Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/Qe5st-1p8kqRdn0Mnq1__rG_o0c.roa
File: Qe5st-1p8kqRdn0Mnq1__rG_o0c.roa (raw, json)
Hash identifier: 0rQGsK/TWa4v7c8AFmb/TgbhnPFN7Iu5NlgiUJpK8UM=
Subject key identifier: 41:EE:6C:B7:ED:69:F2:4A:91:76:7D:0C:9E:AD:7F:FE:B1:BF:A3:47
Certificate issuer: /CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Certificate serial: 01A0D26B33BAC04AAA7E885833F2E0DFC304
Authority key identifier: 29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/Qe5st-1p8kqRdn0Mnq1__rG_o0c.roa
Signing time: Thu 24 Sep 2026 07:57:15 +0000
ROA not before: Thu 24 Sep 2026 07:57:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 5.10.208.0/24 maxlen: 24
5.10.210.0/24 maxlen: 24
5.10.211.0/24 maxlen: 24
5.10.216.0/24 maxlen: 24
5.10.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 07:57:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d2:6b:33:ba:c0:4a:aa:7e:88:58:33:f2:e0:df:c3:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=297ef9befd1a7e24c0cc9729987fc065d6b7132f
Validity
Not Before: Sep 24 07:57:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41ee6cb7ed69f24a91767d0c9ead7ffeb1bfa347
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:8a:a9:93:83:c6:2d:0d:a2:e4:4d:3a:46:70:
ca:82:7b:99:47:0d:4f:7f:3f:27:5a:b4:f1:57:75:
51:63:0b:57:17:d1:fa:54:43:07:1b:31:08:98:2e:
fa:8d:cd:32:cb:dc:72:57:94:8b:cb:0e:54:e0:13:
b4:2a:b2:4f:50:d1:4c:39:45:b5:81:f8:3f:b5:77:
06:1f:9f:76:56:d3:09:7d:48:de:27:a7:6e:f9:21:
50:fe:17:e8:ba:f5:d1:76:45:24:91:ab:dd:a1:7c:
d3:5c:10:5c:36:64:ee:ce:b9:ca:7f:7c:f8:ef:48:
22:69:ed:90:46:0e:5d:64:49:76:c5:56:fc:62:46:
2e:f6:65:e6:9b:5f:df:1d:62:6a:e0:05:74:98:d1:
b1:2c:ce:17:df:cc:f2:bc:ee:80:33:1e:74:c6:bf:
d9:7f:0a:34:4f:da:d6:93:3d:94:11:fd:29:aa:d9:
b3:c7:aa:00:6b:3f:77:8d:5b:c0:0d:a6:03:84:af:
0a:7d:6c:f0:31:dd:23:05:43:94:1f:e2:9c:43:ce:
1d:1a:e1:16:58:b4:80:e9:65:38:55:13:c7:36:f3:
e2:f7:3f:d3:7a:3d:bb:d6:59:16:4f:c7:62:2c:99:
0d:05:ed:9d:f5:ef:5e:e0:13:85:0a:80:88:40:f0:
96:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EE:6C:B7:ED:69:F2:4A:91:76:7D:0C:9E:AD:7F:FE:B1:BF:A3:47
X509v3 Authority Key Identifier:
keyid:29:7E:F9:BE:FD:1A:7E:24:C0:CC:97:29:98:7F:C0:65:D6:B7:13:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KX75vv0afiTAzJcpmH_AZda3Ey8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/Qe5st-1p8kqRdn0Mnq1__rG_o0c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/be4909-745f-4d0c-bfab-dee76860013d/1/KX75vv0afiTAzJcpmH_AZda3Ey8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.10.208.0/24
5.10.210.0/23
5.10.216.0/24
5.10.222.0/24
Signature Algorithm: sha256WithRSAEncryption
66:c2:ad:ff:cb:f8:b9:bd:a9:98:e2:d8:99:4f:55:ff:d9:af:
66:22:b6:be:3b:03:9f:c1:9e:50:d8:6f:5f:4a:ef:78:6d:5a:
6d:69:3d:0f:93:30:6b:d1:2d:2f:c1:a4:95:b9:30:b5:ae:cd:
fb:e1:70:df:cd:8a:b7:ac:2a:71:07:7d:90:db:ca:53:e9:92:
48:b3:79:69:54:5e:47:d8:bf:5b:83:98:54:fe:b2:49:24:f2:
02:b0:b5:5c:6d:f1:b9:ca:ef:5a:88:4b:6d:df:b1:69:df:dd:
21:fc:a1:10:39:69:4e:f8:e7:a3:09:0f:cd:ef:8c:a4:f7:ec:
0f:47:ee:f7:60:50:ea:8e:4c:57:c5:a8:3c:b4:65:44:94:90:
bf:62:c6:07:0d:40:0d:e9:51:0d:64:fe:97:71:55:dd:f1:af:
bb:0c:c1:50:27:ca:2e:c7:c0:0a:b5:63:a5:0d:f6:4e:24:2a:
f2:83:b9:0c:1e:ee:b3:47:07:2d:63:ab:cf:09:bd:fa:d4:53:
9e:79:d7:cc:d9:46:f5:44:69:ef:c7:6f:c5:fb:2f:25:34:b9:
94:13:72:02:95:47:e5:45:54:b9:b9:4b:62:8e:86:8f:6c:50:
16:1f:26:97:59:77:48:f3:fa:a0:69:ab:ae:4e:03:13:fd:fc:
c9:ef:e6:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 18:25:09 2026 by rpki-client