Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/qnrXMl_Xv_6kWMeF4Bz5-CYWYXw.roa
File: qnrXMl_Xv_6kWMeF4Bz5-CYWYXw.roa (raw, json)
Hash identifier: 5fNuZXIYtTbTA6QK+TCdSGKbez77mXXj3Ri/akWeOsw=
Subject key identifier: AA:7A:D7:32:5F:D7:BF:FE:A4:58:C7:85:E0:1C:F9:F8:26:16:61:7C
Certificate issuer: /CN=f9d867cc24d0be89f05fc87258e0877a601580b9
Certificate serial: 01A01D1590740DDE468FFBE8F4B6DBA9E358
Authority key identifier: F9:D8:67:CC:24:D0:BE:89:F0:5F:C8:72:58:E0:87:7A:60:15:80:B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/qnrXMl_Xv_6kWMeF4Bz5-CYWYXw.roa
Signing time: Thu 20 Aug 2026 02:52:27 +0000
ROA not before: Thu 20 Aug 2026 02:52:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200105
IP address blocks: 2a0c:3480:100::/48 maxlen: 48
2a0c:3480:101::/48 maxlen: 48
2a0c:3480:102::/48 maxlen: 48
2a0c:3480:103::/48 maxlen: 48
2a0c:3480:104::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 22 Aug 2026 14:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1d:15:90:74:0d:de:46:8f:fb:e8:f4:b6:db:a9:e3:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f9d867cc24d0be89f05fc87258e0877a601580b9
Validity
Not Before: Aug 20 02:52:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa7ad7325fd7bffea458c785e01cf9f82616617c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:0d:e0:8a:31:c8:c7:89:5d:f4:d5:33:67:52:
4c:04:1e:3d:e8:28:9b:92:91:6c:2d:ea:25:b4:e3:
6d:9b:23:55:cf:60:9b:65:3c:ad:1c:6a:69:2c:9a:
e1:96:d2:d1:be:aa:5b:be:d6:43:11:ed:bf:84:84:
7d:22:e4:19:79:95:76:80:1a:73:b4:b5:98:08:a0:
41:7e:d6:93:68:35:bf:ee:fb:fe:90:5e:27:12:8e:
6e:b9:b0:b3:3f:ab:91:43:f0:b1:9b:75:21:98:8b:
d3:63:50:ad:a6:34:2d:16:7c:03:3c:09:60:35:2e:
7e:d8:ef:aa:31:99:1b:16:6a:01:5b:22:89:68:a2:
9a:f4:9f:f2:d8:2c:b4:73:40:34:8a:41:a4:f9:27:
4d:36:22:f3:3f:d8:80:a8:2c:3a:4b:31:1d:9d:74:
62:aa:d6:c3:6b:83:d0:d5:bf:91:c2:87:f9:c5:6a:
0a:a4:14:3a:55:de:35:85:af:bd:ca:dd:80:6c:ec:
27:fc:03:09:46:46:e5:26:50:2a:59:bc:49:e3:b1:
7a:0f:22:97:8a:4c:6b:46:69:35:3b:61:77:17:43:
80:7d:f1:44:9d:53:a3:55:14:cd:f5:88:2d:1f:29:
2a:fe:67:36:f7:37:8d:d8:d7:5a:c7:c3:b2:31:54:
7d:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:7A:D7:32:5F:D7:BF:FE:A4:58:C7:85:E0:1C:F9:F8:26:16:61:7C
X509v3 Authority Key Identifier:
keyid:F9:D8:67:CC:24:D0:BE:89:F0:5F:C8:72:58:E0:87:7A:60:15:80:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-dhnzCTQvonwX8hyWOCHemAVgLk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/qnrXMl_Xv_6kWMeF4Bz5-CYWYXw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/80532d-0292-4277-8de6-0f6e7861a875/1/1-dhnzCTQvonwX8hyWOCHemAVgLk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:3480:100::-2a0c:3480:104:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
23:74:44:71:07:b7:68:94:03:2e:31:44:72:76:ee:08:20:f7:
1d:43:28:90:1e:c0:01:5d:e3:c4:92:fa:f3:d3:1c:af:cd:a1:
5c:e1:5c:0c:ba:6e:d0:cb:75:ba:c7:08:d1:1e:d1:e9:eb:ae:
ae:ea:06:b3:c3:60:61:53:74:8e:2d:72:7b:ff:fa:ba:04:5c:
96:20:84:52:41:8e:e8:ab:95:9d:df:ee:ce:b7:16:da:16:86:
0d:f6:4c:f5:97:e8:18:cc:b5:47:48:a8:2c:3c:62:44:b2:d1:
09:b7:32:47:12:bb:75:82:54:a7:e3:9e:15:fa:e0:a7:2e:50:
05:42:13:ad:00:da:7a:9e:80:cf:5c:85:5d:cc:61:27:9f:7a:
a6:06:67:c9:96:a9:f0:42:f3:b4:bd:13:44:a9:22:ce:6e:c6:
01:f0:90:f2:45:86:e4:44:70:08:3a:a5:55:46:9b:e0:cd:c0:
17:c1:29:41:ea:d5:5e:08:ed:ee:bf:e4:e6:63:63:43:91:26:
58:5e:fd:85:62:df:a5:35:7f:fb:a5:d1:db:37:0d:8e:fa:1c:
23:b2:46:a7:75:3e:a8:0b:f9:28:64:0c:25:a0:e9:c2:49:09:
c4:f6:41:24:69:bd:a6:17:1c:1c:cd:83:49:3e:39:c1:33:e2:
3c:c0:a6:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Aug 21 22:04:09 2026 by rpki-client