Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/qMkLAoNAUe9q8gfWdZ7a_wzUGvg.roa
File: qMkLAoNAUe9q8gfWdZ7a_wzUGvg.roa (raw, json)
Hash identifier: qos4wdFa7iSz40bF0wQ8pxahdxfqI9hUbUKo1P2JNYQ=
Subject key identifier: A8:C9:0B:02:83:40:51:EF:6A:F2:07:D6:75:9E:DA:FF:0C:D4:1A:F8
Certificate issuer: /CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Certificate serial: 019F5269F6D59B6C2DC4BD55B554313FF16B
Authority key identifier: 27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/qMkLAoNAUe9q8gfWdZ7a_wzUGvg.roa
Signing time: Sat 11 Jul 2026 18:21:43 +0000
ROA not before: Sat 11 Jul 2026 18:21:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209836
IP address blocks: 2.189.84.0/24 maxlen: 24
78.39.47.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.mft
rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 16:54:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:52:69:f6:d5:9b:6c:2d:c4:bd:55:b5:54:31:3f:f1:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=27a39e4794c34612e7f22569b1a6a81710260ae5
Validity
Not Before: Jul 11 18:21:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8c90b02834051ef6af207d6759edaff0cd41af8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e3:c9:83:bb:56:b3:59:cd:2a:4b:ea:4a:81:
94:ce:db:bf:78:ff:31:6b:bf:b8:12:1d:83:52:09:
12:2e:a2:30:04:b1:60:9b:1a:4e:f9:0b:ee:bf:c4:
c7:03:0d:63:1e:6f:0d:d5:33:56:3c:1a:e7:d1:b7:
c3:28:d8:1b:73:2e:98:0e:ba:ba:c8:bc:72:a2:1a:
75:7d:20:c6:f7:40:51:56:89:5a:49:a4:9e:4d:36:
97:82:f0:9c:b1:f7:35:ff:70:64:07:cc:17:e2:c5:
0a:df:7b:c7:69:29:a3:e3:4c:d5:58:f4:36:6f:cd:
06:f1:d9:62:1c:0d:3f:c3:a2:9f:42:88:f3:33:c1:
cb:59:d5:55:b2:c1:80:40:3d:28:51:ba:d8:9a:4e:
92:84:f6:5c:a1:3e:96:c0:9c:22:eb:1c:33:e4:0d:
63:11:ea:0d:b8:42:c6:57:3e:f7:c1:1e:8c:60:b5:
59:e9:aa:8b:d2:54:1d:19:04:06:06:de:22:df:5b:
29:6b:eb:c6:33:8d:31:29:36:74:af:1d:d5:51:99:
b6:c4:3a:35:9f:7d:cd:3f:c2:5e:3f:d8:4c:30:41:
ca:8a:95:87:9a:8b:08:8b:44:04:72:88:43:2b:b6:
e1:63:09:4a:1f:be:88:e6:85:74:36:5a:78:05:03:
01:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C9:0B:02:83:40:51:EF:6A:F2:07:D6:75:9E:DA:FF:0C:D4:1A:F8
X509v3 Authority Key Identifier:
keyid:27:A3:9E:47:94:C3:46:12:E7:F2:25:69:B1:A6:A8:17:10:26:0A:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J6OeR5TDRhLn8iVpsaaoFxAmCuU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/qMkLAoNAUe9q8gfWdZ7a_wzUGvg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/38fc33-06c1-4006-9e23-f74d9518576c/1/J6OeR5TDRhLn8iVpsaaoFxAmCuU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.189.84.0/24
78.39.47.0/24
Signature Algorithm: sha256WithRSAEncryption
20:2c:c0:f8:c1:71:d9:6e:8a:00:7b:78:80:ae:9b:79:54:1a:
52:09:d0:64:4b:03:cf:81:1e:33:b2:c9:51:ef:45:c0:d9:c9:
2e:4e:e9:d9:4f:5f:06:6d:4e:a3:ff:89:01:df:c9:95:f1:19:
4e:c2:c4:9b:c2:a1:2d:79:a4:5a:de:40:51:ca:aa:46:68:86:
fa:36:c0:2a:47:49:70:d0:d8:6e:f1:40:78:44:9b:ff:16:f2:
55:dd:81:82:b3:53:6f:77:19:91:69:56:22:d0:5d:17:35:78:
2d:74:33:15:bd:41:cd:34:96:84:ec:4e:3a:05:62:70:77:dc:
44:14:ad:4f:1b:6f:2c:f6:f4:0a:f4:47:b6:33:11:48:0c:a7:
bb:89:c2:b3:12:93:67:49:b3:83:3b:c8:88:67:71:d4:25:b6:
a2:5d:2a:dc:14:52:aa:f5:17:46:70:77:55:c3:59:02:34:a6:
98:08:6d:9d:f7:00:6e:f0:3c:b2:51:43:1c:24:3b:5b:b6:da:
69:63:6d:67:31:03:4f:1c:b7:cb:ed:a6:4c:59:d9:6e:14:de:
e6:30:ac:a5:4f:3f:9f:0e:62:2e:86:8a:aa:e3:cd:c8:b4:73:
ae:ea:1e:08:9a:3c:13:5d:ce:a2:41:3a:aa:05:e3:9c:84:c1:
bd:97:d2:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 00:56:10 2026 by rpki-client