Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/9qr-w2wpxEW3qoI0HaMRtnFyvOM.roa
File: 9qr-w2wpxEW3qoI0HaMRtnFyvOM.roa (raw, json)
Hash identifier: 0mLDL1YHDXNW/qV7cFG0rQnmM6PpKMJpJr403bMJ+rA=
Subject key identifier: F6:AA:FE:C3:6C:29:C4:45:B7:AA:82:34:1D:A3:11:B6:71:72:BC:E3
Certificate issuer: /CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Certificate serial: 019ED242D7A27E38C84BD3AD8E41567310BA
Authority key identifier: 41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/9qr-w2wpxEW3qoI0HaMRtnFyvOM.roa
Signing time: Tue 16 Jun 2026 21:07:36 +0000
ROA not before: Tue 16 Jun 2026 21:07:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209659
IP address blocks: 94.142.251.0/24 maxlen: 24
2a12:5bc0::/32 maxlen: 48
2a12:5bc1::/48 maxlen: 48
2a12:5bc2::/48 maxlen: 48
2a12:5bc3::/48 maxlen: 48
2a12:5bc5::/32 maxlen: 32
2a12:5bc6::/48 maxlen: 48
2a12:5bc7::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.mft
rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 00:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d2:42:d7:a2:7e:38:c8:4b:d3:ad:8e:41:56:73:10:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4116f0e9aff39a8b196c483e085de79f246d9fdd
Validity
Not Before: Jun 16 21:07:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=f6aafec36c29c445b7aa82341da311b67172bce3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:21:00:3f:47:b3:3d:5d:82:10:ee:3e:a7:ab:
c7:f4:8e:c8:ed:1f:72:96:20:25:04:d9:88:1e:e9:
94:e6:9a:79:85:62:64:96:28:f8:8b:11:59:8c:b5:
a6:b4:c5:d4:62:11:c7:3e:a8:f3:d7:93:74:14:b2:
8f:b4:9a:0f:43:16:19:f0:d1:40:d9:38:10:04:48:
19:90:76:ec:65:ce:3b:b9:b1:07:2c:80:d2:0a:5b:
72:5e:8e:7f:d3:d4:a0:97:a8:23:fc:52:24:cf:6e:
21:49:a8:e2:37:6d:73:e0:c3:23:37:84:50:94:c5:
c0:0c:c4:13:29:c2:76:db:eb:a4:00:d9:4c:5f:67:
63:02:28:31:bd:7c:bd:28:39:40:84:17:9b:a1:8e:
c0:9f:a1:87:f7:cf:66:79:6c:c0:e8:ef:bd:a6:22:
58:c5:98:3b:2d:dc:63:aa:99:d0:3e:fa:46:d6:39:
7f:c0:6c:70:21:55:f9:92:32:5a:58:fd:48:b3:1e:
b4:b2:a0:7c:2c:76:8c:3d:94:00:59:de:d8:d4:e6:
b2:32:38:51:e2:00:7e:7f:37:e3:da:12:80:0b:22:
da:01:24:0a:68:5b:9c:63:4f:9b:64:7d:f9:51:ce:
08:d3:40:bb:fb:a7:da:f6:ed:df:c6:bb:2b:92:00:
76:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:AA:FE:C3:6C:29:C4:45:B7:AA:82:34:1D:A3:11:B6:71:72:BC:E3
X509v3 Authority Key Identifier:
keyid:41:16:F0:E9:AF:F3:9A:8B:19:6C:48:3E:08:5D:E7:9F:24:6D:9F:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QRbw6a_zmosZbEg-CF3nnyRtn90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/9qr-w2wpxEW3qoI0HaMRtnFyvOM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/bc3ff7-aa87-4297-adf0-240d1ffd09b8/1/QRbw6a_zmosZbEg-CF3nnyRtn90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.142.251.0/24
IPv6:
2a12:5bc0::-2a12:5bc1:0:ffff:ffff:ffff:ffff:ffff
2a12:5bc2::/48
2a12:5bc3::/48
2a12:5bc5::-2a12:5bc6:0:ffff:ffff:ffff:ffff:ffff
2a12:5bc7::/48
Signature Algorithm: sha256WithRSAEncryption
63:32:70:38:b9:89:3a:d6:cb:31:7d:e1:0a:c5:2c:32:c5:e3:
9c:42:02:5c:cc:53:da:22:1e:1d:6f:0d:cf:70:d5:0c:00:e0:
17:77:c1:b5:67:3f:37:43:3b:91:fa:d4:32:00:da:b6:c7:e1:
68:ea:81:d3:66:17:6a:0d:d9:bd:c4:35:82:1e:fe:4a:3c:7e:
67:02:7f:19:df:fc:06:12:b1:f4:36:50:f3:ea:ae:1c:68:1e:
9e:44:f2:8b:5c:1f:2d:91:66:02:f4:e5:e5:1b:70:2d:c5:35:
76:54:05:da:08:e0:6d:09:f2:95:fa:53:b4:ac:1e:1f:5c:96:
0a:05:e4:33:0a:76:96:61:4e:bf:74:10:70:25:a6:de:43:e2:
be:ab:8b:2f:66:b8:34:4d:09:90:46:09:e2:f0:ad:e1:1f:af:
aa:99:0a:5f:a6:19:07:2f:90:0f:42:fc:6b:85:06:db:ed:dd:
49:e3:1b:c6:4e:94:e5:45:b2:61:92:dc:c7:43:fb:05:c0:4e:
40:b0:c3:dd:46:55:ae:d8:df:ec:26:9e:28:48:66:ae:87:45:
67:4c:99:cc:24:83:54:a3:ae:cd:ab:dd:cf:0f:de:02:7f:94:
d8:b9:d0:62:26:33:49:48:74:14:73:c1:9c:d1:49:d4:14:89:
5d:60:d2:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 10:06:04 2026 by rpki-client