Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/cq4nCE5baJGgFH3SNBWzfajuNjU.roa
File: cq4nCE5baJGgFH3SNBWzfajuNjU.roa (raw, json)
Hash identifier: 8tTwBTzlrupFdMlHcgT/wJjqpDpm7NHMe5RzjOMvtIA=
Subject key identifier: 72:AE:27:08:4E:5B:68:91:A0:14:7D:D2:34:15:B3:7D:A8:EE:36:35
Certificate issuer: /CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Certificate serial: 01A0CD5C8358CA1D7647BAFD2645AC2A9E7A
Authority key identifier: F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/cq4nCE5baJGgFH3SNBWzfajuNjU.roa
Signing time: Wed 23 Sep 2026 08:23:07 +0000
ROA not before: Wed 23 Sep 2026 08:23:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218732
IP address blocks: 185.124.175.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:5c:83:58:ca:1d:76:47:ba:fd:26:45:ac:2a:9e:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f13533399f55eb52e6b2200c7cae4272b74d6464
Validity
Not Before: Sep 23 08:23:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72ae27084e5b6891a0147dd23415b37da8ee3635
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:c3:26:f0:72:de:d6:bb:52:50:18:45:b3:65:
9c:33:54:f7:e1:7f:b5:b0:8c:49:fd:cc:31:2e:2a:
f7:de:80:18:a9:ea:bd:ce:ca:10:21:24:c8:16:cc:
77:c4:e3:1f:65:c9:39:28:23:1f:ec:8f:08:e0:12:
af:61:5d:75:47:bb:87:89:52:54:4a:ce:62:a5:d8:
72:74:e2:01:c5:e7:e0:59:cf:89:fc:0c:5d:42:44:
0a:1a:c1:ef:d9:76:bc:29:3f:50:82:be:9b:3a:3a:
1c:53:74:98:55:f0:1b:c6:c5:3d:b8:ac:ba:ec:03:
e8:6d:e9:f3:0a:ec:03:bc:2b:64:16:d8:4a:6e:8e:
d7:8d:fe:6a:77:c6:7d:00:58:24:e4:4c:ec:00:54:
ec:70:fc:43:9e:45:98:5b:bb:78:c7:38:4f:75:5d:
8b:ec:e6:3b:33:a1:c0:d2:f5:86:39:44:10:f2:f7:
0e:58:3d:05:07:67:88:23:4a:d9:e9:f8:a7:a7:d4:
e5:6c:a0:9d:6d:c1:74:08:85:44:a9:44:81:b2:f5:
6a:3c:41:22:47:74:9d:11:04:6a:7c:f1:b5:92:2d:
a1:f9:84:1a:97:aa:4d:f3:e3:2a:4a:75:4b:73:2d:
c8:dd:a9:a9:df:fa:3c:54:f9:7b:0a:c0:5b:57:bf:
71:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:AE:27:08:4E:5B:68:91:A0:14:7D:D2:34:15:B3:7D:A8:EE:36:35
X509v3 Authority Key Identifier:
keyid:F1:35:33:39:9F:55:EB:52:E6:B2:20:0C:7C:AE:42:72:B7:4D:64:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/cq4nCE5baJGgFH3SNBWzfajuNjU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/844eeb-cdf1-47f1-bcfa-989166881969/1/8TUzOZ9V61LmsiAMfK5CcrdNZGQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.124.175.0/24
Signature Algorithm: sha256WithRSAEncryption
ad:14:af:0f:b3:5d:0f:8e:f5:1b:94:aa:33:6a:32:a7:b3:e8:
b6:9b:7a:84:79:07:bc:b5:d2:ed:af:8c:74:7a:ef:76:b3:b7:
f9:22:89:dc:04:a4:02:db:a1:24:c7:2c:a4:07:3d:0a:66:37:
fe:54:d3:1f:0e:24:51:72:a4:70:d2:00:38:ed:b5:14:4d:e2:
c2:b7:41:10:62:47:fc:d6:20:25:6b:aa:21:5a:9e:47:e6:87:
5d:61:7b:3a:46:d5:4c:e5:bf:e8:0d:ee:de:0b:df:ee:13:0c:
60:92:5f:77:f5:74:6c:11:48:93:ae:c9:3e:9d:0d:26:7f:c4:
8e:f0:87:77:7a:f3:2d:24:b7:dc:03:61:3e:95:d0:2d:00:31:
3a:21:fe:3a:e9:9f:c9:6f:ca:25:64:d2:e9:f8:a3:3d:52:f7:
8e:3f:70:26:bc:02:5a:21:5a:46:05:1e:c6:cb:67:04:58:94:
1e:01:08:3e:42:36:2b:c9:80:c2:15:52:f3:03:61:7c:25:ea:
f3:61:a4:e9:cc:5c:51:21:28:4f:03:9f:80:19:a4:dc:89:e3:
56:4d:38:4e:5f:76:c6:d1:a8:6b:41:bc:ee:bf:4d:77:2c:8d:
af:fe:60:83:5b:14:84:b9:17:cd:0a:16:e4:af:bc:2f:6d:54:
37:5b:93:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 09:41:56 2026 by rpki-client