Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/qUwK9s2mmBLTPQlCS2E3qnCndLo.roa
File: qUwK9s2mmBLTPQlCS2E3qnCndLo.roa (raw, json)
Hash identifier: dl9QrW5kzVjvXWRYqlw9UrndrhoQTxzNmZ6VZwh8ncM=
Subject key identifier: A9:4C:0A:F6:CD:A6:98:12:D3:3D:09:42:4B:61:37:AA:70:A7:74:BA
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01A05BDF3F9F71790E6F0F53BF2B5F0E0669
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/qUwK9s2mmBLTPQlCS2E3qnCndLo.roa
Signing time: Tue 01 Sep 2026 07:29:12 +0000
ROA not before: Tue 01 Sep 2026 07:29:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209854
IP address blocks: 109.160.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:5b:df:3f:9f:71:79:0e:6f:0f:53:bf:2b:5f:0e:06:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Sep 1 07:29:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a94c0af6cda69812d33d09424b6137aa70a774ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:12:c9:bd:1b:56:14:15:89:9a:63:2e:a2:ea:
b2:a3:1c:c9:1f:88:d2:7a:aa:b9:de:b6:fa:a8:af:
9c:1e:f4:26:39:76:e5:66:1a:fb:a8:ec:b4:f6:c4:
74:08:d2:fb:71:1a:90:93:ff:1f:58:2d:fa:81:8f:
ee:e7:ff:9d:3b:1f:5b:ef:14:fb:a6:91:6b:e2:51:
05:87:05:31:d1:52:76:16:cd:b8:91:94:00:69:9c:
27:f8:ad:a2:6a:15:1b:76:a3:8c:d2:4c:c7:53:f2:
ed:82:4e:29:a3:09:ea:9e:c2:8b:ae:cf:d6:dc:07:
5a:cd:ae:9f:d4:b4:40:76:cd:c8:b8:14:74:bf:56:
5c:37:36:08:69:19:b2:e5:4a:ad:19:fe:60:e6:fa:
9d:7b:89:0c:0b:55:5b:48:57:1e:52:76:3a:15:16:
31:b8:c9:1d:77:2a:b4:54:a0:0e:46:32:ec:25:2f:
6d:49:b2:6e:52:c3:c7:be:7d:aa:b3:4d:d0:16:97:
af:c4:c6:00:40:84:bf:1b:9b:cb:33:07:91:8c:c6:
4f:54:98:c5:9b:6b:e5:bd:6b:f8:82:9c:a2:34:c2:
cc:09:ff:66:20:b0:c3:a2:be:62:ae:4b:e1:85:55:
c7:19:ab:d2:e5:f0:6c:f4:37:b2:58:68:7a:43:0e:
94:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:4C:0A:F6:CD:A6:98:12:D3:3D:09:42:4B:61:37:AA:70:A7:74:BA
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/qUwK9s2mmBLTPQlCS2E3qnCndLo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.34.0/24
Signature Algorithm: sha256WithRSAEncryption
81:da:c6:f4:d3:7f:60:d7:d2:49:87:58:4b:d2:a7:57:dc:78:
88:c7:77:d3:63:d7:2d:52:11:f0:a6:81:01:54:00:34:f9:4d:
6e:8b:42:2c:5e:47:40:fc:dc:c0:71:4c:17:e5:75:b7:48:6f:
33:a8:87:00:54:9b:aa:a3:5c:f7:dc:9b:10:42:89:8d:d2:f1:
50:54:e8:33:ef:60:49:fe:02:b9:e2:9f:cf:44:c2:4c:94:9d:
cd:70:fe:ef:8f:1f:0d:26:78:60:45:df:60:b3:ac:57:93:3b:
fd:a3:6f:a6:67:a8:12:d1:3d:7d:4b:31:d5:cb:ff:15:b3:cb:
84:2c:5e:34:4f:e2:ad:47:0f:5c:ec:70:c2:6b:f6:b3:43:41:
4e:a0:89:fa:f0:56:b2:7e:11:55:f6:ed:9b:8a:34:32:c4:13:
99:89:e2:88:97:37:68:00:d9:e3:51:5b:60:da:5a:4a:95:f9:
74:e1:46:64:21:35:d6:6a:f3:ee:bf:32:35:20:6c:2c:82:5e:
f1:5e:ae:35:35:83:af:e6:41:2a:64:39:3c:6b:17:6f:86:fe:
ae:43:3f:29:c7:ae:2f:10:df:34:23:04:43:ad:78:df:00:90:
57:0a:1b:69:14:92:a6:20:49:38:4b:d5:4c:1e:80:fb:33:31:
a3:a7:52:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:44:20 2026 by rpki-client