Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/Qh-cWlvCK3ENJMeQ5Kdj5j-CntM.roa
File: Qh-cWlvCK3ENJMeQ5Kdj5j-CntM.roa (raw, json)
Hash identifier: QNgm0CjiYNQ8HH3mx5fg020kz1pfu7xHIb8nNopQXGU=
Subject key identifier: 42:1F:9C:5A:5B:C2:2B:71:0D:24:C7:90:E4:A7:63:E6:3F:82:9E:D3
Certificate issuer: /CN=aebf394e2f1b251c88d988a87161084580786ef5
Certificate serial: 01A1163A5F40FF6CF0726EBC06E8935AB720
Authority key identifier: AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/Qh-cWlvCK3ENJMeQ5Kdj5j-CntM.roa
Signing time: Wed 07 Oct 2026 11:58:06 +0000
ROA not before: Wed 07 Oct 2026 11:58:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12724
IP address blocks: 93.113.136.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:16:3a:5f:40:ff:6c:f0:72:6e:bc:06:e8:93:5a:b7:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aebf394e2f1b251c88d988a87161084580786ef5
Validity
Not Before: Oct 7 11:58:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=421f9c5a5bc22b710d24c790e4a763e63f829ed3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:16:1a:35:3f:eb:92:fc:cf:8f:95:ce:06:e9:
c4:9c:8b:a2:21:e6:3f:b8:53:86:74:c3:21:90:7d:
f5:20:28:2c:44:03:62:a6:17:39:b1:25:c4:a1:94:
24:a6:88:9d:29:20:4c:d8:19:37:1f:26:c1:9d:8b:
de:96:9b:33:bc:29:fd:10:4f:6a:c2:07:4f:64:f7:
8d:d3:16:62:f3:ff:bc:b6:75:b5:9e:53:6b:f7:51:
b5:6a:9c:dd:42:cc:68:da:a6:7a:70:d4:5c:16:25:
1b:73:cf:8f:9d:38:96:b5:34:cf:8f:b9:91:37:18:
d1:66:9e:de:82:23:6e:a8:c0:41:79:2f:b5:b3:34:
c6:c8:0b:de:31:3d:7b:18:f2:34:e9:7e:f6:4d:06:
4d:05:52:7f:51:41:68:7e:cd:52:37:63:0a:7f:80:
74:d5:05:d1:b5:90:6f:cd:72:ae:57:06:bf:c7:2c:
64:6a:79:db:b8:b6:b1:4f:fe:66:ed:97:01:32:7a:
54:0e:0a:bf:aa:fd:3c:7f:88:ec:71:6e:f8:ae:66:
03:ac:97:43:95:e6:2e:90:a5:16:e1:77:7c:70:c3:
0e:cf:2a:00:ed:02:7d:f4:79:ae:ea:89:13:98:61:
e4:15:06:77:bf:19:7d:d7:db:8c:07:60:f4:77:10:
60:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:1F:9C:5A:5B:C2:2B:71:0D:24:C7:90:E4:A7:63:E6:3F:82:9E:D3
X509v3 Authority Key Identifier:
keyid:AE:BF:39:4E:2F:1B:25:1C:88:D9:88:A8:71:61:08:45:80:78:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rr85Ti8bJRyI2YiocWEIRYB4bvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/Qh-cWlvCK3ENJMeQ5Kdj5j-CntM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/40498e-d1c0-484c-abcb-61e7f40d5dd6/1/rr85Ti8bJRyI2YiocWEIRYB4bvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.113.136.0/24
Signature Algorithm: sha256WithRSAEncryption
4d:56:85:6d:31:51:2b:c6:ce:a4:c7:4e:6b:af:1c:39:91:7b:
8c:f7:ea:b5:ed:54:06:08:21:26:4e:b7:30:f2:f5:6e:10:4d:
b8:d8:54:43:c5:45:cb:a0:05:71:3d:71:c5:33:48:72:03:30:
26:46:c0:d5:5e:35:ce:55:a6:e9:69:e1:b1:78:f3:7b:f1:59:
ec:bf:68:ce:16:88:b8:86:69:73:31:0d:19:53:59:0a:2d:74:
d5:5f:55:f4:62:cb:a3:63:7a:ec:95:0c:c4:46:a2:9b:5c:97:
32:53:3e:bf:95:ba:a0:ce:8f:5c:ce:65:3c:35:e5:2c:c8:1b:
56:bd:bd:69:5b:2c:67:16:89:ee:f7:08:5d:91:ee:bd:c0:77:
aa:20:44:bf:63:90:94:6c:ac:bd:4e:44:4f:b0:77:5f:66:69:
8b:9b:39:6d:58:6c:2c:4a:44:08:d0:f7:5a:4d:d9:d3:3f:b9:
52:8e:7b:1a:84:8c:b5:49:6e:43:23:25:5d:f1:9e:bc:04:93:
7e:ce:68:5d:62:97:58:b2:9f:4c:a2:5d:61:97:10:b8:b0:b6:
88:c7:ca:c1:58:7e:1b:a3:fe:3d:38:d4:bd:a3:b4:41:5b:0f:
f8:95:a6:f7:94:12:ff:01:8a:60:fa:a6:31:68:cd:97:1e:40:
83:55:cc:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:34:02 2026 by rpki-client