Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/SCqPIEkOrt01ONxjT0XgajknB8k.roa
File: SCqPIEkOrt01ONxjT0XgajknB8k.roa (raw, json)
Hash identifier: W9QDPMAsjC59u8HP2lYvDC47+WKe629lFseH1cWFZZo=
Subject key identifier: 48:2A:8F:20:49:0E:AE:DD:35:38:DC:63:4F:45:E0:6A:39:27:07:C9
Certificate issuer: /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial: 01A154910B02EA446E01E30AD7C61BB7102E
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/SCqPIEkOrt01ONxjT0XgajknB8k.roa
Signing time: Mon 19 Oct 2026 14:29:14 +0000
ROA not before: Mon 19 Oct 2026 14:29:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215754
IP address blocks: 2a0a:2786:4000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:54:91:0b:02:ea:44:6e:01:e3:0a:d7:c6:1b:b7:10:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Validity
Not Before: Oct 19 14:29:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=482a8f20490eaedd3538dc634f45e06a392707c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:1e:d9:d3:1f:bb:3c:2d:96:36:d6:1b:ca:1c:
b6:06:67:32:f6:19:6d:1e:b4:9a:cb:c0:c1:4f:44:
b2:f0:72:cb:3c:df:bb:f5:1a:1a:d4:72:46:fc:5e:
53:bf:7f:ba:e9:3c:d4:75:34:09:73:3b:82:c9:4b:
4b:84:f6:57:2d:c1:da:cd:88:6d:d5:19:05:98:a7:
5b:e6:8a:81:4d:b2:ab:f6:f6:28:ff:94:9d:cb:13:
37:59:98:db:fb:aa:b0:41:3e:1f:dc:30:84:40:1e:
cc:33:11:0b:bf:74:63:e0:16:86:4a:43:4f:eb:a6:
d5:87:65:26:13:de:95:9f:21:94:c7:cc:48:5a:78:
96:32:b6:5b:81:ba:ef:b4:50:02:b0:6e:fc:b9:d1:
13:e5:b6:c6:77:3a:de:16:6e:2a:50:aa:b0:52:30:
75:4b:de:4c:6b:a1:6a:d7:31:96:74:a2:c9:40:d1:
6f:67:98:03:ff:49:6f:ca:e7:d3:c3:af:41:7c:87:
fb:a0:7a:10:cc:96:fe:b6:f1:c1:27:6c:1f:3e:df:
5a:25:9d:4a:54:e0:2b:7e:13:45:4c:d6:ac:e9:dd:
eb:b1:f7:7a:b0:94:21:19:20:90:c9:44:44:74:53:
7e:62:07:7b:cb:c3:ea:b7:45:db:f5:78:69:9d:f2:
e3:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:2A:8F:20:49:0E:AE:DD:35:38:DC:63:4F:45:E0:6A:39:27:07:C9
X509v3 Authority Key Identifier:
keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/SCqPIEkOrt01ONxjT0XgajknB8k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2786:4000::/36
Signature Algorithm: sha256WithRSAEncryption
a8:7a:79:98:c4:67:78:be:fd:6a:b0:02:23:3f:05:3c:58:14:
ff:57:c6:85:7f:cf:d9:a0:fa:41:28:c2:eb:02:61:7a:4a:c4:
ea:82:d3:5e:d7:02:3f:d6:b8:d6:2a:8b:b4:3c:ad:0e:6f:65:
5b:92:42:1d:16:bd:6c:db:3d:75:f7:a5:f7:5c:01:db:c5:00:
b5:ec:43:a4:ed:e9:5a:4b:65:ee:b5:c2:34:bc:c4:58:1f:9b:
1c:43:4e:cc:a6:df:0e:e9:cc:82:42:96:58:92:c3:93:c0:e1:
37:f9:65:3e:6d:9d:55:99:7b:68:82:2b:df:d9:ea:92:d2:18:
36:f0:f8:62:93:b0:06:d4:a8:02:97:77:4e:1d:35:a3:93:7a:
23:10:5c:e1:cf:1b:50:e0:5c:5c:06:54:b3:fb:12:4f:43:cd:
bc:96:c0:cc:52:da:6c:f6:74:a4:51:d8:c7:bc:2a:61:01:7a:
6a:16:81:d3:01:83:fe:8e:1d:74:16:22:89:e2:ea:55:d2:a9:
99:ea:35:a8:51:be:7a:f9:36:a9:c6:d2:d4:9e:a9:a9:95:82:
92:9d:56:db:90:0d:a7:d8:1f:2e:aa:62:a6:86:06:81:c4:86:
89:10:c7:56:0d:52:16:38:99:f4:1c:57:ae:d5:fc:61:30:05:
b1:c8:ef:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 18:04:48 2026 by rpki-client