Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/jQqjqLwCIiP-UmycKlMjQDwW93o.roa
File: jQqjqLwCIiP-UmycKlMjQDwW93o.roa (raw, json)
Hash identifier: gWG3bMZ8YKFN55wAMNLYWj4K1vXJyhwVCCdzs0fCImU=
Subject key identifier: 8D:0A:A3:A8:BC:02:22:23:FE:52:6C:9C:2A:53:23:40:3C:16:F7:7A
Certificate issuer: /CN=297ae7592ca52491dc166a30fe1477d712bd465d
Certificate serial: 019FC92C0ED0172C76FEA3C83F9D60CD0BA6
Authority key identifier: 29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/jQqjqLwCIiP-UmycKlMjQDwW93o.roa
Signing time: Mon 03 Aug 2026 19:48:55 +0000
ROA not before: Mon 03 Aug 2026 19:48:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216334
IP address blocks: 94.159.113.0/24 maxlen: 24
94.159.115.0/24 maxlen: 24
94.159.116.0/24 maxlen: 24
94.159.117.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 10 Sep 2026 21:04:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c9:2c:0e:d0:17:2c:76:fe:a3:c8:3f:9d:60:cd:0b:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ae7592ca52491dc166a30fe1477d712bd465d
Validity
Not Before: Aug 3 19:48:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8d0aa3a8bc022223fe526c9c2a5323403c16f77a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:fe:89:fc:6c:11:7f:a7:2a:c3:50:c3:0b:f3:
08:12:55:e4:42:c7:47:4a:51:6e:23:47:53:ab:89:
90:50:de:b0:43:07:60:91:cb:0d:4d:4f:37:72:50:
9a:13:8f:1b:1f:af:4e:fa:de:f2:87:7d:0c:88:b8:
e7:d4:6e:e8:19:cc:9b:bb:e3:2c:53:87:3c:f3:9a:
4c:35:d0:a6:ae:18:54:5a:7c:cf:b1:dd:15:68:10:
48:4e:5c:4e:70:68:35:7b:d0:8b:0c:38:ad:d3:0c:
10:b5:be:e1:c2:04:64:3c:3d:09:21:a7:ae:17:ea:
7f:21:a8:88:84:9d:ec:7c:2d:9b:f0:6d:1e:fd:1f:
be:0f:69:35:c8:7f:a7:9e:02:41:51:77:27:5a:61:
f0:1c:b0:c0:bf:f8:1f:96:d5:c8:a4:b3:a2:88:6b:
98:d0:20:7c:24:9d:4b:f7:6c:de:91:53:07:35:8b:
8a:3e:b9:44:2c:08:86:9c:c9:31:d0:3a:86:40:b1:
28:44:f1:27:cb:ae:3c:ba:40:a9:70:ae:9b:88:89:
99:6a:1e:d5:4b:e8:f9:e3:4a:ca:88:39:51:20:22:
24:84:a5:fe:9b:c4:07:4d:95:f0:e7:86:62:cc:66:
af:60:34:a8:10:df:bb:01:c3:8e:06:81:f1:af:0b:
95:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8D:0A:A3:A8:BC:02:22:23:FE:52:6C:9C:2A:53:23:40:3C:16:F7:7A
X509v3 Authority Key Identifier:
keyid:29:7A:E7:59:2C:A5:24:91:DC:16:6A:30:FE:14:77:D7:12:BD:46:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KXrnWSylJJHcFmow_hR31xK9Rl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/jQqjqLwCIiP-UmycKlMjQDwW93o.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d5/48e1e8-328d-4f82-9398-3910a59a1121/1/KXrnWSylJJHcFmow_hR31xK9Rl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.159.113.0/24
94.159.115.0-94.159.117.255
Signature Algorithm: sha256WithRSAEncryption
4e:29:5c:4d:b0:d7:e0:df:fb:81:3d:c2:f1:0a:12:d8:05:50:
8b:4b:48:56:d8:bf:dc:15:71:5b:47:27:08:33:97:84:20:e4:
3c:76:d4:18:b1:42:45:ad:96:ee:0a:e6:04:b6:0c:14:aa:d5:
e7:3e:ce:32:09:4f:f9:86:e9:35:8a:ae:68:ee:e1:af:6e:8f:
47:62:6b:ad:4a:ec:47:f3:b9:a2:92:c3:b0:82:b2:d0:b4:bf:
10:c6:a4:1a:09:09:1a:e1:d9:4b:50:4f:d3:bf:fa:a5:69:9a:
3c:fb:e1:dc:3b:5d:82:19:bd:9e:e4:05:cc:4a:05:d3:d6:fa:
9e:24:5c:08:da:57:d4:a8:94:25:73:ec:de:ec:17:33:b7:1c:
89:c1:56:ba:df:26:c4:58:e9:49:8d:15:bb:4f:db:e5:53:e7:
c5:5a:c4:4b:c1:d5:d3:48:10:30:5a:2b:08:9a:0c:7e:09:29:
27:ed:b8:6f:92:24:9e:66:3b:33:1a:9a:84:0e:fa:99:86:ea:
3e:fd:2d:fa:9d:38:aa:2c:8d:53:a9:3a:8a:41:96:f7:8c:5a:
6c:60:64:ce:78:10:72:15:34:2e:5b:0b:da:cf:8a:89:03:34:
81:26:d7:f7:c6:71:6b:d7:0f:47:52:72:89:87:e7:8c:a8:f1:
08:72:ba:03
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Sep 10 06:01:18 2026 by rpki-client