Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/qp2csbkacIhcPOH3gt72Onkgy-g.roa
File: qp2csbkacIhcPOH3gt72Onkgy-g.roa (raw, json)
Hash identifier: ryu959Oek09C+3HvM+qc6pJhm8EK7Sp/xMy1J1sbAYU=
Subject key identifier: AA:9D:9C:B1:B9:1A:70:88:5C:3C:E1:F7:82:DE:F6:3A:79:20:CB:E8
Certificate issuer: /CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Certificate serial: 01A0E712F53E920F6BF3EA2F66EF6A915C94
Authority key identifier: A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/qp2csbkacIhcPOH3gt72Onkgy-g.roa
Signing time: Mon 28 Sep 2026 08:12:54 +0000
ROA not before: Mon 28 Sep 2026 08:12:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212865
IP address blocks: 130.78.107.0/24 maxlen: 24
130.78.108.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.mft
rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 04 Oct 2026 20:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:12:f5:3e:92:0f:6b:f3:ea:2f:66:ef:6a:91:5c:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a1ea8de31ceca55803cf3af14d4a7279ae8446d0
Validity
Not Before: Sep 28 08:12:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa9d9cb1b91a70885c3ce1f782def63a7920cbe8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:06:76:4b:cc:c4:8a:e6:81:98:db:4d:0f:04:
31:e7:fe:94:23:96:57:64:a2:68:74:eb:e4:2e:e9:
d2:49:1f:be:8f:ee:f3:51:e9:62:20:c9:35:ca:d2:
3e:df:7a:03:00:b6:8c:27:f7:0a:cd:03:6e:fb:04:
53:a3:39:a8:82:40:9e:00:fd:88:8c:37:e0:7f:ff:
14:9d:af:64:71:a5:9a:2b:71:15:24:e0:40:20:23:
d3:e6:ed:cd:e1:18:0f:01:2a:fe:8a:a8:2c:7d:31:
4b:db:32:4a:7f:d8:f7:2d:58:56:32:2f:80:93:cf:
18:15:2c:47:e2:72:00:4c:67:90:c2:81:6d:b3:1f:
8e:4a:9b:a3:a3:5d:d0:70:7c:2c:db:d6:81:7e:be:
ec:18:86:6c:d8:c2:ff:46:7e:0c:5b:44:cb:18:6a:
e4:7e:de:52:6f:cf:a5:eb:80:1e:ec:ca:05:31:b8:
00:a9:58:0c:9c:45:7f:19:3a:20:6d:4e:1a:90:19:
4b:c7:27:9d:e8:02:e3:b7:66:86:0c:49:f8:63:58:
3c:06:64:4f:b7:6c:44:80:82:fd:d9:65:83:f3:de:
37:ba:e1:38:ef:c0:d5:02:ae:eb:06:32:3f:c8:b6:
78:bc:dc:d7:10:55:f8:e7:a2:52:16:bb:b0:d8:9a:
e6:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:9D:9C:B1:B9:1A:70:88:5C:3C:E1:F7:82:DE:F6:3A:79:20:CB:E8
X509v3 Authority Key Identifier:
keyid:A1:EA:8D:E3:1C:EC:A5:58:03:CF:3A:F1:4D:4A:72:79:AE:84:46:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/oeqN4xzspVgDzzrxTUpyea6ERtA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/qp2csbkacIhcPOH3gt72Onkgy-g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/57/ca99d8-8527-45b8-af6a-765262f29eaf/1/oeqN4xzspVgDzzrxTUpyea6ERtA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.107.0-130.78.111.255
Signature Algorithm: sha256WithRSAEncryption
2f:49:59:59:d3:60:0a:99:cc:d5:56:5a:82:b6:35:2a:c5:98:
43:4b:20:a9:c6:64:47:bc:81:78:8f:4b:7d:4f:7c:4e:46:cb:
ca:81:bb:f1:e4:27:e3:04:86:05:1f:71:f8:ce:3d:91:8f:5a:
fe:88:9a:1e:0c:98:33:fb:7f:bc:b8:a5:e9:4d:8f:30:29:6d:
9a:d4:e3:89:f5:5f:59:84:79:f8:1b:3e:73:58:4e:2b:5d:94:
ca:0a:0c:3a:98:04:01:30:f4:b8:72:16:31:5f:c7:d9:4d:98:
df:35:5e:3b:70:23:1c:88:50:b0:d7:31:1f:d0:7e:cb:5a:e9:
1d:ef:85:c8:25:62:0e:2a:8b:de:b8:6e:95:a5:30:e1:2c:61:
64:86:8d:f9:bf:a7:d6:f3:58:16:54:1d:71:22:0e:6c:6f:77:
6c:85:01:44:a3:a5:0f:6c:7c:bb:4f:8f:20:51:8c:5e:7b:40:
3a:26:ae:07:b5:af:15:87:a4:9b:94:d8:69:7b:83:8c:77:9b:
5b:69:53:56:88:90:f6:bd:dd:91:05:79:33:ee:8b:a9:d7:fe:
91:e0:dd:09:04:a2:49:a6:23:89:e6:7d:2b:37:85:7f:ea:99:
20:cd:dc:78:da:20:d8:3f:e7:c3:fc:da:c1:5e:7d:fd:be:05:
5e:e0:69:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 07:41:51 2026 by rpki-client