Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/qSB-Fr5on66jEvQLa_-E0yx5agQ.roa
File: qSB-Fr5on66jEvQLa_-E0yx5agQ.roa (raw, json)
Hash identifier: /d6onL0LuXW1jRb8TBZIzkovZYA/Bhrij6W7usA00vo=
Subject key identifier: A9:20:7E:16:BE:68:9F:AE:A3:12:F4:0B:6B:FF:84:D3:2C:79:6A:04
Certificate issuer: /CN=96a38feeae903dbcb28ff9333e0435e7e9488b4b
Certificate serial: 019F23690EFD9E3A285F127ED97E251D65E1
Authority key identifier: 96:A3:8F:EE:AE:90:3D:BC:B2:8F:F9:33:3E:04:35:E7:E9:48:8B:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/qSB-Fr5on66jEvQLa_-E0yx5agQ.roa
Signing time: Thu 02 Jul 2026 15:18:35 +0000
ROA not before: Thu 02 Jul 2026 15:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8431
IP address blocks: 195.230.0.0/20 maxlen: 24
195.230.1.0/24 maxlen: 24
195.230.3.0/24 maxlen: 24
195.230.4.0/24 maxlen: 24
195.230.5.0/24 maxlen: 24
195.230.16.0/23 maxlen: 23
195.230.18.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.mft
rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:0e:fd:9e:3a:28:5f:12:7e:d9:7e:25:1d:65:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96a38feeae903dbcb28ff9333e0435e7e9488b4b
Validity
Not Before: Jul 2 15:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9207e16be689faea312f40b6bff84d32c796a04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:4e:aa:97:04:03:c3:39:ae:9f:bf:65:ce:5e:
66:34:bf:83:ea:07:36:5d:49:4b:12:3c:be:b1:00:
e5:82:25:82:c7:e3:e0:8b:70:c7:cc:51:b9:44:97:
33:14:c8:0f:7f:8f:61:ea:21:fe:0c:99:f1:b9:ff:
6f:1a:30:cc:e7:99:18:c4:f8:00:6a:80:5e:ab:93:
c2:63:17:39:1d:9d:69:88:91:25:50:e4:75:84:10:
c7:d2:fc:86:eb:2c:66:d7:6a:4d:7a:1f:fc:a1:db:
3e:11:65:80:86:56:53:90:e9:8b:75:54:f4:b2:2e:
09:4c:12:6e:93:cd:d4:f7:cd:8b:db:b6:b2:af:9c:
67:04:1b:1e:0d:a8:c9:5d:42:9e:6b:c1:78:9d:5d:
81:17:00:b2:19:16:3c:a8:77:4a:73:51:cd:bd:4c:
52:ea:6b:4e:57:a0:dd:37:43:09:ce:00:2b:d4:4f:
7e:06:d7:0a:95:9f:60:51:78:93:e4:ae:63:8e:67:
e3:08:d4:88:0f:a4:13:70:69:16:92:7c:0d:38:31:
b6:00:4d:2e:62:6f:68:91:0a:de:8d:db:d4:25:a8:
0c:fb:54:6b:96:27:67:65:a2:ca:a8:cd:1a:a6:8f:
41:bc:7f:f5:ce:8b:a7:f1:6c:1a:d1:92:a0:9b:b5:
10:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:20:7E:16:BE:68:9F:AE:A3:12:F4:0B:6B:FF:84:D3:2C:79:6A:04
X509v3 Authority Key Identifier:
keyid:96:A3:8F:EE:AE:90:3D:BC:B2:8F:F9:33:3E:04:35:E7:E9:48:8B:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lqOP7q6QPbyyj_kzPgQ15-lIi0s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/qSB-Fr5on66jEvQLa_-E0yx5agQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/11bf2e-b58a-4a31-89c0-155f42dcaa73/1/lqOP7q6QPbyyj_kzPgQ15-lIi0s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.230.0.0-195.230.18.255
Signature Algorithm: sha256WithRSAEncryption
4b:58:8c:0d:2a:df:f9:38:39:15:48:af:4b:cc:df:c0:d5:7f:
48:e6:fa:8a:de:ff:cd:74:2e:9b:d3:ed:5b:a6:98:72:aa:2c:
fa:36:24:d4:91:74:70:72:f9:40:1f:83:86:5f:67:48:0a:c2:
53:fe:15:d5:0a:cf:d4:cf:fe:d8:d1:3b:26:25:ab:48:24:9a:
db:70:7d:60:52:51:b4:63:e1:1f:2a:94:a9:6f:00:a1:28:da:
03:8e:08:3a:e1:48:84:34:d2:89:7f:9a:d6:ce:6a:af:ce:3b:
01:46:98:2e:af:14:3d:9a:f1:17:47:50:0f:4c:00:2e:45:b9:
dd:9a:72:c8:78:6f:40:0f:0a:a7:b2:ad:90:cd:df:fe:d0:d9:
f7:12:de:8d:96:90:b3:6f:6b:42:47:1d:28:f3:36:c1:f1:d3:
5c:08:e2:98:76:e4:75:66:4d:82:b6:72:51:b0:ae:81:ca:68:
fa:4d:74:e5:fe:e7:5a:a3:4d:71:81:1f:bc:e6:48:58:97:0c:
9a:2d:47:ed:c8:27:95:66:11:bd:97:d1:1b:fa:c0:20:43:b5:
a6:89:dc:e5:e8:25:8a:d3:af:fd:5c:5c:6e:46:fd:43:7d:67:
ce:04:94:f7:a3:68:a4:9f:7e:e9:22:11:6b:81:a6:6b:e7:f0:
c7:be:74:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:17:05 2026 by rpki-client