Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/qRL1Xj1JXPP9Jxf70mINETKzkpw.roa
File: qRL1Xj1JXPP9Jxf70mINETKzkpw.roa (raw, json)
Hash identifier: E9TBvDsn9z+tiusOwtmO+pExgCLako5+ON4x8ZQGVgk=
Subject key identifier: A9:12:F5:5E:3D:49:5C:F3:FD:27:17:FB:D2:62:0D:11:32:B3:92:9C
Certificate issuer: /CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Certificate serial: 019EBE46812F87E2BFEA567418383D82DC4D
Authority key identifier: B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/qRL1Xj1JXPP9Jxf70mINETKzkpw.roa
Signing time: Fri 12 Jun 2026 23:59:11 +0000
ROA not before: Fri 12 Jun 2026 23:59:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 2a06:e881:9200::/45 maxlen: 48
2a06:e881:9208::/45 maxlen: 48
2a06:e881:9600::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 20:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:be:46:81:2f:87:e2:bf:ea:56:74:18:38:3d:82:dc:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b8074b419ead4cefea2f2ad2c259d978c5ed7954
Validity
Not Before: Jun 12 23:59:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a912f55e3d495cf3fd2717fbd2620d1132b3929c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:1b:84:83:c5:9f:7e:40:9d:83:3b:e4:52:80:
b8:2e:49:0b:be:d1:01:76:f2:8f:23:41:12:4c:24:
03:92:7e:d3:17:78:20:7c:80:a1:3f:64:28:04:7f:
7a:03:ad:58:ef:73:e8:cb:4b:68:66:f3:c2:09:63:
10:6e:96:56:83:b8:3e:8e:07:da:b7:c2:45:77:3f:
e2:b1:04:e8:7c:9d:bf:b8:3f:b6:3c:b9:7d:13:88:
90:44:b6:66:da:10:8a:40:54:60:a2:02:4d:c9:db:
c0:a1:83:be:c3:07:d3:09:60:fb:a6:4c:29:9d:44:
f1:de:d0:f9:c2:78:69:45:88:8e:8f:6d:ee:a9:17:
23:6b:d1:49:eb:8e:71:55:49:db:40:3f:52:1c:fd:
cb:ef:29:f4:d1:01:00:c0:2d:df:59:c2:5b:20:67:
7f:48:31:12:d2:bd:54:e4:ba:e4:9a:5f:4f:c9:80:
2d:2e:29:e7:67:de:4a:15:f9:47:ac:a0:fd:b4:96:
2a:ba:b0:e9:d4:24:07:73:9d:8a:11:73:bb:bf:5c:
2b:df:5f:2c:30:a1:18:c8:aa:4f:d2:81:46:c1:f8:
ec:0c:31:a8:9a:08:fe:80:a3:66:b7:50:4f:66:7a:
85:b0:f0:4d:88:86:43:b0:10:a4:36:74:bf:b6:0b:
c5:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:12:F5:5E:3D:49:5C:F3:FD:27:17:FB:D2:62:0D:11:32:B3:92:9C
X509v3 Authority Key Identifier:
keyid:B8:07:4B:41:9E:AD:4C:EF:EA:2F:2A:D2:C2:59:D9:78:C5:ED:79:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/qRL1Xj1JXPP9Jxf70mINETKzkpw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/1e43e4-d06e-4a55-bdb6-3d91ede5b2b1/1/uAdLQZ6tTO_qLyrSwlnZeMXteVQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:e881:9200::/44
2a06:e881:9600::/48
Signature Algorithm: sha256WithRSAEncryption
cf:76:49:00:d1:b7:e2:2d:63:9c:05:a7:49:72:ed:9c:e6:2f:
14:29:53:a9:1d:7c:7e:83:0a:28:e6:4d:74:59:d6:0d:31:59:
bf:5d:25:df:5c:6e:c2:95:6c:b3:26:8a:65:16:d5:24:82:a5:
d0:09:9b:b3:93:47:ab:c1:c4:fa:b8:df:f1:0f:f5:3c:07:bf:
b0:69:4d:2e:5c:5d:b3:88:74:ab:bb:c6:4e:80:32:78:fd:0b:
a5:7b:71:37:6a:d3:6f:81:03:c6:c6:c9:ad:71:b3:3b:7d:f1:
b3:ee:e9:b9:f0:60:ab:d2:70:2c:90:09:52:74:6f:8d:2f:5f:
a7:08:2e:26:37:56:2b:1c:e4:d9:9b:7a:e4:fc:c9:eb:66:5d:
68:a6:54:ea:a1:68:9c:3b:76:a8:6d:54:d6:22:50:d2:89:31:
85:ad:78:36:f6:bd:d5:1a:a2:70:5d:34:8e:77:60:33:cd:48:
cd:46:a7:4c:74:e7:9a:ba:72:f0:05:8b:7d:bb:d6:a1:1d:b1:
24:6d:f8:41:8a:14:a9:61:44:2b:27:e8:64:bf:0b:f0:b5:d2:
fa:5c:87:c9:56:35:95:20:73:07:61:9d:af:c4:39:07:08:c4:
d7:3c:95:d3:d7:04:3d:b4:28:ab:7b:be:9e:1b:25:68:56:fe:
56:d8:de:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 06:02:39 2026 by rpki-client