Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/jQT1-YW0omNdmmysijACxG4f0WA.roa
File: jQT1-YW0omNdmmysijACxG4f0WA.roa (raw, json)
Hash identifier: rW52A5D5/umcCwCEAfylgO7TViTRS1cixeRn2eTdh8Y=
Subject key identifier: 8D:04:F5:F9:85:B4:A2:63:5D:9A:6C:AC:8A:30:02:C4:6E:1F:D1:60
Certificate issuer: /CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Certificate serial: 01A0524E3731254407798596C1C34E6ABC46
Authority key identifier: B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/jQT1-YW0omNdmmysijACxG4f0WA.roa
Signing time: Sun 30 Aug 2026 10:54:12 +0000
ROA not before: Sun 30 Aug 2026 10:54:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401776
IP address blocks: 187.5.0.0/23 maxlen: 24
187.5.2.0/23 maxlen: 24
187.5.4.0/23 maxlen: 24
200.180.160.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.mft
rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 13:02:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:52:4e:37:31:25:44:07:79:85:96:c1:c3:4e:6a:bc:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b286e9f08848e480b1f3e9a9c06a832d48ce37ad
Validity
Not Before: Aug 30 10:54:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d04f5f985b4a2635d9a6cac8a3002c46e1fd160
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d7:91:bb:4a:89:ed:8a:67:41:cc:12:50:b2:
26:a5:c5:2c:6e:09:13:be:ec:5a:f9:44:be:29:27:
0c:3d:b9:ed:c0:0c:4b:fc:3d:3e:ea:86:af:2e:ee:
e7:75:7d:db:b7:89:a3:61:9c:dd:9d:3a:73:04:65:
8f:59:9c:76:bf:8b:b3:24:89:71:13:3a:f0:99:b9:
34:b1:6b:54:b8:38:4f:57:3f:18:fc:15:85:d0:23:
bc:2c:d3:3e:58:5a:fb:a2:7d:54:25:b3:6f:ed:a6:
8c:39:61:5d:0f:56:c0:18:e1:99:b3:b4:96:b7:21:
1d:55:b1:2d:c3:5d:6b:81:b3:20:60:0d:01:94:fb:
5a:62:b2:e5:ca:0f:4f:b0:83:f4:a7:5f:ee:f0:44:
fe:ed:2d:23:24:4f:5b:0d:71:c9:02:62:75:b5:34:
ee:df:d4:97:ab:e2:5b:8f:b2:8b:19:57:c7:c8:7a:
a7:74:41:5b:40:df:28:43:f5:4f:25:00:0a:93:a2:
53:9b:10:b0:61:ed:7c:37:f1:b5:a4:a4:db:8e:c0:
31:ff:f6:ab:ed:43:ec:69:41:b8:74:df:cd:80:fa:
41:3a:bc:71:c5:ac:c7:4e:90:a0:81:ac:f2:a9:34:
d5:60:aa:8a:84:99:51:65:f9:5f:aa:51:73:4e:f1:
8b:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:04:F5:F9:85:B4:A2:63:5D:9A:6C:AC:8A:30:02:C4:6E:1F:D1:60
X509v3 Authority Key Identifier:
keyid:B2:86:E9:F0:88:48:E4:80:B1:F3:E9:A9:C0:6A:83:2D:48:CE:37:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sobp8IhI5ICx8-mpwGqDLUjON60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/jQT1-YW0omNdmmysijACxG4f0WA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/900704-6b47-4017-b97f-4601680173aa/1/sobp8IhI5ICx8-mpwGqDLUjON60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.5.0.0-187.5.5.255
200.180.160.0/21
Signature Algorithm: sha256WithRSAEncryption
7e:ef:7d:8c:f5:85:ce:f9:ab:58:c6:32:22:0c:f4:e0:81:eb:
1d:d4:be:ab:a8:3c:22:d0:1c:04:23:44:ae:05:5e:b6:f2:cb:
2c:25:e9:99:67:c2:ac:61:74:60:8d:e9:09:fe:d0:74:6d:32:
d2:24:2d:f2:ab:ec:b4:1f:60:99:0f:20:53:50:c0:90:be:dc:
d4:8c:6e:8f:58:f1:1d:be:31:7a:c3:cf:c0:e6:f4:01:9b:9c:
18:fe:c9:64:7c:5c:f3:f1:e4:7c:1a:e4:34:bd:33:4b:59:56:
81:f0:e6:fa:31:a6:94:1a:b7:59:48:92:1f:07:d7:3b:fc:59:
41:7a:3d:7b:95:b8:33:54:2f:cc:35:97:2d:08:ac:a5:b9:cd:
33:05:6c:b2:e4:eb:e1:ce:67:bd:58:39:c8:b8:f1:df:8b:72:
ca:5e:90:5a:6e:d0:4b:d3:6f:91:bd:19:62:fd:84:4a:f5:4a:
21:73:4b:5a:b6:d6:48:30:9f:f4:4c:4b:71:89:bf:04:41:3a:
48:98:92:48:27:a0:5c:74:1a:b5:52:8d:d0:af:99:3e:39:27:
1c:fe:1a:70:03:a7:83:05:db:54:0f:9b:22:a7:02:e1:83:1f:
78:cc:95:86:36:44:29:dd:d3:92:d9:6e:f8:e4:cf:2f:03:a4:
d1:19:df:a1
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Fri Sep 4 17:44:08 2026 by rpki-client