Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/qae1Z_ZR5aQiC4HiKbO_mJ5qo9M.roa
File: qae1Z_ZR5aQiC4HiKbO_mJ5qo9M.roa (raw, json)
Hash identifier: aazClAPfEJyZReaWUx64Ghmgj+YV9HhrXipXcYLGrCk=
Subject key identifier: A9:A7:B5:67:F6:51:E5:A4:22:0B:81:E2:29:B3:BF:98:9E:6A:A3:D3
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 01A1D4F254847D6ACF59BE0E234988C8B86B
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/qae1Z_ZR5aQiC4HiKbO_mJ5qo9M.roa
Signing time: Fri 13 Nov 2026 12:46:53 +0000
ROA not before: Fri 13 Nov 2026 12:46:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214822
IP address blocks: 170.168.1.0/24 maxlen: 24
170.168.15.0/24 maxlen: 24
170.168.76.0/24 maxlen: 24
170.168.119.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:d4:f2:54:84:7d:6a:cf:59:be:0e:23:49:88:c8:b8:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Nov 13 12:46:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9a7b567f651e5a4220b81e229b3bf989e6aa3d3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:14:d1:00:03:0b:58:41:7f:2c:23:e8:a1:a3:
68:b7:31:54:08:e6:8e:71:b8:ad:6f:b3:74:ad:07:
29:e5:87:94:35:51:51:79:6f:6c:7a:07:3a:4b:2b:
1e:e1:fd:7c:ea:2b:21:b1:11:96:91:d5:64:1e:6e:
41:6b:7e:9c:2c:1c:32:fd:ce:6b:30:8c:09:57:bc:
91:82:04:a2:4c:88:2a:77:1e:e6:26:9f:b6:ed:34:
8f:64:2d:fc:d6:af:9d:d3:18:85:bf:d1:37:d7:8c:
eb:20:be:bb:92:60:6f:d0:08:66:a9:60:89:48:47:
e6:e9:09:ae:2b:84:a4:91:c1:1c:7d:2b:0f:b4:70:
3e:16:6f:6c:3d:83:a9:41:02:1a:35:30:c3:75:fa:
9c:19:2a:f3:66:c8:6d:f9:9f:56:22:73:c0:36:fb:
47:d7:c1:95:05:dc:2d:1e:2d:fd:86:57:f6:3a:6b:
ba:8d:0d:e9:ac:ba:22:94:40:ae:35:29:09:2a:4d:
6c:8d:3b:1c:9b:81:71:b6:e7:c5:93:7c:76:48:1f:
1a:bb:df:47:bb:50:50:9c:c2:53:cb:18:26:9c:bc:
90:28:94:78:e0:fb:57:c4:21:67:8f:8d:63:00:48:
37:a4:76:8e:a1:14:0b:a0:0e:b9:0e:a8:51:6e:cf:
db:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:A7:B5:67:F6:51:E5:A4:22:0B:81:E2:29:B3:BF:98:9E:6A:A3:D3
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/qae1Z_ZR5aQiC4HiKbO_mJ5qo9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
170.168.1.0/24
170.168.15.0/24
170.168.76.0/24
170.168.119.0/24
Signature Algorithm: sha256WithRSAEncryption
80:26:03:10:aa:30:f3:7e:ec:38:27:78:6b:42:2f:11:20:cb:
d8:81:cd:3d:4f:d5:ff:e3:67:c5:80:12:17:c0:ab:59:66:f8:
54:49:0d:72:94:93:9d:35:fa:a5:4b:52:5c:a2:1f:df:fb:41:
4b:b3:84:e6:cc:aa:89:05:05:6d:86:dd:06:b6:44:62:3f:a1:
70:a7:eb:8a:dc:3d:06:bb:b6:15:00:64:7f:11:e1:98:1d:c2:
71:ef:55:9d:d8:49:53:bb:a6:3b:ac:0b:b1:84:3c:74:b8:89:
d1:67:39:4a:fd:f6:d9:a8:4c:da:7f:29:d7:58:9e:c7:87:81:
62:b0:d4:34:62:5a:20:7c:d3:b6:91:c0:b7:2e:35:6e:42:f3:
4a:0a:49:73:0b:37:ce:33:7b:6d:80:b6:fb:5b:1a:79:94:75:
ad:2c:6e:62:a5:31:aa:e9:d5:9f:eb:7f:85:59:c6:4e:2a:58:
2e:0a:99:94:1f:1f:20:d1:ac:0a:b3:f1:a4:10:5c:b8:82:45:
5e:e5:78:19:fa:c2:9e:ed:b8:0c:55:04:02:2e:f6:b9:b4:61:
2f:16:20:e6:a7:92:48:02:f7:48:e3:f3:22:8a:f5:30:3e:82:
ac:26:65:c9:95:6b:07:35:3b:f6:e0:87:4b:82:57:fe:4c:3c:
8d:7d:da:f5
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaHU8lSEfWrPWb4OI0mIyLhrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlNmE4NmU2MmYwY2U5OGUwMmU5ODA4NjlmZjQ0MTRlZTJh
MGYwY2UwHhcNMjYxMTEzMTI0NjUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWE3YjU2N2Y2NTFlNWE0MjIwYjgxZTIyOWIzYmY5ODllNmFhM2QzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRTRAAMLWEF/LCPooaNotzFUCOaO
cbitb7N0rQcp5YeUNVFReW9segc6Syse4f186ishsRGWkdVkHm5Ba36cLBwy/c5r
MIwJV7yRggSiTIgqdx7mJp+27TSPZC381q+d0xiFv9E314zrIL67kmBv0AhmqWCJ
SEfm6QmuK4SkkcEcfSsPtHA+Fm9sPYOpQQIaNTDDdfqcGSrzZsht+Z9WInPANvtH
18GVBdwtHi39hlf2Omu6jQ3prLoilECuNSkJKk1sjTscm4FxtufFk3x2SB8au99H
u1BQnMJTyxgmnLyQKJR44PtXxCFnj41jAEg3pHaOoRQLoA65DqhRbs/bawIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKmntWf2UeWkIguB4imzv5ieaqPTMB8GA1UdIwQY
MBaAFC5qhuYvDOmOAumAhp/0QU7ioPDOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2Et
YTY2N2JiNzY1MDYwLzEvcWFlMVpfWlI1YVFpQzRIaUtiT19tSjVxbzlNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC8yYjYwMzAtNmQ4OC00ZTNlLTlmM2EtYTY2N2JiNzY1MDYw
LzEvTG1xRzVpOE02WTRDNllDR25fUkJUdUtnOE00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAqqgBAwQA
qqgPAwQAqqhMAwQAqqh3MA0GCSqGSIb3DQEBCwUAA4IBAQCAJgMQqjDzfuw4J3hr
Qi8RIMvYgc09T9X/42fFgBIXwKtZZvhUSQ1ylJOdNfqlS1Jcoh/f+0FLs4TmzKqJ
BQVtht0GtkRiP6Fwp+uK3D0Gu7YVAGR/EeGYHcJx71Wd2ElTu6Y7rAuxhDx0uInR
ZzlK/fbZqEzafynXWJ7Hh4FisNQ0YlogfNO2kcC3LjVuQvNKCklzCzfOM3ttgLb7
Wxp5lHWtLG5ipTGq6dWf63+FWcZOKlguCpmUHx8g0awKs/GkEFy4gkVe5XgZ+sKe
7bgMVQQCLva5tGEvFiDmp5JIAvdI4/MiivUwPoKsJmXJlWsHNTv24IdLglf+TDyN
fdr1
-----END CERTIFICATE-----
Generated at Sun Nov 15 19:12:13 2026 by rpki-client