Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/qk7uT5aAa_csmyx9Uuzf5YCpEf4.roa
File: qk7uT5aAa_csmyx9Uuzf5YCpEf4.roa (raw, json)
Hash identifier: LoXBLhoXU5lN7weMYQ1jPtIKrd6AvSiXKfSjf4AAclo=
Subject key identifier: AA:4E:EE:4F:96:80:6B:F7:2C:9B:2C:7D:52:EC:DF:E5:80:A9:11:FE
Certificate issuer: /CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Certificate serial: 01A0247E8A1080D9B5B574F45F26984A679C
Authority key identifier: E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/qk7uT5aAa_csmyx9Uuzf5YCpEf4.roa
Signing time: Fri 21 Aug 2026 13:24:27 +0000
ROA not before: Fri 21 Aug 2026 13:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50495
IP address blocks: 77.83.232.0/22 maxlen: 22
91.204.48.0/23 maxlen: 23
91.204.50.0/24 maxlen: 24
91.223.99.0/24 maxlen: 24
91.223.102.0/24 maxlen: 24
91.223.126.0/24 maxlen: 24
194.39.32.0/22 maxlen: 22
2a06:ef40::/32 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 01:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:24:7e:8a:10:80:d9:b5:b5:74:f4:5f:26:98:4a:67:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e2d0c49a0e97e0d5f3ced3b7b6b9f72ca0cb53d6
Validity
Not Before: Aug 21 13:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa4eee4f96806bf72c9b2c7d52ecdfe580a911fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:c7:18:64:e4:ec:e1:ba:0c:70:74:db:8c:c3:
e7:72:4a:2e:4c:ff:16:cc:85:5f:51:de:65:9d:36:
40:59:3f:53:16:aa:bc:f5:06:47:9e:39:2f:07:a1:
b8:d6:88:41:c3:9c:8f:17:f8:07:f7:57:fb:36:04:
4d:4e:de:fa:71:ef:a7:c9:da:dc:ea:74:d0:40:14:
54:e9:c8:74:28:ce:24:db:a7:6d:d0:a3:e7:91:ef:
7a:e0:49:d7:00:44:1a:1d:c8:b1:81:2f:df:f9:5e:
be:3f:8a:08:38:1f:ac:ba:8e:a8:85:94:bd:f5:74:
57:3f:06:1c:79:ec:77:21:29:b3:cf:96:6c:1c:9e:
a7:fd:03:2c:6d:f5:5a:e0:38:cb:b5:3b:86:8a:08:
98:c7:ba:d0:05:d7:7b:a8:4c:3f:46:8a:a4:86:5d:
2f:9b:22:37:02:01:35:11:c2:b0:2a:83:12:52:40:
a2:a1:1b:c8:3c:36:0f:78:ac:82:86:43:a1:23:b1:
37:34:78:8c:c4:4a:bf:a4:35:22:7e:aa:d8:cc:38:
b5:9a:2b:6a:a0:6c:15:f6:a2:b9:87:25:3d:42:1e:
c5:89:f0:cb:0d:88:22:de:f6:fa:40:94:69:4b:18:
a0:69:6a:55:49:b0:18:eb:b6:78:fd:aa:fe:32:db:
68:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:4E:EE:4F:96:80:6B:F7:2C:9B:2C:7D:52:EC:DF:E5:80:A9:11:FE
X509v3 Authority Key Identifier:
keyid:E2:D0:C4:9A:0E:97:E0:D5:F3:CE:D3:B7:B6:B9:F7:2C:A0:CB:53:D6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4tDEmg6X4NXzztO3trn3LKDLU9Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/qk7uT5aAa_csmyx9Uuzf5YCpEf4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/9f0f7a-11eb-4383-bc6a-4690a007141f/1/4tDEmg6X4NXzztO3trn3LKDLU9Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.232.0/22
91.204.48.0-91.204.50.255
91.223.99.0/24
91.223.102.0/24
91.223.126.0/24
194.39.32.0/22
IPv6:
2a06:ef40::/32
Signature Algorithm: sha256WithRSAEncryption
b7:f5:8f:f9:48:5d:f6:5e:1f:36:22:01:bc:20:3d:01:15:90:
6f:98:de:02:ab:36:bb:e9:44:e1:82:9d:5c:63:08:9a:eb:bc:
2a:f8:68:e4:dc:21:f7:c9:37:f5:22:64:b1:fd:ea:14:ae:b1:
ef:18:c9:3d:17:17:9a:bb:1d:db:03:cc:ce:58:b2:44:f0:f9:
04:76:de:6b:fb:d7:29:2e:36:91:05:fe:53:07:f8:37:bb:e8:
1a:fc:ab:1b:a9:15:a1:7d:d7:21:88:6f:63:db:96:38:7f:07:
2c:e6:f1:99:1c:e9:01:1d:1e:f9:fe:82:99:dd:8e:d6:c8:b5:
bb:5e:2f:99:42:0a:54:db:59:7d:43:c8:8e:bd:e7:0d:ca:58:
a0:c3:1d:78:2d:f7:b4:c2:b7:49:58:f8:a0:d3:f6:a5:08:ba:
89:d7:31:86:2c:0a:56:c3:4d:2f:4e:10:d2:b1:f7:89:4f:4e:
53:b2:90:b3:99:7d:2e:37:74:88:5e:b7:9d:5d:71:d6:6a:61:
12:c9:09:92:d2:06:e1:34:3b:d7:8c:71:d0:8f:46:4a:8d:65:
df:3f:6b:8b:6d:e2:6e:bf:72:2d:86:c7:79:ef:2e:3d:a5:ac:
ab:af:2f:69:bc:f6:cd:85:51:9d:49:53:4c:45:a9:60:ab:a1:
43:17:97:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 11:56:44 2026 by rpki-client