Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/qwDOnP6AdU_tAQtZsLWw5wfBxDo.roa
File: qwDOnP6AdU_tAQtZsLWw5wfBxDo.roa (raw, json)
Hash identifier: kQx1jz2DL7OQVFnj/XJkVTFzESJhS+h25gCtn8yqidk=
Subject key identifier: AB:00:CE:9C:FE:80:75:4F:ED:01:0B:59:B0:B5:B0:E7:07:C1:C4:3A
Certificate issuer: /CN=e336882c4d18c39523b7c29672e9d2e0fd8d86e9
Certificate serial: 019F2368EC5D1B6FFB6C729DDA8F3EDC9132
Authority key identifier: E3:36:88:2C:4D:18:C3:95:23:B7:C2:96:72:E9:D2:E0:FD:8D:86:E9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/qwDOnP6AdU_tAQtZsLWw5wfBxDo.roa
Signing time: Thu 02 Jul 2026 15:18:26 +0000
ROA not before: Thu 02 Jul 2026 15:18:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203424
IP address blocks: 145.11.0.0/20 maxlen: 20
147.12.32.0/19 maxlen: 19
185.45.176.0/22 maxlen: 22
195.181.128.0/19 maxlen: 19
213.128.160.0/19 maxlen: 19
217.116.80.0/20 maxlen: 20
2a02:2c00::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.mft
rsync://rpki.ripe.net/repository/DEFAULT/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ec:5d:1b:6f:fb:6c:72:9d:da:8f:3e:dc:91:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e336882c4d18c39523b7c29672e9d2e0fd8d86e9
Validity
Not Before: Jul 2 15:18:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab00ce9cfe80754fed010b59b0b5b0e707c1c43a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:05:b5:ea:14:59:c0:35:fe:58:9c:92:2d:e8:
a4:c3:3a:a0:11:12:3a:68:9d:20:ab:4e:47:f2:c2:
30:0d:72:7b:69:b0:8a:db:ba:93:c9:07:5f:6e:bb:
0e:d5:07:9b:13:d0:d6:af:bd:61:de:b0:45:c0:60:
2a:61:c7:c5:da:e3:8f:66:f7:cb:17:d6:da:cf:5d:
0c:ab:19:04:1c:62:3b:8d:fa:09:58:47:68:5c:25:
c3:01:61:7b:dc:af:e2:b4:57:0c:b3:f6:5d:d4:ce:
82:73:65:18:0b:a6:f5:0d:4a:5c:b3:7a:23:67:23:
19:2b:27:2f:af:2b:40:4a:ee:cb:fb:10:2a:44:78:
70:92:92:bf:e5:92:9e:c1:c6:95:fd:74:85:d4:b5:
78:c1:ce:fb:75:ae:f7:bc:3e:4f:08:3f:45:6d:11:
4c:29:15:77:5b:12:24:5e:87:3d:65:61:18:ae:85:
68:be:2b:e9:d9:89:23:f2:35:96:6a:f6:50:3e:08:
af:d9:69:7b:06:f0:a3:f8:9b:d8:6d:88:82:eb:48:
b3:8a:70:5b:e1:3a:45:20:6f:04:05:7c:4b:87:88:
3b:9b:37:0b:67:f0:c1:de:62:4d:de:0d:44:0a:da:
48:40:5c:13:7f:a3:68:a0:4b:28:8d:34:2c:3d:a1:
ad:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:00:CE:9C:FE:80:75:4F:ED:01:0B:59:B0:B5:B0:E7:07:C1:C4:3A
X509v3 Authority Key Identifier:
keyid:E3:36:88:2C:4D:18:C3:95:23:B7:C2:96:72:E9:D2:E0:FD:8D:86:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/qwDOnP6AdU_tAQtZsLWw5wfBxDo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/9fd20e-34d7-4949-a307-9087e0ff3d36/1/4zaILE0Yw5Ujt8KWcunS4P2Nhuk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
145.11.0.0/20
147.12.32.0/19
185.45.176.0/22
195.181.128.0/19
213.128.160.0/19
217.116.80.0/20
IPv6:
2a02:2c00::/29
Signature Algorithm: sha256WithRSAEncryption
98:63:98:09:54:22:00:f9:f2:39:15:bd:2a:46:07:39:0f:93:
14:6e:c6:55:db:ee:82:23:3e:3a:d2:fd:78:63:33:b2:73:4f:
3c:c4:4d:cb:1f:5f:44:99:74:cd:49:26:5b:dd:4a:e0:16:78:
d2:2a:92:9e:ef:dd:36:30:55:57:09:44:c5:24:96:8d:87:0e:
e9:67:75:05:cf:e8:2e:8e:60:d5:f2:0a:bf:83:aa:da:2e:5a:
4b:17:a7:fb:2a:a9:ad:59:75:14:5b:d6:8c:0e:7f:90:8e:05:
84:28:79:b3:95:97:b0:4b:92:3c:83:65:88:5c:8b:1d:f9:9a:
92:50:ac:74:01:e6:51:fe:fd:ca:44:74:89:d7:a5:5f:58:aa:
2c:14:4a:cf:b1:f6:23:fe:e9:71:4a:e5:85:bb:f3:a7:e2:46:
f2:6d:af:a3:b7:a3:05:61:5a:68:7b:3b:36:91:f0:62:42:b2:
e3:38:75:e8:c4:45:86:9f:02:29:e4:67:8d:e9:65:fd:65:ea:
62:ee:3e:3a:48:db:5a:78:5a:f4:b2:1e:08:19:84:2e:9b:87:
c6:8d:71:c3:9d:64:4e:44:2b:c6:93:cb:f0:ee:8e:ac:77:b1:
60:1e:c4:89:86:d7:1b:62:45:86:1e:11:65:16:0c:52:a3:d7:
4a:47:47:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:45:49 2026 by rpki-client