Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/qIHP73So9jL1RFzEBfniBmV0lSY.roa
File: qIHP73So9jL1RFzEBfniBmV0lSY.roa (raw, json)
Hash identifier: 8Cus5VEV+s2Y6EOpDAf1q24v8kV25HGUAZ+uPMsRJZA=
Subject key identifier: A8:81:CF:EF:74:A8:F6:32:F5:44:5C:C4:05:F9:E2:06:65:74:95:26
Certificate issuer: /CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Certificate serial: 019EF655C1F5DAA4BE98BEDBD3FF02CB77FE
Authority key identifier: 8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/qIHP73So9jL1RFzEBfniBmV0lSY.roa
Signing time: Tue 23 Jun 2026 21:14:35 +0000
ROA not before: Tue 23 Jun 2026 21:14:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206654
IP address blocks: 45.88.124.0/22 maxlen: 22
185.212.11.0/24 maxlen: 24
195.211.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.mft
rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f6:55:c1:f5:da:a4:be:98:be:db:d3:ff:02:cb:77:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bab30683859ec7e0206fe9265363e8e3971a9a8
Validity
Not Before: Jun 23 21:14:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a881cfef74a8f632f5445cc405f9e20665749526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d6:9a:9a:f6:3a:6c:ac:5b:1d:9b:00:83:77:
85:a5:b7:61:36:ce:ca:cc:73:68:98:11:7e:a1:d5:
f9:c8:c2:e8:ea:81:15:90:8f:6f:f3:cb:c5:1b:bc:
e4:54:43:db:9a:91:86:11:63:62:d0:ce:fd:59:b7:
c9:24:0c:2f:c4:46:72:dc:00:5b:74:5f:a7:21:f2:
59:8a:4f:44:04:35:a9:de:3e:63:fb:9a:0a:11:47:
61:f7:25:26:19:3c:e8:9c:06:84:be:d7:d8:f2:77:
4a:d5:f0:da:09:39:02:d0:24:53:f9:d8:36:72:47:
a9:ea:ef:19:e3:86:ec:2b:96:1f:5d:18:39:29:e8:
d9:3c:f1:dd:0a:b7:0b:9d:2a:1e:84:32:94:c7:bd:
14:f7:c4:20:73:32:48:f8:0d:20:e2:6b:eb:d2:62:
02:00:35:28:f6:32:45:a0:99:8c:00:0f:04:65:9b:
06:67:d1:4b:a4:b8:20:9e:dc:84:12:8e:2a:03:f3:
09:35:0c:e6:91:bd:26:89:75:ed:69:fa:a2:77:9e:
65:3b:43:d0:53:e5:5e:b4:24:91:c7:c4:eb:e3:1d:
df:6c:70:94:8f:e3:95:d3:2f:dd:af:35:96:9a:88:
7e:54:5b:0a:df:d2:7a:d1:73:1b:bc:69:60:5e:d5:
f7:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:81:CF:EF:74:A8:F6:32:F5:44:5C:C4:05:F9:E2:06:65:74:95:26
X509v3 Authority Key Identifier:
keyid:8B:AB:30:68:38:59:EC:7E:02:06:FE:92:65:36:3E:8E:39:71:A9:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i6swaDhZ7H4CBv6SZTY-jjlxqag.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/qIHP73So9jL1RFzEBfniBmV0lSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/81fd1a-47a7-45d8-be74-3ac9e56c3089/1/i6swaDhZ7H4CBv6SZTY-jjlxqag.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.124.0/22
185.212.11.0/24
195.211.48.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:51:93:32:73:45:78:a6:90:58:c2:54:6f:64:fd:2c:27:b8:
55:4a:a6:3b:ba:9b:18:d6:d8:ad:78:ea:5a:c2:be:9d:0f:00:
66:d5:e3:89:c7:b2:25:92:7c:6b:0d:f2:e0:4a:11:2b:52:90:
d0:4e:e4:09:c0:7f:1a:b0:0a:04:df:a2:f6:72:eb:30:85:74:
89:83:1f:ae:c7:3a:21:98:78:13:5a:bd:72:05:4b:ea:b6:9f:
d0:45:ed:ed:53:97:f7:3e:6f:14:21:e9:37:2d:a5:6a:54:4d:
d4:b7:e9:4b:1e:28:db:f8:de:64:26:c2:79:d3:d1:90:97:8a:
70:2b:f4:6e:43:9a:12:10:1f:de:1f:51:08:8a:2b:c0:a6:d7:
fd:82:ad:68:35:77:de:50:87:c3:2a:33:aa:02:5f:83:97:ee:
fa:26:7a:29:ae:44:53:a8:fe:39:57:e4:fc:17:07:42:4f:16:
a1:99:bf:fc:53:db:bb:dd:2e:05:3d:70:13:5b:c2:bb:2b:d2:
18:8e:01:6c:f8:1b:82:ed:18:b6:6b:a2:bf:70:f3:da:65:dc:
1a:f3:7f:09:f3:fe:9b:4a:9f:0d:9f:eb:83:92:a4:40:3e:eb:
a4:fe:0f:46:73:ec:51:3d:36:c9:a8:7c:c1:b3:27:b5:07:ae:
86:83:ec:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:35:52 2026 by rpki-client