Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/QkLFtgv-IA-cYkcQo920BsBxUoU.roa
File: QkLFtgv-IA-cYkcQo920BsBxUoU.roa (raw, json)
Hash identifier: IphsEweHJQJ8hvz32gaJ9KD0KCw7pLh3MKjLPT6vdok=
Subject key identifier: 42:42:C5:B6:0B:FE:20:0F:9C:62:47:10:A3:DD:B4:06:C0:71:52:85
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01A0C8B0D676D49E835E81D991B5C31C75C7
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/QkLFtgv-IA-cYkcQo920BsBxUoU.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214266
IP address blocks: 2a11:4d00::/29 maxlen: 29
2a11:bf40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 07:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d6:76:d4:9e:83:5e:81:d9:91:b5:c3:1c:75:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4242c5b60bfe200f9c624710a3ddb406c0715285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:ed:11:cd:57:74:07:78:05:6b:ec:05:3a:e4:
76:89:88:7f:bf:7d:96:f5:0e:bd:7e:cb:92:d6:f2:
a6:0f:7c:82:7a:72:f1:59:72:ac:6f:df:ae:ed:60:
af:84:d6:b0:06:02:10:43:4d:df:b0:cc:df:29:3b:
f7:be:fd:de:b5:bf:8b:f6:92:21:7e:c6:54:1a:97:
8f:de:a2:59:89:87:6a:69:99:1c:d7:de:df:c9:fa:
81:9e:74:ef:e5:f4:e1:08:14:8f:1d:49:8c:b4:6a:
4d:15:9c:9d:1f:28:81:3f:85:df:02:b7:8b:98:e6:
4f:67:d4:5b:8a:51:97:61:20:54:6b:2a:84:94:41:
e7:1c:4a:de:a8:08:78:e0:c1:0c:05:c2:fc:a4:48:
fa:76:fe:ee:60:48:c7:7c:48:dc:bc:37:88:dd:53:
ce:f4:30:9b:3d:ae:e6:8a:03:bb:16:14:76:8e:d7:
f9:cf:7a:6f:59:16:01:c8:9d:62:d2:ac:a6:76:c8:
d7:13:ce:78:c1:bd:ee:3c:2e:1f:86:b1:e9:ba:f4:
c3:98:84:84:9f:b8:c2:91:78:f9:51:3f:6e:9a:01:
e5:db:fd:6a:c2:31:14:01:3b:73:1d:f9:d6:d0:41:
3a:85:3b:f5:19:b4:1f:79:05:cd:a3:48:e0:44:1b:
6f:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:42:C5:B6:0B:FE:20:0F:9C:62:47:10:A3:DD:B4:06:C0:71:52:85
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/QkLFtgv-IA-cYkcQo920BsBxUoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:4d00::/29
2a11:bf40::/29
Signature Algorithm: sha256WithRSAEncryption
99:63:d1:25:45:d7:e7:bd:0a:0d:46:1c:e1:47:59:6a:05:fe:
49:d0:4b:27:94:00:85:0a:52:c1:25:53:dc:88:ee:1d:5c:a8:
7c:5d:86:33:46:01:b6:77:4b:e2:19:5c:b0:58:c3:93:aa:3c:
c7:e7:ef:87:5a:2a:89:2a:63:e9:c9:ce:65:5b:1f:a1:93:60:
89:31:f9:57:7e:3f:37:6a:63:08:35:87:e6:be:fa:28:33:65:
82:42:92:9d:4b:a7:13:e3:9d:15:34:73:28:3a:09:88:66:6d:
72:a1:54:0e:7d:97:1e:0a:55:04:80:65:ff:ac:ff:dd:2f:a5:
41:cf:59:77:18:ff:4a:63:b4:7d:9d:4f:2d:f1:e2:5d:ab:21:
5f:a0:dc:66:77:76:fd:fe:4d:41:bc:4b:dc:4a:9f:92:c4:40:
8a:9f:df:6f:3f:36:b6:e6:92:46:d8:2d:6b:06:f5:d6:dc:6e:
23:15:e6:33:70:ba:02:59:ca:24:ef:8d:80:8b:39:27:86:23:
f3:be:3c:d7:ab:20:98:78:12:00:04:e4:2d:4a:ca:a9:80:55:
f7:99:1e:6b:fb:a3:1e:b1:51:96:a3:b1:e7:33:3e:4d:da:f7:
b6:58:4a:95:e0:45:ee:e1:a1:de:15:ed:39:3f:66:f5:94:a3:
b5:46:0b:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 6 12:30:42 2026 by rpki-client