Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/qQKt-ttEupn050lQM3ueiMM5O7U.roa
File: qQKt-ttEupn050lQM3ueiMM5O7U.roa (raw, json)
Hash identifier: IWUAiIiA8+zMFHrxZAZM+ZSZwvnir/Y+CFeS9iJbSKc=
Subject key identifier: A9:02:AD:FA:DB:44:BA:99:F4:E7:49:50:33:7B:9E:88:C3:39:3B:B5
Certificate issuer: /CN=0054882401b0724864a8cccbaeafe42c85240456
Certificate serial: 01A0EDC5D0F5C68A894D1459736E6270978A
Authority key identifier: 00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/qQKt-ttEupn050lQM3ueiMM5O7U.roa
Signing time: Tue 29 Sep 2026 15:25:59 +0000
ROA not before: Tue 29 Sep 2026 15:25:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9121
IP address blocks: 89.207.12.0/24 maxlen: 24
89.207.13.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 05 Oct 2026 12:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ed:c5:d0:f5:c6:8a:89:4d:14:59:73:6e:62:70:97:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0054882401b0724864a8cccbaeafe42c85240456
Validity
Not Before: Sep 29 15:25:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a902adfadb44ba99f4e74950337b9e88c3393bb5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:67:12:97:65:34:42:bd:ad:65:fc:31:ee:60:
1b:2a:25:98:11:d3:b5:8a:f4:0a:f0:3f:ad:ee:46:
90:50:b4:30:43:d6:e7:67:0c:90:82:95:ae:50:ca:
29:0d:60:6c:f7:09:62:c3:62:11:60:0f:2e:62:7a:
9a:9f:7b:37:84:4f:83:37:5f:ed:a4:df:d3:9f:46:
e5:f8:be:9e:6a:19:55:e5:d2:e6:7f:d8:95:1f:d0:
a9:7b:78:9f:ee:b3:cd:86:ab:69:e6:20:59:92:df:
63:96:56:17:6e:03:27:f4:b1:a4:cd:bc:19:7a:5f:
d0:b4:53:a9:27:55:36:c8:46:fd:1e:b8:b2:1f:f4:
c4:63:84:37:f8:b8:c8:be:fe:88:3f:93:16:be:49:
55:39:9a:aa:e9:5c:3a:de:99:d1:14:83:0f:c7:fc:
c2:eb:06:9d:0b:dc:d8:1f:f6:e6:32:ac:ce:8a:a4:
0a:59:a6:1f:e6:1c:b6:7d:ac:94:3a:73:b6:51:2a:
84:44:4b:c0:a2:ca:da:2d:8a:45:0e:1b:c6:c8:26:
f5:ed:81:28:3a:bb:af:49:64:af:ad:3c:a1:ef:f3:
9a:f6:57:6f:8b:ae:72:a5:f6:ff:e3:a7:74:98:1d:
36:6f:ec:a5:35:6d:ee:1f:37:ed:fb:e1:b0:b0:ad:
d4:ad
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:02:AD:FA:DB:44:BA:99:F4:E7:49:50:33:7B:9E:88:C3:39:3B:B5
X509v3 Authority Key Identifier:
keyid:00:54:88:24:01:B0:72:48:64:A8:CC:CB:AE:AF:E4:2C:85:24:04:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AFSIJAGwckhkqMzLrq_kLIUkBFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/qQKt-ttEupn050lQM3ueiMM5O7U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/95fe44-b039-4c93-b975-46ee99a1ee30/1/AFSIJAGwckhkqMzLrq_kLIUkBFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.207.12.0/23
Signature Algorithm: sha256WithRSAEncryption
53:9b:9c:69:53:4d:fa:28:91:8f:c7:1f:5a:4b:96:f2:b2:c2:
01:27:7c:d4:c8:b4:f9:50:71:e4:0a:0e:3f:59:f2:dd:fe:03:
38:e7:9a:3c:f1:1e:c6:fa:67:70:41:79:dd:34:43:17:1e:9b:
ad:36:a3:22:be:e9:b2:fb:fa:95:dc:05:bc:2c:08:62:cf:6b:
a9:70:ef:1f:94:40:55:7e:3b:09:06:9f:e5:86:48:d7:f5:3e:
42:6d:cc:5d:7b:f9:9e:38:24:72:bc:b9:fe:00:c3:7b:de:74:
00:b5:81:b4:dc:34:2e:66:2e:8b:db:58:50:c7:91:f8:09:66:
c4:e8:27:3f:95:50:27:08:75:b8:71:b8:9d:59:e9:62:36:90:
cb:de:b1:b2:72:0d:e5:20:5e:36:d6:a6:83:14:fc:62:8e:d2:
ee:04:63:42:9f:a5:90:2b:bd:fd:95:d7:4f:1b:77:db:8a:5e:
b6:88:30:73:1b:ad:34:d7:a0:fc:ee:2e:80:15:61:34:4d:97:
20:bb:91:ac:31:70:d1:36:80:83:61:69:e9:09:90:7b:0d:9b:
28:15:e4:4e:d5:10:92:c1:b5:d1:04:88:34:6c:d6:e8:44:89:
31:94:17:ff:00:3e:5d:fd:ce:a3:bb:64:b5:4e:29:89:55:0d:
45:24:05:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 4 18:02:56 2026 by rpki-client