Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/qu1WOvTSGJhb9qCrwaoo2MELsDg.roa
File: qu1WOvTSGJhb9qCrwaoo2MELsDg.roa (raw, json)
Hash identifier: sMcBLOOPq2yXaLqHdTpicJZ4I/4D7ujzTrP/m9dXVgg=
Subject key identifier: AA:ED:56:3A:F4:D2:18:98:5B:F6:A0:AB:C1:AA:28:D8:C1:0B:B0:38
Certificate issuer: /CN=f82554a856a422b061ae64c577630f91d408cd4a
Certificate serial: 019F18AD21F65ACAC000935E0907F9C11717
Authority key identifier: F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/qu1WOvTSGJhb9qCrwaoo2MELsDg.roa
Signing time: Tue 30 Jun 2026 13:17:07 +0000
ROA not before: Tue 30 Jun 2026 13:17:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31576
IP address blocks: 89.234.129.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:ad:21:f6:5a:ca:c0:00:93:5e:09:07:f9:c1:17:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f82554a856a422b061ae64c577630f91d408cd4a
Validity
Not Before: Jun 30 13:17:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aaed563af4d218985bf6a0abc1aa28d8c10bb038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:40:94:24:e6:1e:6f:fb:56:a7:8a:91:c9:85:
c9:31:24:10:fc:76:1d:52:b8:71:90:90:97:cc:df:
7b:c0:c6:85:1c:7d:19:56:55:bc:e9:de:8c:e0:7f:
98:b2:80:28:60:b1:1e:c2:50:e0:45:a6:8e:3d:41:
52:a7:c7:72:d7:24:8d:97:b8:f9:6a:3d:26:66:35:
6f:8c:1f:57:36:df:a4:90:c4:c0:41:e9:eb:19:e6:
9c:11:fc:42:bb:df:f0:6c:f1:03:69:20:65:27:d4:
35:d8:1d:59:d5:49:eb:08:27:6e:99:41:ec:26:ac:
58:09:d9:a2:04:77:e1:51:78:45:5c:d8:19:74:b5:
be:0f:ed:cf:27:b5:89:ba:06:df:03:7e:cd:88:c7:
db:c5:5b:3c:f2:9f:98:cb:30:eb:68:07:8b:1b:f5:
d5:c4:eb:61:98:77:cf:4a:3e:34:57:82:fe:dc:65:
46:1b:ca:0e:80:e1:2c:f4:0e:89:30:49:f5:48:37:
d3:9b:88:5c:84:81:08:cd:b2:2e:ac:a7:45:a4:29:
97:67:7f:fa:8a:cf:e7:4e:59:f8:b6:09:c3:13:20:
24:57:90:2c:05:0e:f0:71:53:5a:54:10:e7:f1:a5:
8c:df:61:b8:54:2b:59:f1:f7:8c:93:d0:11:52:ad:
04:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:ED:56:3A:F4:D2:18:98:5B:F6:A0:AB:C1:AA:28:D8:C1:0B:B0:38
X509v3 Authority Key Identifier:
keyid:F8:25:54:A8:56:A4:22:B0:61:AE:64:C5:77:63:0F:91:D4:08:CD:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-CVUqFakIrBhrmTFd2MPkdQIzUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/qu1WOvTSGJhb9qCrwaoo2MELsDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4f/9437a2-07e6-4e6a-aa3f-965d6d603bfa/1/1-CVUqFakIrBhrmTFd2MPkdQIzUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.234.129.0/24
Signature Algorithm: sha256WithRSAEncryption
a4:35:3e:0c:61:d6:94:ef:b3:46:55:77:00:78:37:61:e1:7b:
7a:69:2e:3f:7c:68:93:c7:dd:02:9c:cf:d0:11:69:7f:1c:1a:
ce:95:87:40:27:b4:c6:57:25:cd:69:d6:a3:04:f9:12:3a:75:
8e:94:ca:b8:a6:91:e5:54:16:6f:a7:62:99:16:19:76:8b:39:
7c:1b:f2:dd:93:af:40:36:83:b8:61:61:7e:8f:5a:67:f0:e0:
a4:e1:44:97:d4:44:2a:55:f6:b0:79:91:20:da:d7:0c:42:64:
2a:c0:a9:d2:2f:1d:34:a9:d2:64:e7:70:3d:e2:ed:70:c2:22:
be:3a:cd:d0:b6:b7:01:00:9d:89:3f:05:27:94:c1:6b:e6:8a:
e4:89:ff:2f:f3:59:5a:aa:7d:45:31:6f:e5:8d:7d:c1:8f:18:
ac:ae:ac:5e:29:0b:8b:7d:75:d3:c6:9c:ec:d6:33:4e:96:d8:
20:c6:2c:e8:4e:a5:43:2f:bf:d9:37:c2:74:92:04:e2:6e:16:
b9:b4:cb:8c:15:98:03:0a:00:69:46:43:09:4c:c8:98:15:b0:
92:0c:42:11:6b:df:c3:0f:74:5d:92:31:8d:4a:0e:1c:49:4c:
94:4d:f3:00:1e:0d:00:02:a6:fb:56:ba:cc:d8:eb:04:9d:e1:
2b:47:42:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:58:25 2026 by rpki-client