1:be:03:
56:4d:25:2e:63:76:10:49:85:c1:27:18:a0:55:18:f9:14:83:
04:13:ad:f0:92:fd:d9:e6:c1:47:d8:2f:f8:64:8a:8e:5f:81:
b8:04:93:66:0b:4c:b4:d2:a3:10:85:8b:22:eb:4d:46:4f:c7:
43:af:f2:59:7b:a3:10:7a:20:73:16:14:99:e2:8b:4c:7b:25:
22:62:2a:5e:7c:ce:6f:9c:87:bd:a9:08:f5:89:71:9d:9e:ae:
96:f8:49:38:2c:05:f9:c7:a0:e1:dc:89:ac:e2:8f:3f:e0:5b:
21:c4:01:b8:58:1c:fa:1a:69:82:34:f6:0b:d1:91:c2:92:44:
9e:d4:a7:bc:1d:47:0a:92:b1:99:94:3d:63:0e:31:5e:e8:c3:
1b:46:1c:7a:83:bf:98:86:a4:6e:b9:3d:bd:73:da:3c:73:d8:
2e:e8:62:68:45:d1:9e:9b:11:d4:d6:a0:e6:d2:3c:f7:05:06:
b2:be:3e:3c:54:d2:e3:37:04:bf:c7:9d:86:b9:2f:af:92:55:
27:14:71:ef:db:6f:96:ac:04:49:25:62:f5:bf:13:17:22:ba:
02:c0:07:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 12 19:04:15 2026 by rpki-client