Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/cqN849EjWfM345GXc2cPDSbYDxc.roa
File: cqN849EjWfM345GXc2cPDSbYDxc.roa (raw, json)
Hash identifier: aUeWIhEEAn2M72ZX6VRyeBzWISXgl36qTjMPEKU7NaE=
Subject key identifier: 72:A3:7C:E3:D1:23:59:F3:37:E3:91:97:73:67:0F:0D:26:D8:0F:17
Certificate issuer: /CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Certificate serial: 01A0AEBEFDF0AD93C8201B0C844EC1A962A2
Authority key identifier: E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/cqN849EjWfM345GXc2cPDSbYDxc.roa
Signing time: Thu 17 Sep 2026 09:42:27 +0000
ROA not before: Thu 17 Sep 2026 09:42:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207092
IP address blocks: 185.193.12.0/23 maxlen: 23
185.193.14.0/24 maxlen: 24
185.193.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 00:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:be:fd:f0:ad:93:c8:20:1b:0c:84:4e:c1:a9:62:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0e3976d9ecb8309a8181fbd025ca52fef161999
Validity
Not Before: Sep 17 09:42:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=72a37ce3d12359f337e3919773670f0d26d80f17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:0d:c8:30:04:e0:1d:6b:2c:87:60:61:5a:1f:
4b:22:53:e1:d9:0d:23:a7:3f:2e:0e:33:7f:cf:ef:
73:b1:2b:e1:cc:1f:be:a0:16:cc:d0:d1:92:3f:4d:
e0:46:96:03:9a:f4:96:95:f8:19:7f:2c:20:df:0d:
4d:77:c4:43:2b:94:df:af:cd:13:db:86:fb:d5:34:
d7:07:e5:16:c4:2d:26:7b:85:e3:f9:ec:94:af:8e:
0f:30:26:15:0d:d2:da:03:fe:7d:1a:11:63:31:70:
5e:dd:68:d0:5f:5a:da:a9:c3:29:ba:02:d2:68:b5:
42:31:a1:33:c3:60:40:dc:7d:b0:c5:f0:ba:ee:cc:
40:19:1b:7f:5e:4d:20:2b:5b:57:66:84:e1:a9:e5:
eb:ed:09:ff:95:65:5c:5f:9f:33:54:86:56:d1:de:
09:72:6c:60:d6:84:26:bf:2b:a3:13:92:a3:fa:08:
f3:0b:e5:31:fa:e9:3d:5b:56:96:c2:63:f5:f2:9f:
a9:f5:8e:a7:80:10:ec:c8:25:5f:b3:6c:74:61:72:
19:55:30:5d:ae:4d:37:68:b3:75:b4:26:c1:18:1a:
a3:b8:20:2b:91:f1:be:7d:60:74:96:3e:c0:a8:6f:
bd:d8:aa:65:71:b0:3c:20:07:3d:be:5b:2d:4a:3f:
34:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:A3:7C:E3:D1:23:59:F3:37:E3:91:97:73:67:0F:0D:26:D8:0F:17
X509v3 Authority Key Identifier:
keyid:E0:E3:97:6D:9E:CB:83:09:A8:18:1F:BD:02:5C:A5:2F:EF:16:19:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4OOXbZ7LgwmoGB-9AlylL-8WGZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/cqN849EjWfM345GXc2cPDSbYDxc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/d612a3-4631-47de-940d-8be0d97682ab/1/4OOXbZ7LgwmoGB-9AlylL-8WGZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.193.12.0/22
Signature Algorithm: sha256WithRSAEncryption
05:c5:ac:b2:44:81:06:d8:9e:e0:7d:df:79:75:72:28:fa:c8:
48:13:72:5e:a2:2b:26:e2:ad:25:f8:34:85:a1:9a:3e:ca:aa:
f3:8b:3b:d3:31:99:63:55:80:6d:d0:d0:15:ad:52:b4:83:ec:
96:5f:9a:e4:10:28:ad:ca:e4:06:5f:41:c8:f3:81:26:aa:e0:
56:29:4f:1e:f7:db:35:a3:f3:bc:18:1d:12:8a:97:90:dc:d8:
c7:5b:4c:4e:a8:d1:8f:98:46:91:9d:3a:00:64:93:c2:97:48:
c6:ae:4e:98:fb:ee:ea:92:7d:68:ef:21:37:3a:c9:21:88:03:
2c:a2:f4:43:f8:16:64:c3:9b:85:0c:5a:8c:33:52:0a:dc:39:
55:2b:70:38:a7:17:1a:e9:fa:ae:52:50:58:86:df:f1:8f:07:
19:5b:0f:1a:b1:7a:7f:3e:98:5a:91:9a:f6:bb:5f:13:73:79:
38:00:15:b6:19:4f:00:04:f1:f6:ec:de:3c:cc:80:67:9c:0f:
d9:a1:5a:21:17:b6:11:61:5c:d1:ac:4d:f8:f6:c2:1b:1e:ad:
7f:a4:6d:70:e9:81:0a:7d:76:f0:9e:6b:1b:47:3c:5d:11:62:
b8:c9:be:13:a1:6c:01:b7:5c:07:df:10:b3:3e:0f:aa:47:b8:
4d:72:fb:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 09:57:51 2026 by rpki-client