Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/qnkXJAeK4u2qmH3emYFeHbqxAfE.roa
File: qnkXJAeK4u2qmH3emYFeHbqxAfE.roa (raw, json)
Hash identifier: 2+W8mIlXbiBFTBNeKHsjpm7VkP0Dt7GHPChKCDwNq2k=
Subject key identifier: AA:79:17:24:07:8A:E2:ED:AA:98:7D:DE:99:81:5E:1D:BA:B1:01:F1
Certificate issuer: /CN=4419e02f046e1bfb5927fe731ff725e469599171
Certificate serial: 01A09EDB381E9BDA1C7B7C7B2132D9BC1F63
Authority key identifier: 44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/qnkXJAeK4u2qmH3emYFeHbqxAfE.roa
Signing time: Mon 14 Sep 2026 07:39:21 +0000
ROA not before: Mon 14 Sep 2026 07:39:21 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51013
IP address blocks: 37.9.168.0/21 maxlen: 24
37.9.168.0/24 maxlen: 24
37.9.175.0/24 maxlen: 24
45.13.137.0/24 maxlen: 24
45.81.41.0/24 maxlen: 24
45.138.184.0/24 maxlen: 24
45.138.185.0/24 maxlen: 24
185.87.12.0/22 maxlen: 24
185.87.13.0/24 maxlen: 24
185.87.15.0/24 maxlen: 24
195.210.28.0/23 maxlen: 24
2a00:4b40::/32 maxlen: 64
2a00:4b40:1001::/48 maxlen: 48
2a0e:bb40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 16:01:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:db:38:1e:9b:da:1c:7b:7c:7b:21:32:d9:bc:1f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4419e02f046e1bfb5927fe731ff725e469599171
Validity
Not Before: Sep 14 07:39:21 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa791724078ae2edaa987dde99815e1dbab101f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:9c:89:98:04:ac:97:63:11:b8:86:1b:61:42:
2d:3e:cd:bb:0f:6c:3b:46:50:34:77:98:1a:f9:d5:
13:20:ac:db:28:88:f6:5a:da:d1:17:31:d1:43:75:
5b:63:41:57:c6:e4:73:13:e1:a1:a9:40:f1:ac:e9:
6e:d7:35:a8:b3:a4:8c:46:52:d4:cf:a6:c6:f3:2b:
a6:de:38:b0:cb:97:57:b9:83:02:13:c4:62:62:14:
76:95:fb:36:7b:19:f0:dd:95:4a:ad:2c:92:bb:8b:
31:d8:cd:75:40:cb:14:be:ae:29:4b:32:e5:e6:91:
f9:9c:fa:72:2e:70:f6:cd:0a:e5:83:9a:51:3e:ac:
a7:c7:84:b8:68:75:ea:99:9b:17:1f:1c:c8:b7:e0:
41:dd:73:e4:34:3e:ad:62:5f:84:8f:4a:d2:10:40:
44:88:02:1b:b9:c0:1d:2b:02:40:fa:51:42:c5:95:
cd:c8:93:e0:59:dd:b4:60:51:99:30:c1:bc:64:47:
72:f1:b1:dc:9a:fe:2a:14:0e:b1:a3:a9:7b:c8:ed:
2d:13:65:59:8a:23:0e:3c:93:95:11:92:8a:58:57:
9e:3b:95:7d:7b:f0:5b:48:e1:7b:6b:e2:05:16:1f:
32:37:59:98:0b:95:00:82:e2:7f:0b:45:0f:2a:dc:
e7:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:79:17:24:07:8A:E2:ED:AA:98:7D:DE:99:81:5E:1D:BA:B1:01:F1
X509v3 Authority Key Identifier:
keyid:44:19:E0:2F:04:6E:1B:FB:59:27:FE:73:1F:F7:25:E4:69:59:91:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBngLwRuG_tZJ_5zH_cl5GlZkXE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/qnkXJAeK4u2qmH3emYFeHbqxAfE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/4de665-a7e3-440b-93a7-f9b7836f2391/1/RBngLwRuG_tZJ_5zH_cl5GlZkXE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.9.168.0/21
45.13.137.0/24
45.81.41.0/24
45.138.184.0/23
185.87.12.0/22
195.210.28.0/23
IPv6:
2a00:4b40::/32
2a0e:bb40::/48
Signature Algorithm: sha256WithRSAEncryption
68:78:6e:25:b7:8c:7e:96:e8:25:50:5c:2a:a9:c1:97:bb:7a:
e4:80:3c:fc:68:fa:1b:cc:e6:88:7c:42:a4:ea:e6:0d:bf:1b:
4d:2a:65:0f:b8:10:fd:a6:02:de:d9:a1:0a:20:de:aa:d3:7c:
d1:0c:c2:ce:b9:97:e6:80:b2:a3:b3:5a:be:b8:1c:f0:9d:cd:
98:82:5b:a7:db:41:7e:2f:13:be:d8:24:ec:34:d6:68:9b:55:
69:63:6c:ca:14:68:03:0d:29:ea:ee:f0:90:dd:b2:5c:79:bc:
4a:65:ea:71:f8:40:24:66:67:2d:c8:fe:25:60:3b:b8:be:fc:
ff:a0:8e:29:62:a2:8c:d9:fa:9f:66:28:65:9d:d0:47:b1:1c:
2a:4d:9c:6e:8c:d0:d9:01:55:dc:35:01:8d:6d:2e:32:6d:57:
ee:90:77:94:b5:d4:e9:db:90:b5:e1:bf:08:7e:d9:85:38:5a:
c7:b8:bc:10:fb:89:37:07:38:a8:7c:76:30:2e:26:de:a6:53:
1b:d6:18:5b:fc:33:fe:c1:dc:10:7a:9a:a3:c9:6f:95:99:04:
b0:cb:13:3b:20:2e:98:2b:68:da:4e:a9:3a:b7:95:38:52:ad:
29:cc:08:cb:45:c8:ae:2a:f4:2f:f4:9f:f4:6c:e5:38:84:d3:
cc:a1:4e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 04:00:14 2026 by rpki-client