Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qCMtdNbgJxgOSQYV3tEUbqIOdY8.roa
File: qCMtdNbgJxgOSQYV3tEUbqIOdY8.roa (raw, json)
Hash identifier: r+cNCVi+xN//eSGsdFZSqHcQfWONCTfSi30h0I+XoMk=
Subject key identifier: A8:23:2D:74:D6:E0:27:18:0E:49:06:15:DE:D1:14:6E:A2:0E:75:8F
Certificate issuer: /CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Certificate serial: 01A153BE3CCA368D8825AFDBCB520242CCEE
Authority key identifier: A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qCMtdNbgJxgOSQYV3tEUbqIOdY8.roa
Signing time: Mon 19 Oct 2026 10:38:58 +0000
ROA not before: Mon 19 Oct 2026 10:38:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 34259
IP address blocks: 31.133.114.0/24 maxlen: 24
31.133.116.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 28 Oct 2026 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:53:be:3c:ca:36:8d:88:25:af:db:cb:52:02:42:cc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a939cc1621ee3010ae98e127bd254a7833fd2827
Validity
Not Before: Oct 19 10:38:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8232d74d6e027180e490615ded1146ea20e758f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b6:dd:07:60:2d:c7:57:32:b0:13:57:01:bc:
9c:00:c9:47:42:6e:57:d7:6d:05:ff:62:5d:74:e1:
ca:e4:b9:f7:0a:9d:1c:01:8c:7f:1c:67:2a:7f:b4:
e2:33:63:5c:85:b0:3f:86:79:3e:fa:cf:55:87:09:
96:f1:10:cd:f8:d8:de:40:f2:a4:d0:73:6b:86:af:
f1:04:de:71:a3:08:e9:ec:a2:ef:08:39:43:31:4c:
53:c3:0c:dc:2f:03:9a:da:8e:47:ef:17:c0:ef:32:
9a:1a:a0:c7:32:c7:cb:1e:a6:d7:0d:a7:19:0e:56:
1a:f6:95:50:2c:9c:7e:a3:74:b4:d5:6d:37:01:29:
36:ea:e9:cb:40:f4:2b:d0:23:83:75:93:d6:f1:a2:
01:3d:7a:8b:df:a7:7d:7b:a8:32:01:55:26:7a:22:
8a:c9:47:95:2e:d0:3b:ff:fc:41:17:d0:de:3a:b4:
bd:db:c9:da:9a:42:c9:01:2b:83:53:78:5c:d5:e2:
1a:08:8c:a4:09:e3:72:f6:5a:ab:57:50:69:2d:bb:
34:e6:79:09:8b:d6:cc:a7:05:53:d1:ec:ff:8a:97:
19:f3:82:4e:1b:47:09:e3:5c:0d:81:29:7b:98:70:
e4:e2:d9:b9:de:c0:d2:b0:16:f8:fb:43:42:07:4a:
ab:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:23:2D:74:D6:E0:27:18:0E:49:06:15:DE:D1:14:6E:A2:0E:75:8F
X509v3 Authority Key Identifier:
keyid:A9:39:CC:16:21:EE:30:10:AE:98:E1:27:BD:25:4A:78:33:FD:28:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qTnMFiHuMBCumOEnvSVKeDP9KCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qCMtdNbgJxgOSQYV3tEUbqIOdY8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/d5bf72-3115-4c71-a1bf-b06194d13c6b/1/qTnMFiHuMBCumOEnvSVKeDP9KCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.133.114.0/24
31.133.116.0/24
Signature Algorithm: sha256WithRSAEncryption
16:ff:89:d8:55:66:a4:7e:25:bf:5f:88:30:4c:cb:f4:ec:17:
44:c3:32:9c:b5:e3:dc:7f:06:e7:1a:9c:c3:de:c4:2d:71:19:
db:2b:79:b3:70:ef:04:66:1b:7a:c4:3d:42:2f:27:41:9e:0c:
11:93:21:e1:eb:47:37:3c:19:bd:9b:c2:9c:1e:3a:9c:ba:c7:
76:4e:e5:93:60:b0:87:52:22:e4:d8:01:1a:09:22:83:95:36:
37:10:e4:ec:ab:95:b4:56:0e:4c:ae:18:04:50:99:d5:bc:04:
aa:49:75:4b:77:0a:3e:fa:87:43:63:d7:4f:2e:80:88:ae:81:
63:d0:18:22:a2:25:5f:85:df:56:b9:11:82:81:07:1f:75:66:
ae:3a:ac:fd:8b:30:ee:53:59:58:c0:73:76:0c:b1:ad:87:55:
fd:65:ae:ab:03:91:60:07:5d:72:40:64:dc:d0:2c:66:09:97:
da:7e:18:f3:cd:f4:5d:fa:56:7a:8e:da:0f:46:b8:d8:65:6b:
d6:c7:28:43:8a:d3:7b:93:dc:d6:8b:44:f3:13:2c:d5:3d:d7:
5b:0b:bb:36:90:f5:46:31:5f:a7:f0:5e:b6:02:4f:0b:db:fa:
5f:2e:61:28:cd:56:5a:12:90:57:e7:ba:d5:3b:6d:4b:f4:f0:
72:c4:20:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 15:11:54 2026 by rpki-client