Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/QzoE7YI2JkwI9mVxwsF8DHIXYGE.roa
File: QzoE7YI2JkwI9mVxwsF8DHIXYGE.roa (raw, json)
Hash identifier: 7XDAG6QnwyxT0wvAWUAuUI4m88iqJ1Pi9UntCRyGfgQ=
Subject key identifier: 43:3A:04:ED:82:36:26:4C:08:F6:65:71:C2:C1:7C:0C:72:17:60:61
Certificate issuer: /CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Certificate serial: 01A0C8977AAE8E330DB4C0A03FE9AFD827B0
Authority key identifier: 4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/QzoE7YI2JkwI9mVxwsF8DHIXYGE.roa
Signing time: Tue 22 Sep 2026 10:09:25 +0000
ROA not before: Tue 22 Sep 2026 10:09:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12301
IP address blocks: 82.150.37.0/24 maxlen: 24
193.194.159.0/24 maxlen: 24
2a03:9900:4010::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.mft
rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:97:7a:ae:8e:33:0d:b4:c0:a0:3f:e9:af:d8:27:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f36103344fcd3b5759f2db3f3c7071376f9e233
Validity
Not Before: Sep 22 10:09:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=433a04ed8236264c08f66571c2c17c0c72176061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:66:21:65:e9:64:ac:66:2b:24:cd:c5:b5:64:
23:dc:f2:e0:7f:f7:9e:89:fd:67:e3:f5:9f:39:d1:
4d:d3:6f:83:2e:ef:25:f4:79:73:fc:61:d1:2a:53:
c0:c5:3a:3a:51:16:b2:b9:f7:03:04:e1:05:03:aa:
d0:80:c8:a6:a7:e2:c1:fb:16:b8:e3:1a:48:70:fd:
52:c4:2b:93:92:65:5b:1a:65:ca:ef:36:3e:18:8b:
31:0c:0d:6b:15:60:03:93:e6:f9:1d:f8:a5:1d:5d:
59:e8:37:1f:49:cb:9b:88:71:5c:bf:fe:7d:a6:61:
f7:b6:ad:b1:68:ca:5a:f1:3c:8c:82:59:55:4d:a0:
12:2b:3b:42:28:cf:ba:34:4e:48:3c:cc:1a:df:73:
fa:d7:e2:60:98:06:67:44:7e:42:14:b7:09:fc:9d:
b8:c0:b0:b9:58:c4:56:37:2e:22:c2:79:24:df:59:
20:c8:0c:10:00:00:21:59:16:47:2a:44:f9:c6:1b:
8f:a4:60:e4:24:66:61:c4:64:43:77:00:92:3e:26:
ed:04:87:99:7d:3e:bc:78:f8:34:14:62:05:c7:58:
b7:7c:dd:c4:5a:b2:80:aa:ca:81:1d:fd:42:30:8d:
24:ad:1a:3d:50:05:0d:34:b9:8e:f0:f6:47:7f:a0:
ad:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:3A:04:ED:82:36:26:4C:08:F6:65:71:C2:C1:7C:0C:72:17:60:61
X509v3 Authority Key Identifier:
keyid:4F:36:10:33:44:FC:D3:B5:75:9F:2D:B3:F3:C7:07:13:76:F9:E2:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TzYQM0T807V1ny2z88cHE3b54jM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/QzoE7YI2JkwI9mVxwsF8DHIXYGE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/80d9df-eaf3-48b6-8fd5-0acc892b11d2/1/TzYQM0T807V1ny2z88cHE3b54jM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.150.37.0/24
193.194.159.0/24
IPv6:
2a03:9900:4010::/48
Signature Algorithm: sha256WithRSAEncryption
48:ef:97:94:c4:9b:be:82:44:64:53:aa:99:4c:b8:e8:82:cd:
84:1e:74:e8:ac:8b:0a:a6:95:96:26:b2:70:92:cc:4f:af:ef:
de:fd:b4:cb:4b:6f:a8:a0:21:8d:48:04:84:12:14:cd:dc:c0:
6b:8b:e9:9c:a1:dc:0e:56:a4:8d:b6:32:34:fd:3f:ae:e6:2b:
d0:5a:7a:c3:29:96:6d:57:24:a6:2d:7b:d5:94:c8:5a:88:64:
20:ab:f5:08:0b:c8:42:cb:eb:85:36:a3:f7:08:23:6c:36:74:
13:db:65:de:b4:83:73:ae:5c:b5:da:03:5f:28:74:9b:c4:f6:
c1:cd:ea:69:72:26:51:cb:2a:07:a4:7e:e4:93:ff:ea:84:81:
15:07:e0:08:19:f8:46:ef:1e:8e:c7:df:ba:ab:16:80:a0:f0:
e0:77:62:f1:ce:58:78:23:35:f4:88:68:1b:0e:d0:46:08:2b:
28:e8:27:ef:60:e8:89:ba:cd:78:ac:bb:a3:c9:e6:76:86:fe:
d9:83:31:49:94:f1:ae:c3:34:48:31:65:3b:36:40:f1:19:60:
1a:60:2d:c8:2f:40:d2:fb:fa:79:9d:39:fa:f1:2c:c3:2d:24:
f4:e4:ef:6c:cf:44:b2:30:a4:4a:d7:4d:90:76:bb:75:c4:f0:
78:0a:bb:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:59:40 2026 by rpki-client