Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/pqX6lIT-IFQWjc_NhwXIzYb-_JM.roa
File: pqX6lIT-IFQWjc_NhwXIzYb-_JM.roa (raw, json)
Hash identifier: 9bTCf/DDXdBSOe0mls++ZsYn+9bkv6mmTbVZOnJUu3o=
Subject key identifier: A6:A5:FA:94:84:FE:20:54:16:8D:CF:CD:87:05:C8:CD:86:FE:FC:93
Certificate issuer: /CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Certificate serial: 01A1CA81671DB86CF888200D885C0FCA9D6D
Authority key identifier: 4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/pqX6lIT-IFQWjc_NhwXIzYb-_JM.roa
Signing time: Wed 11 Nov 2026 12:07:20 +0000
ROA not before: Wed 11 Nov 2026 12:07:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219142
IP address blocks: 109.162.248.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.mft
rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:81:67:1d:b8:6c:f8:88:20:0d:88:5c:0f:ca:9d:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4dd74fbbbae58dd0876d99e80ec82a11a4477f7e
Validity
Not Before: Nov 11 12:07:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6a5fa9484fe2054168dcfcd8705c8cd86fefc93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:58:40:53:1e:b7:64:9f:1f:ab:60:8b:12:f9:
38:ae:c5:77:da:92:90:19:22:03:ff:5e:63:66:3f:
75:dc:9c:27:51:c0:60:00:fb:b1:18:3d:59:63:0e:
8d:ca:f3:f1:5a:d2:0f:7e:04:03:e0:d6:8b:93:01:
96:30:62:ed:0b:61:4e:2b:a8:3e:05:e3:f4:5a:4b:
88:9b:11:18:a7:b9:45:c7:43:e6:8d:c9:5f:e7:9d:
9c:0f:c7:5e:b1:ea:48:1c:98:5c:eb:c0:94:03:8a:
61:4c:6e:58:d4:ce:91:61:2f:24:56:3e:f6:e1:b4:
de:2b:18:7c:9d:3f:44:50:3e:f6:59:1e:f3:b7:d6:
63:b2:cc:6e:c7:2f:63:62:4e:e3:50:74:bc:de:57:
35:2a:e2:a9:2d:e4:7e:c2:b3:b9:c3:a9:f7:20:49:
74:95:45:6e:1c:d2:19:cb:ed:ba:dc:5f:cf:3c:80:
52:cf:83:80:ad:ca:8c:47:ed:e9:b4:54:d3:15:a0:
ea:14:88:aa:8a:8a:11:e0:bb:0a:0a:bf:6b:ae:fa:
50:23:51:11:48:a4:4c:4c:25:d8:b4:f0:5e:db:5b:
42:0e:71:b4:7a:c0:bd:8a:c1:29:e5:cf:dd:22:47:
99:53:42:90:01:88:66:c7:b7:35:21:96:eb:61:b3:
75:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A5:FA:94:84:FE:20:54:16:8D:CF:CD:87:05:C8:CD:86:FE:FC:93
X509v3 Authority Key Identifier:
keyid:4D:D7:4F:BB:BA:E5:8D:D0:87:6D:99:E8:0E:C8:2A:11:A4:47:7F:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TddPu7rljdCHbZnoDsgqEaRHf34.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/pqX6lIT-IFQWjc_NhwXIzYb-_JM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9f5f57-e828-4bcf-8d2b-8eab7f4fe77e/1/TddPu7rljdCHbZnoDsgqEaRHf34.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.162.248.0/24
Signature Algorithm: sha256WithRSAEncryption
99:17:fa:f4:c3:8b:e5:f1:54:1c:90:9b:76:30:f0:c1:c1:50:
85:26:e5:eb:d5:a0:ee:48:58:c5:43:1d:00:ce:9e:98:aa:a9:
ec:fd:3d:a4:0d:97:cc:d2:f5:bd:91:38:a1:a8:19:ff:30:5c:
25:bb:dd:86:a8:0f:a1:c8:c3:e8:2c:a5:cc:ab:fc:de:a0:69:
ca:8d:e6:f3:2d:a8:f2:1b:62:76:f8:03:8e:f9:b2:66:53:f3:
47:04:7d:f7:e9:c6:bc:2c:6a:18:da:dd:f4:07:b3:2a:d9:09:
d5:29:29:74:ca:9d:f8:05:47:26:73:50:63:45:dc:04:98:74:
50:d5:15:76:03:08:92:2c:0d:b0:a3:80:d8:9a:bc:7b:02:19:
8b:ae:bc:72:74:b2:26:33:f3:97:83:b1:07:fc:75:4c:c2:9f:
6b:b3:d5:0a:ec:9d:98:8a:0a:d7:97:c2:ab:e9:d6:62:be:a4:
43:97:1d:90:f4:7f:79:86:76:4f:8c:de:66:87:8e:02:f0:eb:
be:32:84:94:c1:05:fd:c8:13:2c:6f:98:d2:9a:5f:d9:24:56:
3b:f0:ba:07:7e:ea:86:5d:2c:3d:4e:84:c9:de:a8:5a:b9:5a:
e2:c0:36:4e:6a:a2:68:72:8f:74:3d:c2:9b:45:12:eb:88:26:
de:f7:d0:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 11:42:20 2026 by rpki-client