Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/eefc90-3d71-40e0-a6b3-9f790c1b2234/1/1-Q4j0qKtj29aQO8HTd1ll4oq01M.roa
File: 1-Q4j0qKtj29aQO8HTd1ll4oq01M.roa (raw, json)
Hash identifier: Lf21mP22Hqe9W386laAQtZ9s0Z9m4XiYLVKYKs7MqJo=
Subject key identifier: F9:0E:23:D2:A2:AD:8F:6F:5A:40:EF:07:4D:DD:65:97:8A:2A:D3:53
Certificate issuer: /CN=430ebaa7dee2b8ce11bba751a17da7b21313b66e
Certificate serial: 019C4CBDCC459C358268C96B2B1ED95A8CEC
Authority key identifier: 43:0E:BA:A7:DE:E2:B8:CE:11:BB:A7:51:A1:7D:A7:B2:13:13:B6:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qw66p97iuM4Ru6dRoX2nshMTtm4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/eefc90-3d71-40e0-a6b3-9f790c1b2234/1/1-Q4j0qKtj29aQO8HTd1ll4oq01M.roa
Signing time: Wed 11 Feb 2026 12:47:12 +0000
ROA not before: Wed 11 Feb 2026 12:47:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8738
IP address blocks: 192.114.36.0/22 maxlen: 22
192.114.36.0/24 maxlen: 24
192.114.37.0/24 maxlen: 24
192.114.38.0/24 maxlen: 24
192.114.39.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/eefc90-3d71-40e0-a6b3-9f790c1b2234/1/Qw66p97iuM4Ru6dRoX2nshMTtm4.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/eefc90-3d71-40e0-a6b3-9f790c1b2234/1/Qw66p97iuM4Ru6dRoX2nshMTtm4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qw66p97iuM4Ru6dRoX2nshMTtm4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:bd:cc:45:9c:35:82:68:c9:6b:2b:1e:d9:5a:8c:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=430ebaa7dee2b8ce11bba751a17da7b21313b66e
Validity
Not Before: Feb 11 12:47:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f90e23d2a2ad8f6f5a40ef074ddd65978a2ad353
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:20:15:d5:11:8b:66:dc:11:db:bc:80:af:3d:
fa:ee:da:de:00:49:ff:8b:5c:5f:6f:d7:95:06:a1:
0e:6c:27:34:d8:08:c5:bd:04:b4:70:b2:2e:db:4f:
a2:e4:4e:0a:7b:f2:47:87:c9:f9:a0:4b:fb:c6:08:
ec:2e:02:b3:c1:16:dc:37:43:82:ee:2f:25:b6:f1:
ab:1f:b2:25:cd:1f:7d:fc:37:62:19:32:46:51:95:
93:fd:d2:56:d1:ef:53:59:e4:8b:9b:26:9c:06:f9:
73:de:41:8b:95:63:7b:bb:fb:90:2a:e4:b3:83:54:
3e:4a:c0:ab:1a:cf:d4:e8:59:df:da:8e:58:3e:80:
ed:25:da:a2:dd:d0:fd:0f:b9:af:55:65:68:09:7c:
a5:37:b4:72:01:c8:73:84:03:c1:52:50:6c:4c:ae:
16:8e:12:40:2e:50:74:7f:2d:11:18:cf:30:fb:91:
14:7c:44:eb:07:da:27:80:d8:34:6e:f6:cf:5a:22:
97:fe:39:72:24:33:42:86:24:90:5b:cf:ff:77:e1:
63:b2:00:92:4a:6e:6f:69:f2:5b:a1:a8:ae:53:83:
0d:2c:e9:46:51:9d:70:80:b6:1d:17:2a:67:67:84:
d0:c1:8f:ee:9a:78:29:da:a6:c4:56:f7:67:fa:54:
84:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F9:0E:23:D2:A2:AD:8F:6F:5A:40:EF:07:4D:DD:65:97:8A:2A:D3:53
X509v3 Authority Key Identifier:
keyid:43:0E:BA:A7:DE:E2:B8:CE:11:BB:A7:51:A1:7D:A7:B2:13:13:B6:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qw66p97iuM4Ru6dRoX2nshMTtm4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eefc90-3d71-40e0-a6b3-9f790c1b2234/1/1-Q4j0qKtj29aQO8HTd1ll4oq01M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/eefc90-3d71-40e0-a6b3-9f790c1b2234/1/Qw66p97iuM4Ru6dRoX2nshMTtm4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
192.114.36.0/22
Signature Algorithm: sha256WithRSAEncryption
5b:43:11:f9:01:64:64:66:60:e4:93:ad:14:ef:13:77:fd:66:
df:09:84:70:67:f1:13:2e:e7:63:06:52:ef:7d:ca:04:18:7e:
1a:bc:1e:36:1a:06:be:0f:e2:30:49:79:84:6e:e2:ca:06:c3:
1a:07:50:57:61:45:fc:4c:1d:dc:01:e3:11:92:18:35:7b:f0:
da:1d:ec:ab:1e:e0:80:c2:92:81:df:5a:24:13:bd:e9:5a:ed:
35:b8:af:03:77:f1:16:3f:cb:24:a0:1a:72:e9:f9:f6:4c:ed:
79:35:93:d4:f7:eb:da:46:1d:72:dc:c7:53:8c:60:70:26:60:
da:11:5c:6b:22:f9:e5:74:06:d7:33:be:2f:c4:fa:26:30:fc:
ce:5c:24:7d:46:7c:92:4a:14:ff:6e:18:e2:b7:2f:c3:d6:43:
84:c0:1f:d0:61:da:20:25:3e:ae:e3:ae:2d:dd:3c:6a:5f:ee:
12:d2:22:e2:46:ec:e3:15:88:81:5a:6e:3e:3b:b5:80:16:c5:
4a:38:b3:f4:cd:03:d8:11:bd:a6:f0:2f:83:6c:01:0e:b0:bf:
f2:af:26:7f:98:02:5e:40:bb:44:32:a0:86:89:fc:cb:96:2d:
1d:15:b5:d9:b9:9e:14:91:aa:ed:bb:c8:78:1c:06:80:fc:c0:
78:0b:7f:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:25:21 2026 by rpki-client