Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/Qkusjz1kJHO2cJfSYIkFnas5VaY.roa
File: Qkusjz1kJHO2cJfSYIkFnas5VaY.roa (raw, json)
Hash identifier: kZMjY9Y0H5x0xn9TPQ12ugZBOPNLUCNf2qhtTiW+VhA=
Subject key identifier: 42:4B:AC:8F:3D:64:24:73:B6:70:97:D2:60:89:05:9D:AB:39:55:A6
Certificate issuer: /CN=dc399e8da0a13f3ed70d858197da2ad3e74bea84
Certificate serial: 01A1843701627480D05BF45AE8D7D9422FB1
Authority key identifier: DC:39:9E:8D:A0:A1:3F:3E:D7:0D:85:81:97:DA:2A:D3:E7:4B:EA:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3DmejaChPz7XDYWBl9oq0-dL6oQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/Qkusjz1kJHO2cJfSYIkFnas5VaY.roa
Signing time: Wed 28 Oct 2026 20:32:39 +0000
ROA not before: Wed 28 Oct 2026 20:32:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8987
IP address blocks: 185.54.68.0/24 maxlen: 24
185.54.69.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/3DmejaChPz7XDYWBl9oq0-dL6oQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/3DmejaChPz7XDYWBl9oq0-dL6oQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/3DmejaChPz7XDYWBl9oq0-dL6oQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:84:37:01:62:74:80:d0:5b:f4:5a:e8:d7:d9:42:2f:b1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dc399e8da0a13f3ed70d858197da2ad3e74bea84
Validity
Not Before: Oct 28 20:32:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=424bac8f3d642473b67097d26089059dab3955a6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:be:7d:39:f3:c8:0c:4a:38:9c:f4:70:a9:77:
db:81:ab:7e:ea:38:da:b9:ec:d3:ed:03:d0:55:a5:
58:a0:76:4e:ed:a5:54:f5:31:09:ea:d1:9a:12:39:
f3:4a:f0:c7:35:3c:98:e5:18:8f:cc:af:c7:87:50:
4b:67:47:e8:86:8e:75:f0:15:65:c6:ef:df:dc:e8:
aa:a2:5f:2d:04:19:ec:61:c6:45:8f:e9:95:6b:b2:
34:67:91:7e:34:19:e9:ed:56:95:1d:1b:33:e7:fb:
4e:a9:b9:9b:59:3d:eb:b9:e2:6e:28:c3:bb:5f:81:
64:c1:8e:c8:39:d2:1d:40:9a:1b:a0:a5:03:b7:8b:
04:49:c1:2c:90:7c:bd:d5:ea:1d:30:c0:89:a7:bf:
02:a1:16:16:41:21:05:90:48:1f:fd:fa:20:79:60:
c1:3f:d0:9f:b4:ef:17:4d:de:72:64:f4:ed:62:62:
47:2d:8c:08:07:39:ce:9f:45:9a:53:43:39:18:15:
c8:1b:89:68:23:86:3f:9f:5b:4f:2f:e0:7e:74:22:
e1:9f:f1:61:68:5a:1d:d4:8a:b6:e0:b8:a7:2d:d1:
cb:a5:d8:8e:38:bd:bf:30:a0:7a:85:d6:4b:9b:75:
af:cb:6e:75:22:a5:e3:74:d6:20:ec:64:aa:1e:31:
7d:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4B:AC:8F:3D:64:24:73:B6:70:97:D2:60:89:05:9D:AB:39:55:A6
X509v3 Authority Key Identifier:
keyid:DC:39:9E:8D:A0:A1:3F:3E:D7:0D:85:81:97:DA:2A:D3:E7:4B:EA:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3DmejaChPz7XDYWBl9oq0-dL6oQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/Qkusjz1kJHO2cJfSYIkFnas5VaY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/ebe6a2-bc18-44ad-97e9-42103ef5151c/1/3DmejaChPz7XDYWBl9oq0-dL6oQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.54.68.0/23
Signature Algorithm: sha256WithRSAEncryption
d7:ea:be:9e:91:c0:a8:b9:15:c7:5e:28:a8:ec:a8:4c:47:ef:
3a:8b:a6:bb:28:e4:dd:00:5e:51:01:08:48:87:9b:8c:7d:b5:
38:e4:c8:cd:5f:96:f4:87:7c:5e:cf:9b:ba:df:97:74:e3:1a:
65:b2:7b:b4:c3:9b:2b:25:62:e3:e1:e2:7b:58:77:04:50:b6:
d0:1b:70:87:fd:aa:55:3f:87:b1:ed:64:64:d3:cb:6c:89:e7:
71:b5:4e:8b:b1:d5:b2:cb:b5:58:d7:45:cc:db:02:30:6a:f2:
64:88:86:97:c3:3a:f5:65:7a:60:be:7d:b6:65:75:1a:e5:f1:
59:10:dd:4e:df:a7:d3:5a:f2:8b:a9:6c:a4:08:1e:ef:0b:7f:
f7:f6:85:5e:11:63:9b:16:d5:92:a4:3e:69:74:ec:b7:54:f1:
21:02:13:22:d0:1a:24:38:ab:51:ab:8c:6b:b5:7d:eb:f1:ab:
8a:05:01:3c:16:66:d2:9e:24:6f:6f:1e:93:79:b3:ae:8e:77:
a9:a9:7c:c1:c9:6b:36:47:87:8a:c9:b4:6e:43:ad:40:4a:ac:
e5:eb:eb:12:1e:fd:c4:8e:e2:1d:6a:3a:24:ee:de:1d:e7:00:
15:cb:8b:6c:b1:15:46:38:79:7b:9f:35:9e:03:b4:ba:ba:09:
1a:e0:f0:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 15:22:21 2026 by rpki-client