Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/q1_uvTwS2odl5ebIbbIhhY5492k.roa
File: q1_uvTwS2odl5ebIbbIhhY5492k.roa (raw, json)
Hash identifier: rcptFlj+yIPXEnP3ZQnKAkTZfAlxMM8LHnpHcZGEHWI=
Subject key identifier: AB:5F:EE:BD:3C:12:DA:87:65:E5:E6:C8:6D:B2:21:85:8E:78:F7:69
Certificate issuer: /CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Certificate serial: 019E404E598472C98E03B9E0E456580D0695
Authority key identifier: 86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/q1_uvTwS2odl5ebIbbIhhY5492k.roa
Signing time: Tue 19 May 2026 12:55:36 +0000
ROA not before: Tue 19 May 2026 12:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197442
IP address blocks: 45.84.89.0/24 maxlen: 24
206.109.198.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.mft
rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 04:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:40:4e:59:84:72:c9:8e:03:b9:e0:e4:56:58:0d:06:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86170339c2bc664d600fa98b8061269d48e4f2c6
Validity
Not Before: May 19 12:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab5feebd3c12da8765e5e6c86db221858e78f769
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:2e:70:b1:9e:8a:75:dd:8b:d5:55:c0:47:97:
20:fb:3f:0c:ef:ce:a7:79:66:d5:65:8b:62:4c:95:
83:26:8e:0d:ab:17:e6:69:6f:d8:f7:ef:7a:98:00:
d1:30:e0:0f:98:c7:3f:4d:ef:f8:c7:20:39:ed:a4:
ea:ba:e4:25:da:35:71:a0:13:f7:6e:71:24:12:b2:
5a:d9:9d:cd:80:f1:ee:8c:1b:4a:7c:36:65:e2:f9:
39:a7:40:df:7c:b4:c9:ef:5e:df:d5:9d:e7:db:70:
c1:39:56:b4:08:5d:33:6b:27:36:c3:be:b8:f2:36:
37:58:b2:32:f3:b4:63:39:70:72:c6:d4:b3:10:04:
65:fe:d7:ef:61:dd:e4:a6:58:57:0e:8b:c7:ab:10:
69:88:8a:e7:be:0b:47:3f:91:10:8a:92:25:f5:6a:
76:61:73:7d:e5:a3:81:c9:9a:5a:27:98:63:43:db:
39:72:58:52:65:f1:a3:3f:dc:8e:aa:58:55:e5:65:
70:9d:0a:4f:ec:1e:75:97:e5:12:d5:f8:19:fe:21:
3d:e4:76:fe:90:8d:b0:60:2a:ab:be:5a:dd:cf:4a:
26:8f:ba:3b:d5:db:35:3d:ed:b5:de:ef:0f:d2:cc:
43:04:f7:cc:7f:35:03:4b:78:ac:bb:8a:c5:6c:2a:
7f:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:5F:EE:BD:3C:12:DA:87:65:E5:E6:C8:6D:B2:21:85:8E:78:F7:69
X509v3 Authority Key Identifier:
keyid:86:17:03:39:C2:BC:66:4D:60:0F:A9:8B:80:61:26:9D:48:E4:F2:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/q1_uvTwS2odl5ebIbbIhhY5492k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/c98aa3-0e0c-4d97-9bc3-74d91cdbe195/1/hhcDOcK8Zk1gD6mLgGEmnUjk8sY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.89.0/24
206.109.198.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:ef:b9:b9:2d:10:e4:e9:d9:5e:57:ed:97:a4:88:c0:27:85:
90:0f:76:aa:9d:2f:89:9c:dd:85:a5:23:2a:21:89:af:a3:50:
2f:9e:b4:39:aa:24:7b:91:3f:4f:56:0a:de:0a:82:3b:5a:11:
bd:0b:a2:df:9f:58:fc:33:87:d3:5d:3d:35:9a:10:ab:2d:f8:
72:7c:2c:5b:66:87:63:9f:36:49:84:a7:35:1c:1d:30:c6:02:
40:07:47:d7:e4:40:ae:1f:ce:9f:eb:8c:3f:2c:26:ff:65:73:
c9:35:a8:51:28:f1:17:69:4e:30:40:ee:0e:a5:cd:fb:45:73:
eb:a8:ef:a3:bf:f3:a8:10:38:09:1c:db:07:8f:4c:fa:45:d0:
54:ec:a1:18:e9:d3:a9:1a:0f:54:17:f0:b0:55:f2:b3:dc:eb:
0a:09:3e:d6:66:3e:45:c1:73:62:dc:86:c6:88:65:d6:b5:f6:
1f:80:ed:b4:03:52:09:d0:f8:27:ba:f5:f2:1a:be:55:27:1c:
0f:0c:fe:13:9c:b9:43:8d:48:b9:6d:a2:11:92:08:20:54:4a:
7e:ac:05:0a:d3:1d:6c:9e:f3:8d:bc:00:27:e9:3f:2e:90:63:
8b:ae:e0:a3:95:99:94:0d:96:9b:22:5f:6b:2c:0b:18:78:1e:
c4:0e:a1:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 14:39:04 2026 by rpki-client