Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/qe9-3QkjBxFyWxL_vzoUOFw2A1Y.roa
File: qe9-3QkjBxFyWxL_vzoUOFw2A1Y.roa (raw, json)
Hash identifier: TvC61ITQGltf4rYIHmX8krv+oGoHgURt5QCIo015ems=
Subject key identifier: A9:EF:7E:DD:09:23:07:11:72:5B:12:FF:BF:3A:14:38:5C:36:03:56
Certificate issuer: /CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Certificate serial: 019D0AFF31AE8FB00C3117FC28A47AB8A677
Authority key identifier: C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/qe9-3QkjBxFyWxL_vzoUOFw2A1Y.roa
Signing time: Fri 20 Mar 2026 11:26:29 +0000
ROA not before: Fri 20 Mar 2026 11:26:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212705
IP address blocks: 217.138.29.0/24 maxlen: 24
2a0e:e00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:0a:ff:31:ae:8f:b0:0c:31:17:fc:28:a4:7a:b8:a6:77
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8111b11824a51e875b7e067b04ac78fdee4a11c
Validity
Not Before: Mar 20 11:26:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9ef7edd09230711725b12ffbf3a14385c360356
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:9f:9b:55:5e:2d:7f:dc:22:7d:3f:3e:d7:72:
11:81:77:b4:83:c3:d2:b4:b1:1b:e7:c6:f6:3e:c8:
62:8b:ce:94:19:fb:14:d7:5d:4a:6a:89:bb:d5:74:
6f:09:09:4e:00:03:1a:ca:4d:1c:69:dc:c0:ef:45:
5c:03:2b:07:25:dc:fb:91:80:a4:fa:1e:76:7c:b1:
dc:c5:ae:97:28:3c:6a:cc:c8:b9:9b:44:f2:fa:a2:
85:b5:19:d2:c0:e3:a5:26:99:81:31:a6:33:65:cc:
54:7e:70:56:14:78:92:44:eb:de:f9:fb:b1:93:5b:
da:74:35:1a:56:fb:dc:f1:42:d7:72:70:ea:c8:37:
63:86:e5:dc:c9:96:98:71:4b:f2:92:ea:b6:41:11:
d3:0b:e2:c3:90:83:27:7d:94:ad:5e:ef:1b:9a:f1:
e7:c0:c4:b5:a2:af:90:9b:c6:84:6f:68:3a:00:da:
21:fa:ec:d4:b3:52:15:5b:ff:b9:8d:1e:78:8d:bd:
12:c3:64:61:01:98:0f:f0:59:12:d6:65:db:5a:28:
2f:0a:11:ea:fd:87:81:93:7b:b6:e1:b2:d6:aa:c5:
4e:a1:85:db:dd:8b:94:89:54:4b:3a:83:7b:ba:f9:
9f:8d:10:dd:de:b7:35:a2:08:75:99:fe:d9:cb:e8:
ad:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EF:7E:DD:09:23:07:11:72:5B:12:FF:BF:3A:14:38:5C:36:03:56
X509v3 Authority Key Identifier:
keyid:C8:11:1B:11:82:4A:51:E8:75:B7:E0:67:B0:4A:C7:8F:DE:E4:A1:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yBEbEYJKUeh1t-BnsErHj97koRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/qe9-3QkjBxFyWxL_vzoUOFw2A1Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/dfbab4-a7e3-4b69-bd40-67f8ce814acb/1/yBEbEYJKUeh1t-BnsErHj97koRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.138.29.0/24
IPv6:
2a0e:e00::/29
Signature Algorithm: sha256WithRSAEncryption
5c:19:d5:92:2f:b5:db:a6:10:64:f3:66:bb:70:c2:63:6c:97:
40:19:1c:aa:ab:cb:d4:20:6e:90:29:f5:de:69:fb:d6:f2:f6:
1a:9e:47:f9:d4:52:a7:43:56:e7:e3:cc:5f:b2:90:ee:1b:b1:
b1:9c:dd:19:8a:5a:7c:17:b6:4a:6f:a1:40:a4:73:6e:89:73:
69:3f:4c:89:0e:66:a6:ee:ae:6b:65:3c:cd:58:ea:a5:d7:a9:
d9:08:61:5e:3a:17:c9:cd:21:df:49:82:51:47:4f:a1:65:0b:
b1:a7:8f:bf:83:8a:cb:85:2d:b7:6e:fb:54:d2:35:02:e1:80:
ed:80:b6:5f:64:44:6b:43:1b:c2:5e:c3:8a:f6:7b:52:e5:9a:
a7:85:cf:b3:8c:39:bf:fc:b6:9c:fb:bd:ab:07:84:63:bc:11:
de:a6:8f:89:5e:d6:86:79:19:da:39:a5:c2:08:c7:55:4d:71:
13:b2:b9:f2:72:e2:7d:06:43:32:65:9a:6a:bf:37:4f:3c:01:
77:c7:6d:43:a0:df:7b:05:f4:0e:39:c8:22:53:3c:c5:02:ec:
ed:f4:d8:ff:60:1f:9b:7c:55:b6:80:ba:71:dc:e9:86:02:34:
be:d3:bc:f6:f8:f2:65:87:74:73:0e:72:46:8b:33:a4:ae:d4:
7f:05:3c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 01:58:24 2026 by rpki-client