Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/69/526c08-72b1-45c7-a076-e9d037564861/1/U_CQLm976eOWkhFjxR7xxSiKhqs.roa
File: U_CQLm976eOWkhFjxR7xxSiKhqs.roa (raw, json)
Hash identifier: yaWzmBRZMeVvtjOmgIwk9zSeuI6xjE+/RYygOa36EjM=
Subject key identifier: 53:F0:90:2E:6F:7B:E9:E3:96:92:11:63:C5:1E:F1:C5:28:8A:86:AB
Certificate issuer: /CN=d8c3cb46ab1579ad138aa4482352ae815942a2ac
Certificate serial: 01A04D9D09E12067767B60996D39AD524867
Authority key identifier: D8:C3:CB:46:AB:15:79:AD:13:8A:A4:48:23:52:AE:81:59:42:A2:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2MPLRqsVea0TiqRII1KugVlCoqw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/526c08-72b1-45c7-a076-e9d037564861/1/U_CQLm976eOWkhFjxR7xxSiKhqs.roa
Signing time: Sat 29 Aug 2026 13:02:12 +0000
ROA not before: Sat 29 Aug 2026 13:02:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203658
IP address blocks: 185.127.20.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/526c08-72b1-45c7-a076-e9d037564861/1/2MPLRqsVea0TiqRII1KugVlCoqw.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/526c08-72b1-45c7-a076-e9d037564861/1/2MPLRqsVea0TiqRII1KugVlCoqw.mft
rsync://rpki.ripe.net/repository/DEFAULT/2MPLRqsVea0TiqRII1KugVlCoqw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 19:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4d:9d:09:e1:20:67:76:7b:60:99:6d:39:ad:52:48:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d8c3cb46ab1579ad138aa4482352ae815942a2ac
Validity
Not Before: Aug 29 13:02:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=53f0902e6f7be9e396921163c51ef1c5288a86ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:ed:93:41:1b:4b:03:ba:2e:af:95:50:68:e8:
85:3f:1e:3e:c8:af:6b:68:a8:d9:64:d5:73:02:5c:
91:f1:d6:be:82:14:a2:d8:a1:30:03:65:73:26:34:
9a:14:1a:e3:53:cd:04:f2:60:c1:0d:15:e7:57:d8:
3d:19:cc:76:92:e2:09:13:77:bd:4d:d5:af:5a:3e:
04:c3:9f:d3:62:23:bf:74:f0:f0:7c:50:8e:d7:11:
54:20:e0:2b:39:be:61:c9:76:9b:85:a2:4d:8d:f1:
6b:3f:33:0d:c1:d6:80:3f:df:31:6d:83:8e:bc:66:
5b:71:ec:87:22:83:cf:63:48:f2:80:54:7a:a1:4e:
d5:72:6a:8d:da:b4:f3:47:fe:20:7f:a6:51:a7:d7:
21:06:95:51:44:4e:91:ba:5b:9b:75:9a:7c:2b:de:
c9:51:5b:4a:32:76:44:fe:7a:6a:45:a2:88:30:f1:
d9:6f:a7:00:98:62:56:56:ba:c8:1f:93:c7:52:47:
ea:a5:17:db:5f:6b:18:79:f5:a1:c0:42:ff:11:b8:
91:ba:bb:a0:24:c4:a5:ec:cf:91:bf:ce:2a:cd:70:
f9:1c:84:4c:ac:0b:26:b0:42:63:1b:a2:2a:da:69:
0e:d9:cf:e6:60:fb:27:5d:cf:1b:48:f0:f4:57:08:
c8:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F0:90:2E:6F:7B:E9:E3:96:92:11:63:C5:1E:F1:C5:28:8A:86:AB
X509v3 Authority Key Identifier:
keyid:D8:C3:CB:46:AB:15:79:AD:13:8A:A4:48:23:52:AE:81:59:42:A2:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2MPLRqsVea0TiqRII1KugVlCoqw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/526c08-72b1-45c7-a076-e9d037564861/1/U_CQLm976eOWkhFjxR7xxSiKhqs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/526c08-72b1-45c7-a076-e9d037564861/1/2MPLRqsVea0TiqRII1KugVlCoqw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.127.20.0/23
Signature Algorithm: sha256WithRSAEncryption
04:b9:29:fb:59:a2:4f:02:b8:8d:bc:7e:a0:92:93:6c:7f:24:
85:bc:03:9e:e0:e2:65:e7:45:67:85:cc:d1:6f:bc:7d:f1:0b:
c7:c5:40:0e:b9:75:79:57:c3:40:58:df:f4:9f:ba:78:5b:9b:
d5:50:4d:6b:fa:df:7b:ff:75:17:55:f6:da:aa:88:0a:3b:d5:
81:e4:55:f9:9d:17:b3:de:90:39:4f:a7:9b:da:83:ce:84:26:
41:66:1d:10:20:8e:db:81:e6:aa:e5:03:84:20:02:72:56:c7:
3a:25:a7:92:da:74:6b:d7:71:d6:f9:ce:8c:5a:09:b1:a4:1b:
b2:f0:c3:43:60:51:5a:d1:7a:0d:89:b9:0b:f0:a5:da:26:ab:
a9:96:bb:5a:a5:0a:40:21:54:72:16:b7:48:5c:e5:31:c0:0f:
39:21:c3:5e:0e:26:e8:be:d7:2a:76:0b:65:25:17:92:c3:62:
53:09:24:92:9d:40:e1:48:97:4a:d2:80:bd:ff:be:77:36:ac:
5d:b5:29:77:31:ad:58:60:91:36:d7:d8:6b:65:a6:bc:22:22:
44:33:14:c2:f6:24:28:4d:f8:96:ef:bb:a3:27:ef:7e:84:80:
5f:e9:b3:54:06:86:d5:48:6b:6f:ef:9e:0a:d6:20:f6:c8:c1:
7a:a5:22:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 02:47:18 2026 by rpki-client