Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/qN51azyMi8RhrnKt2x6SlvGACqw.roa
File: qN51azyMi8RhrnKt2x6SlvGACqw.roa (raw, json)
Hash identifier: yCL0DQ+PJsiT11CuzYav2KyAebXQzBs54MSmO9XJsug=
Subject key identifier: A8:DE:75:6B:3C:8C:8B:C4:61:AE:72:AD:DB:1E:92:96:F1:80:0A:AC
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01A0C8B0D818A2AAE9DB8BF90C1556E71D27
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/qN51azyMi8RhrnKt2x6SlvGACqw.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402604
IP address blocks: 2a11:5e40::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d8:18:a2:aa:e9:db:8b:f9:0c:15:56:e7:1d:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8de756b3c8c8bc461ae72addb1e9296f1800aac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:62:33:12:19:a1:ed:35:99:5f:65:44:3b:25:
3a:58:8e:92:ad:b7:a1:6b:5b:18:34:26:9d:86:b1:
3e:cb:69:93:68:81:af:5c:60:15:ef:94:1f:63:83:
80:eb:56:5a:1f:0a:e7:ec:13:8e:81:dd:35:c3:91:
d3:67:b3:fa:fd:8f:1e:87:59:b5:7f:a7:1c:3f:49:
40:41:a0:c3:3f:6d:20:66:30:a5:dd:14:ac:cf:08:
09:a5:71:77:bc:1f:4a:e4:f7:03:1a:35:3b:3e:f3:
a0:d4:33:eb:94:5e:58:08:a0:ff:0c:d9:42:ab:09:
d2:65:1a:d2:96:17:98:d7:34:10:05:7e:91:ce:6d:
2b:ee:09:82:3b:a0:92:20:49:f1:e3:25:d6:75:22:
f3:7b:68:80:db:70:f1:ea:3a:a2:28:39:6a:2a:dc:
65:2d:31:d5:a5:0f:ed:14:b3:54:25:f4:dd:2e:eb:
ad:71:ae:8b:39:9e:e2:30:2c:dc:c4:74:5d:4f:d6:
a2:a9:96:74:cf:e6:3b:2f:fa:ea:24:a9:94:b6:f7:
61:5e:45:cf:8a:55:6d:55:6d:b7:95:bd:57:8b:6d:
2f:20:2a:48:3b:af:80:0b:c2:3c:21:ed:bf:30:13:
35:e5:59:e0:d5:dd:ab:b1:0d:c0:a8:51:88:d4:d0:
9b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:DE:75:6B:3C:8C:8B:C4:61:AE:72:AD:DB:1E:92:96:F1:80:0A:AC
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/qN51azyMi8RhrnKt2x6SlvGACqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:5e40::/29
Signature Algorithm: sha256WithRSAEncryption
74:20:1d:7e:bd:29:c3:d1:af:2a:37:26:59:38:34:25:fd:0c:
ae:d3:93:7b:12:c0:17:f0:86:87:ee:45:26:86:75:b6:28:8b:
51:e5:27:8d:6f:cf:07:1b:a7:a6:a0:a9:c3:1d:47:64:ce:d3:
be:29:9f:e6:cc:38:1c:9d:43:04:11:f1:27:a9:69:e9:c5:a9:
a6:5d:35:4c:0d:2b:4e:78:d2:3b:90:2a:02:74:00:76:2d:e5:
9d:39:ac:2d:d0:0f:19:4a:9b:70:72:1d:a6:87:5c:bb:d0:64:
8a:ae:00:30:2b:b3:b9:e0:18:7e:51:6b:e3:78:8e:00:a2:55:
b5:b5:61:da:a8:44:0a:f4:3f:f0:64:e1:8b:dd:36:f8:cf:ef:
32:af:e9:14:ad:b3:6b:98:67:d6:5b:01:13:08:e4:6f:46:e2:
91:40:ab:34:36:f4:36:48:e5:26:3b:cc:80:22:55:91:bf:75:
4c:7e:20:05:a6:a4:42:f3:0b:da:9d:0c:a9:1c:62:3f:17:21:
b9:47:ec:a4:57:da:c0:4a:cf:56:cd:cd:f7:fb:b8:e4:ca:af:
3c:ca:9c:7b:44:a7:ff:8a:49:7b:1a:7f:2d:57:de:b5:63:f3:
02:53:24:bd:fb:4d:ea:bf:ff:8a:1d:05:5b:43:e7:82:7c:47:
6d:54:00:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:25:41 2026 by rpki-client