Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/Q0ygE7XofIFkzYVSMg4jYCnFyh0.roa
File: Q0ygE7XofIFkzYVSMg4jYCnFyh0.roa (raw, json)
Hash identifier: YNIxJzCmPK9+IRcBIYUGrDW4QMhbvUorQ3d2tnx6fpo=
Subject key identifier: 43:4C:A0:13:B5:E8:7C:81:64:CD:85:52:32:0E:23:60:29:C5:CA:1D
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 01A0EC8647E5DC074FC5B20C752D8DB6B125
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/Q0ygE7XofIFkzYVSMg4jYCnFyh0.roa
Signing time: Tue 29 Sep 2026 09:36:58 +0000
ROA not before: Tue 29 Sep 2026 09:36:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202103
IP address blocks: 31.134.64.0/19 maxlen: 20
92.52.128.0/18 maxlen: 20
176.39.0.0/19 maxlen: 20
176.39.48.0/20 maxlen: 21
176.39.112.0/20 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 14:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:86:47:e5:dc:07:4f:c5:b2:0c:75:2d:8d:b6:b1:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Sep 29 09:36:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=434ca013b5e87c8164cd8552320e236029c5ca1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:a5:c0:d6:c8:8b:75:8c:2b:d3:ae:d0:90:8b:
68:4a:2b:a0:7d:25:4d:58:21:cb:a8:89:98:55:08:
4d:73:ca:cb:69:bb:fc:76:1c:07:fc:ab:6d:4a:b0:
1a:a0:ac:7c:74:8b:8e:69:c5:d5:b2:14:d7:f0:5a:
cd:18:12:de:c2:6c:41:b5:b4:54:fb:b4:ec:f7:71:
d7:0f:09:a4:09:6a:67:96:47:d3:8e:23:2c:9f:d7:
81:99:96:05:a9:1f:50:88:a9:80:40:36:45:3b:ae:
35:91:eb:3d:c3:ad:23:2b:e1:d2:99:cf:35:d0:35:
5a:e3:7a:c2:b5:72:a0:32:4c:9f:54:f5:7a:a9:26:
11:dd:4d:cb:26:54:c3:78:fa:46:45:56:e9:fc:92:
f7:45:95:35:ff:b2:24:ad:f6:34:93:ee:f9:c5:60:
4e:f7:da:85:b6:ad:f3:41:5c:a7:00:25:b4:92:6e:
a7:6b:64:40:a0:9a:5f:87:9d:04:f6:8d:4f:b0:6c:
ed:86:58:02:77:d7:27:be:10:0a:1e:e1:80:c7:4c:
ca:41:ff:56:9d:1b:8a:58:c4:96:af:d3:bb:33:07:
15:e1:1a:6a:b2:67:d5:ab:be:92:af:1e:cf:99:94:
7d:94:9d:65:fd:3e:77:87:32:79:b2:21:f2:9f:0c:
f2:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:4C:A0:13:B5:E8:7C:81:64:CD:85:52:32:0E:23:60:29:C5:CA:1D
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/Q0ygE7XofIFkzYVSMg4jYCnFyh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.134.64.0/19
92.52.128.0/18
176.39.0.0/19
176.39.48.0/20
176.39.112.0/20
Signature Algorithm: sha256WithRSAEncryption
01:57:de:cf:dd:d3:54:65:90:0c:5a:f9:17:06:02:6f:79:ec:
80:fa:48:ae:09:86:1b:ca:a4:92:d8:e5:4f:88:46:01:f4:ba:
be:22:91:6a:17:80:5e:76:f0:f5:b6:66:2c:51:94:68:bc:03:
cd:31:c5:fe:3f:8a:b4:ca:93:de:ad:08:52:4c:89:6a:d0:b0:
5f:34:34:38:bf:22:67:dc:f6:28:4e:80:6a:7d:7b:d8:a3:40:
e0:c0:ea:ba:4f:55:e4:b3:ff:b8:a2:41:5a:ea:0f:49:59:14:
b8:5e:35:7f:16:be:07:ae:0f:16:35:e6:68:e9:5b:e8:65:c2:
44:08:17:b2:2e:3e:6f:0f:3a:db:e5:ac:91:22:74:9c:31:b7:
5b:92:47:d2:b0:62:ff:79:11:7e:4a:54:71:7b:71:1d:98:84:
22:2a:fb:bd:db:8f:01:68:20:ea:7c:e1:2f:d1:e3:a2:05:c4:
fc:19:02:5f:87:cd:0e:ad:ee:f0:06:7f:68:f8:62:c3:54:a9:
78:49:49:fc:a2:de:74:94:95:ed:14:66:ee:dc:15:5c:5b:27:
15:5a:97:22:84:37:6b:65:ea:e4:68:0f:6e:b4:c4:ac:e3:5f:
f7:35:0f:3c:bc:a2:d7:ca:e1:5c:63:d9:25:4f:f4:53:56:32:
d1:b3:96:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 19:11:11 2026 by rpki-client