Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/Q6OlQ_9ZXybumgRK_B3WBiFqpPE.roa
File: Q6OlQ_9ZXybumgRK_B3WBiFqpPE.roa (raw, json)
Hash identifier: e5hCUeRW17wHBXOvRulWCT7Rdr5QCfXbYN4+MZnzoY8=
Subject key identifier: 43:A3:A5:43:FF:59:5F:26:EE:9A:04:4A:FC:1D:D6:06:21:6A:A4:F1
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 01A0C8B0D61A7D2056FD520088190B4489B9
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/Q6OlQ_9ZXybumgRK_B3WBiFqpPE.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214483
IP address blocks: 2a11:3140::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d6:1a:7d:20:56:fd:52:00:88:19:0b:44:89:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43a3a543ff595f26ee9a044afc1dd606216aa4f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:1d:88:2c:00:14:23:10:b5:63:63:9f:13:d7:
82:6f:25:6e:aa:e8:5f:77:5c:1e:bd:02:a3:db:0e:
b9:7c:30:0e:ac:9c:c3:dd:78:ab:3b:ae:4f:34:1a:
e2:6a:a1:00:2e:f1:84:98:31:ce:7a:25:fd:4b:f5:
32:4b:50:f6:7c:c0:ba:c9:70:1f:61:86:4e:7f:57:
68:9b:7c:86:6f:e0:b4:ae:66:db:c4:f1:e7:00:0b:
68:21:48:77:a4:83:88:83:a8:36:b3:68:28:5c:7d:
91:7b:0d:ec:20:87:a4:b3:cc:13:15:cb:3d:eb:3e:
15:cb:33:2f:21:c6:9e:61:e5:2f:f8:a9:0e:90:cb:
f0:32:26:07:13:b9:de:16:00:b0:d8:25:77:63:d6:
7a:53:34:05:78:db:73:0f:ec:c0:2f:1f:20:07:c2:
72:e6:5a:62:ea:f8:31:76:cf:f2:cc:a6:91:3d:ee:
8e:21:bf:17:93:c7:80:05:fe:04:31:62:9e:cf:2b:
f9:3d:d5:77:11:b7:7e:8f:02:c8:fe:b6:5c:cc:96:
4d:ff:e2:de:86:20:a0:c5:e5:2a:a9:08:79:12:90:
c0:f5:47:e9:bd:eb:0b:f4:3d:ef:6e:c2:f7:d4:4f:
86:4a:95:04:4c:9b:e3:8c:84:fd:1b:d5:aa:55:29:
4f:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:A3:A5:43:FF:59:5F:26:EE:9A:04:4A:FC:1D:D6:06:21:6A:A4:F1
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/Q6OlQ_9ZXybumgRK_B3WBiFqpPE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3140::/29
Signature Algorithm: sha256WithRSAEncryption
88:7f:f9:f2:a3:08:f0:38:7c:fa:52:ad:98:d5:5b:6d:41:4a:
b8:f2:b3:dd:6c:eb:24:33:06:81:c9:98:31:1b:57:72:45:14:
5a:af:e6:c3:8f:a6:60:42:b4:27:ca:88:34:68:b1:5e:2d:7c:
98:3e:c1:58:25:4c:df:96:c7:2b:3c:73:29:dd:e8:3e:e3:29:
95:80:e8:d8:24:f0:9a:3d:3a:f1:87:53:4d:96:76:03:8f:c5:
19:56:36:4e:00:b9:f0:55:83:65:5f:7b:fb:66:19:8e:c0:ea:
f5:6a:fd:93:a7:ae:71:b8:20:ad:21:12:b7:cc:ff:63:5b:9c:
a0:62:99:c6:7d:fb:6b:c8:7c:88:fd:b1:46:32:84:16:5b:f3:
3f:e0:3e:57:aa:0f:f2:06:86:99:87:eb:be:c5:5a:81:d3:88:
17:69:19:57:4a:e3:de:e0:52:78:6a:0e:94:32:8f:32:db:93:
3f:0d:3b:e4:15:09:4f:fc:f1:85:ec:ca:9e:ca:4e:2e:55:54:
88:1c:86:b9:a1:4c:b8:c3:f5:3c:ca:7f:6f:11:c6:20:5f:77:
3c:1f:ae:bb:d0:1b:32:2a:3c:5a:72:57:ae:0d:44:fd:65:4f:
af:1e:aa:06:5a:d0:51:4c:3e:86:d0:76:70:eb:b7:4f:b8:55:
2a:02:9e:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 02:24:24 2026 by rpki-client