Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/cqkEeqtHl1PfLS7EFHodpBASmjs.roa
File: cqkEeqtHl1PfLS7EFHodpBASmjs.roa (raw, json)
Hash identifier: CThjeuNtSNALCMYlwPhSBpXaQNg2+oQcdigiplOO+TI=
Subject key identifier: 72:A9:04:7A:AB:47:97:53:DF:2D:2E:C4:14:7A:1D:A4:10:12:9A:3B
Certificate issuer: /CN=618478f198fe569010c3df6219142f530c4f5e56
Certificate serial: 01A1885E6544E493B4205D46B9D0F2D63F50
Authority key identifier: 61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/cqkEeqtHl1PfLS7EFHodpBASmjs.roa
Signing time: Thu 29 Oct 2026 15:54:10 +0000
ROA not before: Thu 29 Oct 2026 15:54:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 196695
IP address blocks: 91.229.116.0/24 maxlen: 24
91.229.117.0/24 maxlen: 24
109.196.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.mft
rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Nov 2026 16:04:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:88:5e:65:44:e4:93:b4:20:5d:46:b9:d0:f2:d6:3f:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=618478f198fe569010c3df6219142f530c4f5e56
Validity
Not Before: Oct 29 15:54:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72a9047aab479753df2d2ec4147a1da410129a3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:15:74:2b:43:96:23:cc:31:cd:43:3c:61:3d:
67:5d:07:7b:f7:db:7d:33:74:f4:8c:02:57:3b:60:
6f:96:2b:ba:ed:98:e1:b0:b0:1e:75:13:3a:71:ba:
6c:56:b1:2b:36:c1:83:8b:46:49:78:f0:4f:f8:e5:
07:5c:59:18:4c:14:05:78:40:a0:73:4a:f2:30:df:
e5:08:02:34:24:28:c7:7b:3a:80:62:36:76:b9:65:
3b:9e:6d:a1:74:f2:86:81:b6:58:f8:28:15:14:17:
a2:a8:58:2e:24:85:cd:2c:b7:56:0f:90:e5:95:a9:
6b:c3:72:e8:46:a9:70:2e:bf:17:5e:95:aa:5c:7c:
c1:bc:c1:35:76:8d:84:a9:b7:5b:b4:e8:c6:f4:5d:
46:c5:ad:e7:05:13:98:b3:f4:5a:92:36:23:40:20:
e4:e7:99:48:b3:75:ba:11:b1:6b:8d:86:14:c5:bd:
a1:7d:11:59:2d:0f:a8:97:d6:e5:27:6f:04:1e:48:
7e:5a:de:ed:27:d1:35:5b:88:91:26:3d:ea:c2:a1:
ac:97:8f:96:c6:60:87:6d:f0:48:1f:32:2e:c9:0f:
2f:be:66:df:9c:a7:87:e4:27:d5:df:03:62:8c:44:
e3:2d:f8:18:5b:1b:86:28:e3:0e:b1:72:3c:1a:e4:
3f:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A9:04:7A:AB:47:97:53:DF:2D:2E:C4:14:7A:1D:A4:10:12:9A:3B
X509v3 Authority Key Identifier:
keyid:61:84:78:F1:98:FE:56:90:10:C3:DF:62:19:14:2F:53:0C:4F:5E:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YYR48Zj-VpAQw99iGRQvUwxPXlY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/cqkEeqtHl1PfLS7EFHodpBASmjs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/53c7b8-5e4b-49fd-8c91-ba98f1122121/1/YYR48Zj-VpAQw99iGRQvUwxPXlY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.229.116.0/23
109.196.96.0/24
Signature Algorithm: sha256WithRSAEncryption
6b:61:dd:37:86:73:9b:fc:06:0b:3b:c4:db:cd:5d:cb:a1:fe:
9d:88:ef:d4:26:5c:7b:a6:b5:8c:f1:18:32:ea:3d:a0:05:90:
6e:da:27:c7:31:13:75:99:65:41:70:bc:9b:25:12:b3:93:2b:
d9:20:fe:33:eb:3d:d8:9c:a6:64:d9:bf:6e:6d:89:d9:b1:f6:
b5:80:27:ae:1a:a8:27:72:8c:b8:d0:b0:e6:89:03:27:12:10:
56:a5:2c:94:b5:7c:1d:77:a5:23:81:66:5a:c1:6a:b6:1d:15:
a9:59:a1:a3:c5:b2:0c:bc:fa:d6:91:a5:40:f8:fb:26:68:42:
ce:4c:8a:f9:8e:6b:f6:fe:10:d3:8b:ef:21:f4:39:0c:81:9f:
68:2c:cd:c6:5f:60:34:db:9d:9a:5f:51:46:e1:5b:8c:ae:33:
a7:88:d2:8e:49:7e:43:fc:46:58:13:4b:06:28:2b:12:b4:79:
c8:27:2a:84:19:54:95:d8:c3:e1:ff:20:7f:af:db:de:88:3f:
1a:8e:4f:9b:18:79:09:77:cb:4f:80:5d:5e:05:56:af:ba:98:
7b:9a:68:6c:00:f2:82:53:1c:95:00:a2:b2:43:4b:79:bb:31:
db:de:78:ea:a8:57:4c:0f:87:a2:49:f9:4f:13:b0:9a:6b:c2:
d4:e5:fe:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 8 21:32:29 2026 by rpki-client