Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/ScQfnaUU4O8vx0n81hUaqb086B8.roa
File: ScQfnaUU4O8vx0n81hUaqb086B8.roa (raw, json)
Hash identifier: lNNE6MSkgxUG1XBBRE9DXmRaUozczaM9QmKJs3IX4os=
Subject key identifier: 49:C4:1F:9D:A5:14:E0:EF:2F:C7:49:FC:D6:15:1A:A9:BD:3C:E8:1F
Certificate issuer: /CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Certificate serial: 01A048B230A7166EF977A974AB7924327FED
Authority key identifier: 41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/ScQfnaUU4O8vx0n81hUaqb086B8.roa
Signing time: Fri 28 Aug 2026 14:07:12 +0000
ROA not before: Fri 28 Aug 2026 14:07:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218837
IP address blocks: 176.67.232.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.mft
rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 23:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:b2:30:a7:16:6e:f9:77:a9:74:ab:79:24:32:7f:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4104a40821c4176cc42e255ef6c1727473c3f00a
Validity
Not Before: Aug 28 14:07:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=49c41f9da514e0ef2fc749fcd6151aa9bd3ce81f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:c8:a6:23:38:e1:df:8f:1a:61:85:16:24:43:
fe:af:49:9d:25:b0:06:c9:97:75:c8:26:22:9e:33:
04:56:b0:39:2e:1c:3e:35:e3:5e:76:b1:35:ba:e9:
d7:83:50:0e:ab:2b:f2:2b:29:c1:c1:14:31:0d:af:
b0:19:b2:0d:47:5e:4b:0d:db:a3:c8:59:71:5e:3b:
b8:7d:b0:0d:b4:c1:ff:1f:3c:97:8c:48:bc:a9:34:
12:76:f8:5e:b4:bd:f7:78:9c:89:dc:05:65:fc:6a:
6d:4e:e1:7a:99:9e:fb:cf:d5:eb:9c:48:d4:fb:15:
6f:3a:6b:69:03:c4:97:fd:58:1d:76:a7:66:26:57:
0a:ad:45:12:62:e5:77:f4:b0:77:f5:fd:0f:d5:09:
ad:79:02:71:5c:c1:eb:36:79:d2:30:d0:e7:23:f9:
e8:f1:33:65:43:37:b8:be:ca:d0:0f:9e:da:51:f2:
a1:21:78:cb:c2:a9:4a:44:21:a0:bd:97:67:0e:a1:
9c:86:6d:1e:10:0e:2a:db:91:67:c3:90:4f:3b:92:
26:95:4c:b0:50:d7:e4:b8:ea:b0:75:b6:7d:b9:63:
44:6c:fa:ab:c3:86:90:13:53:df:c1:61:8d:f1:d4:
f8:23:5e:e3:b8:ad:f1:d6:08:e4:f4:b6:16:d8:4b:
66:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
49:C4:1F:9D:A5:14:E0:EF:2F:C7:49:FC:D6:15:1A:A9:BD:3C:E8:1F
X509v3 Authority Key Identifier:
keyid:41:04:A4:08:21:C4:17:6C:C4:2E:25:5E:F6:C1:72:74:73:C3:F0:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QQSkCCHEF2zELiVe9sFydHPD8Ao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/ScQfnaUU4O8vx0n81hUaqb086B8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/969962-12d3-41b2-ab43-b27d6e278e18/1/QQSkCCHEF2zELiVe9sFydHPD8Ao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.67.232.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:1e:42:ce:de:3d:91:c8:ac:20:19:df:4b:cb:f3:f7:23:04:
37:8b:69:d9:80:d4:79:ed:f3:5b:7b:fd:57:22:35:f6:c1:81:
c8:11:34:07:f8:f7:ed:a8:54:aa:e8:89:48:2f:4f:c3:d3:33:
c0:2d:cc:a5:c6:54:2e:c8:43:20:a8:f3:7a:f2:cb:f8:42:89:
1e:c4:95:10:d9:60:5f:d9:8a:a3:e5:2b:a9:4b:97:51:5f:91:
51:a0:e3:a4:87:8a:ee:a0:40:77:19:e4:1f:42:1d:7c:c5:15:
0d:5a:9b:d7:06:df:c7:28:02:0e:fb:81:10:9d:d3:ae:bb:c6:
ba:f8:ec:8e:49:c6:9c:cc:a6:4c:fc:ca:6b:c2:e3:48:78:3f:
33:f0:89:03:fc:52:a3:6f:8e:f0:dc:33:78:b4:b4:0d:ed:00:
7b:da:7a:ec:b1:61:02:9f:fc:ca:09:33:bf:d0:4b:a2:04:90:
e9:43:95:87:3b:eb:76:1d:64:c3:24:b0:aa:63:25:cf:fe:28:
b0:6a:53:e1:85:2e:34:e3:84:65:1a:c0:44:ef:cf:af:0d:db:
99:bc:0f:77:69:33:f7:70:9f:4b:a2:d8:4c:d8:da:93:60:1d:
02:93:04:12:ba:a3:d7:8a:60:6f:f4:60:5f:80:9b:10:cd:a6:
16:02:f8:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 08:45:58 2026 by rpki-client