Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qKZo1DD379G-GJSqb9okJJjNb54.roa
File: qKZo1DD379G-GJSqb9okJJjNb54.roa (raw, json)
Hash identifier: gkh8tB/PCy7nv+PBmOMon0kS2othlAgjio2tiPc0rzs=
Subject key identifier: A8:A6:68:D4:30:F7:EF:D1:BE:18:94:AA:6F:DA:24:24:98:CD:6F:9E
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A14A810FD60C886F7CFBD2CD264A85B5FA
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qKZo1DD379G-GJSqb9okJJjNb54.roa
Signing time: Sat 17 Oct 2026 15:35:34 +0000
ROA not before: Sat 17 Oct 2026 15:35:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 400906
IP address blocks: 74.112.152.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 02:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:4a:81:0f:d6:0c:88:6f:7c:fb:d2:cd:26:4a:85:b5:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Oct 17 15:35:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8a668d430f7efd1be1894aa6fda242498cd6f9e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:35:30:9a:34:05:02:68:ae:9e:7b:d2:be:74:
5d:c9:f2:3d:64:6c:02:c4:bb:2b:dc:c2:fe:63:b2:
d9:7c:bd:bd:19:96:ce:59:ea:38:c8:62:cb:2f:55:
fa:be:87:71:38:c0:5b:2f:2f:d4:2a:77:d1:83:76:
86:ed:21:13:6e:57:da:ac:77:3b:90:55:db:1c:bd:
6e:05:29:fb:ac:b6:da:69:4d:79:55:2c:8f:f9:f3:
e1:e7:16:57:ac:65:53:c5:b8:b4:49:53:8a:90:55:
1b:fa:cc:af:88:11:0a:22:f7:0c:0d:ab:3b:f2:4a:
9c:2e:84:04:00:2e:bb:a4:20:72:8c:34:e2:93:4f:
86:53:2b:87:fa:ea:f9:05:25:f1:8f:66:20:3c:9a:
99:3a:c8:50:37:7f:a1:16:97:96:e6:bd:a0:a1:37:
2a:a3:b1:e9:e8:c2:e3:8a:d4:83:fe:ff:db:44:d9:
7a:36:fb:8e:20:3c:77:dc:7e:bf:e8:0f:73:be:c7:
68:23:7a:5c:e1:71:aa:1e:4c:b5:d7:9d:84:e9:f6:
dc:e5:68:2e:de:5c:3e:6e:49:46:ed:47:ac:34:3c:
fc:e6:21:43:24:15:0b:5c:60:3e:ff:50:69:6c:69:
2f:d4:1b:f2:61:35:cf:e7:d0:a8:9b:f9:c3:78:e3:
9d:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A6:68:D4:30:F7:EF:D1:BE:18:94:AA:6F:DA:24:24:98:CD:6F:9E
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/qKZo1DD379G-GJSqb9okJJjNb54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
74.112.152.0/24
Signature Algorithm: sha256WithRSAEncryption
32:e7:e5:1d:f9:aa:9b:b1:f6:f8:c5:f4:3e:aa:91:99:06:a6:
2e:4b:85:fb:be:60:a6:25:18:63:a4:18:7d:ab:1b:cc:9e:4f:
87:57:97:b9:f1:9a:36:19:ee:22:66:f3:0f:55:a1:e9:53:5f:
dc:85:39:8d:4b:e2:09:33:18:78:cc:82:d5:13:98:ff:58:21:
5e:4e:ff:10:07:e9:1a:37:89:48:9b:d3:55:f8:06:a8:6d:12:
8a:ab:75:23:fe:09:a3:e1:19:74:bd:ee:a9:a8:90:8b:b0:e2:
45:33:ff:28:5e:28:5c:d9:2c:ef:67:9a:95:6c:44:32:c9:f3:
4e:ee:40:37:ec:72:e0:10:c1:01:8a:7b:59:ef:9c:02:c9:76:
7a:06:79:fd:5b:c6:17:73:14:1a:2c:dd:28:7f:86:f7:a7:28:
ee:15:9d:0a:ae:4c:4b:82:60:30:c0:64:c7:bb:d6:a3:6e:a7:
f8:aa:4a:55:b5:c0:72:38:d0:e7:09:9b:f7:ee:5b:e3:33:b2:
fb:7f:59:6a:f2:89:27:c6:61:7c:6c:98:10:52:50:6d:37:d5:
32:3e:ff:b7:41:a2:68:72:c0:b1:cd:ea:27:c8:07:86:5a:c6:
90:af:9e:46:c1:59:29:22:01:7a:46:ce:dc:57:16:5a:db:c8:
a2:8b:4a:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 10:48:21 2026 by rpki-client