Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/pQ422AfsEebhu6zTidoiDWCS7Bo.roa
File: pQ422AfsEebhu6zTidoiDWCS7Bo.roa (raw, json)
Hash identifier: Z0+ifqPQgjn9ZQGLHVdiHM5voE0DN2CYEKwwAMok9zE=
Subject key identifier: A5:0E:36:D8:07:EC:11:E6:E1:BB:AC:D3:89:DA:22:0D:60:92:EC:1A
Certificate issuer: /CN=86e99134171b5863f62f22b7d7abf740349528ec
Certificate serial: 01A1684EC0EE31A39E0C379488B8CEB4CCA5
Authority key identifier: 86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/pQ422AfsEebhu6zTidoiDWCS7Bo.roa
Signing time: Fri 23 Oct 2026 10:29:14 +0000
ROA not before: Fri 23 Oct 2026 10:29:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209230
IP address blocks: 194.117.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.mft
rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 31 Oct 2026 23:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:68:4e:c0:ee:31:a3:9e:0c:37:94:88:b8:ce:b4:cc:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=86e99134171b5863f62f22b7d7abf740349528ec
Validity
Not Before: Oct 23 10:29:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a50e36d807ec11e6e1bbacd389da220d6092ec1a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:a0:99:7e:8d:a4:5f:d2:86:04:a5:dd:ed:
89:79:f1:51:67:71:ea:21:22:58:5c:8f:1a:4c:07:
45:5b:f2:e1:cb:96:0b:b6:de:db:70:fd:28:46:fb:
f1:53:ff:8f:ca:a0:64:07:a8:40:22:c6:4d:08:2c:
3c:19:e5:37:c7:15:b8:a8:9e:53:52:a0:0e:82:f0:
16:b1:f4:34:53:8b:cc:9f:7e:3f:e8:38:e3:f1:94:
c7:a9:fe:76:85:54:ac:81:d0:b8:b6:28:16:37:48:
94:2d:33:b2:7a:3c:4d:55:76:3d:88:60:f7:b5:fb:
26:eb:03:57:39:b8:3d:0d:f7:44:f1:9d:4a:8e:b6:
8a:92:67:a4:04:77:8a:60:49:e6:e7:d0:10:47:d8:
8c:f8:43:d4:7b:a7:9c:5c:ab:2b:1c:87:93:c3:2b:
af:79:af:96:7f:8e:99:20:1e:68:1c:5d:b6:e4:1a:
67:3c:83:22:a9:b1:48:ca:52:f5:ee:dd:f6:51:d2:
e9:d4:da:9b:e2:1b:6e:b5:1a:87:d6:dd:b3:dd:cb:
38:b6:32:ad:b2:9b:3b:bd:d7:ef:c8:01:2e:d7:7a:
dd:04:7a:c8:f9:38:d0:28:4a:15:54:70:18:31:86:
37:e4:13:b6:f7:2f:87:32:81:14:82:73:1a:1e:90:
db:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:0E:36:D8:07:EC:11:E6:E1:BB:AC:D3:89:DA:22:0D:60:92:EC:1A
X509v3 Authority Key Identifier:
keyid:86:E9:91:34:17:1B:58:63:F6:2F:22:B7:D7:AB:F7:40:34:95:28:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/humRNBcbWGP2LyK316v3QDSVKOw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/pQ422AfsEebhu6zTidoiDWCS7Bo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/c1b5ec-52ff-4ecb-b3fd-da95808ba2c1/1/humRNBcbWGP2LyK316v3QDSVKOw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.117.73.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:5d:02:3c:ce:85:e1:e1:76:25:82:19:67:bc:1e:c4:1b:79:
a4:0d:3e:d2:e0:48:54:b5:1c:ca:d3:c7:54:a4:68:11:80:a2:
11:1f:93:e8:1b:ce:88:d0:23:9d:1d:ad:95:d0:ab:46:74:28:
7e:7d:2d:5b:84:0b:43:a9:12:07:fe:fe:dd:81:30:06:3f:87:
b9:00:b4:c8:83:a2:8c:d9:96:1c:3c:c4:cb:89:8a:70:26:6d:
59:61:f0:df:85:ab:21:06:64:03:56:ea:17:ef:92:82:4b:e7:
99:8e:76:76:6e:db:12:2b:99:3a:ff:7b:fb:fb:c5:3e:8e:3e:
75:62:74:7a:b7:0f:a3:88:95:b9:8e:17:e8:52:f1:9a:f9:18:
03:c2:66:2e:69:f1:ff:78:82:06:0c:66:89:80:f2:bf:a3:4f:
26:43:fa:e3:c1:8d:d3:e2:ef:9a:37:88:4b:72:c0:d0:11:e3:
9c:43:95:ed:a3:28:dc:70:ad:6e:c8:8f:21:5c:e0:81:ff:30:
79:3f:9f:c0:41:c2:b8:9c:37:16:56:05:04:30:b6:c2:21:34:
6f:c5:70:db:66:c7:fe:17:d6:dd:63:cb:24:86:ef:5b:33:56:
fe:05:74:33:55:5c:08:e4:dd:ed:3a:5c:6d:63:7c:61:bb:e8:
bb:bd:8f:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Oct 31 08:37:30 2026 by rpki-client