Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/qEa_L8kGOi53ART3FlNq9TybX7c.roa
File: qEa_L8kGOi53ART3FlNq9TybX7c.roa (raw, json)
Hash identifier: rrw4ohnUKyXaDhZXFhCmFRaabw1fcbR6KeqCmrwhlsg=
Subject key identifier: A8:46:BF:2F:C9:06:3A:2E:77:01:14:F7:16:53:6A:F5:3C:9B:5F:B7
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 019FEB868F2D7E8F94395011CA654418B198
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/qEa_L8kGOi53ART3FlNq9TybX7c.roa
Signing time: Mon 10 Aug 2026 11:54:52 +0000
ROA not before: Mon 10 Aug 2026 11:54:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54004
IP address blocks: 89.167.192.0/20 maxlen: 24
89.167.208.0/22 maxlen: 24
89.167.216.0/22 maxlen: 24
89.167.224.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 18:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:86:8f:2d:7e:8f:94:39:50:11:ca:65:44:18:b1:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Aug 10 11:54:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a846bf2fc9063a2e770114f716536af53c9b5fb7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:d6:b6:82:7e:6f:e4:79:92:fc:f6:5e:b5:b8:
de:24:b1:23:c9:30:3b:42:28:07:a4:39:6e:33:30:
db:17:7d:07:60:1b:2f:b8:9c:2e:a9:03:82:c5:44:
5e:54:6d:b9:8f:3d:19:44:92:e2:9c:ed:e6:7a:c5:
ae:38:f0:0c:d6:95:91:f5:6b:57:d8:00:ab:c3:8d:
25:43:d7:64:0f:77:5d:93:a0:66:65:6c:94:ca:b1:
48:e2:80:c7:27:d7:f5:2f:a8:c3:aa:e2:33:b7:a7:
ca:3e:71:d1:d9:f2:4b:e6:06:ec:86:54:c0:d0:68:
ef:87:07:e1:23:2a:d3:63:91:35:ba:fe:59:9f:17:
46:c8:0c:e2:39:a1:a1:6b:27:f4:eb:ac:e5:30:81:
0a:4c:7e:72:88:13:90:72:b6:68:e1:f0:22:5c:78:
72:40:d8:8e:7f:6a:5c:42:d0:22:63:61:3f:66:b3:
cd:11:11:55:6c:20:e9:09:25:61:f3:24:44:09:a5:
5d:9a:24:18:35:b4:6b:6c:a8:0c:7b:5f:ae:a5:d2:
2e:29:a2:7e:51:0e:60:74:e8:52:b9:a1:8b:69:c0:
b2:3c:09:31:8b:01:77:55:3c:8a:9c:64:10:53:ae:
69:21:1c:91:d2:5e:04:21:1e:9e:09:52:41:21:44:
8e:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:46:BF:2F:C9:06:3A:2E:77:01:14:F7:16:53:6A:F5:3C:9B:5F:B7
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/qEa_L8kGOi53ART3FlNq9TybX7c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.192.0-89.167.211.255
89.167.216.0/22
89.167.224.0/22
Signature Algorithm: sha256WithRSAEncryption
22:05:a1:e4:83:ca:93:92:65:30:5c:22:d3:63:87:30:cf:4b:
49:2b:b0:f4:7a:df:d7:f3:56:dd:03:33:22:70:9e:20:92:0e:
bb:49:70:26:e5:a6:26:e4:e8:2c:50:d0:8e:93:ae:81:6f:70:
39:e8:8c:b6:2a:82:77:bb:87:d7:01:d5:9a:5c:d9:eb:a5:21:
6a:a8:3e:b6:c1:46:0f:b6:0e:f9:be:1c:23:09:de:a1:8e:c6:
6d:11:c3:d0:18:5f:f4:b5:ac:93:5a:47:95:0b:ce:42:74:75:
fd:9f:69:0b:24:ed:34:ed:59:11:55:63:9e:66:15:77:d5:2a:
38:d0:92:3e:e2:3b:ec:4c:7f:31:86:a5:54:34:81:60:9c:64:
e8:46:98:65:26:0c:de:31:4b:35:90:21:14:d4:58:9a:ca:06:
37:b7:04:95:69:a1:62:93:b1:c7:2f:c3:ef:bd:02:d7:fb:77:
e8:20:4a:cc:d0:63:f6:50:f3:90:5f:4a:c3:43:97:57:ae:7d:
bf:ba:b0:0a:d9:8b:f5:f0:d6:1a:4d:25:f6:34:4e:b9:25:bc:
c7:b7:ae:52:cb:d6:e7:b2:4b:86:f5:0c:61:9e:bc:ad:a1:b1:
25:94:77:ab:25:85:5d:e0:1a:57:e6:21:21:d7:59:d6:06:1e:
80:ca:46:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 01:26:36 2026 by rpki-client