Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/qVl1vnYXaFl37y5V6qxprsXuMM4.roa
File: qVl1vnYXaFl37y5V6qxprsXuMM4.roa (raw, json)
Hash identifier: l3cMxFQFc5Ix1XS2plQRzF/YUiO15UqEZEgJbOaY42A=
Subject key identifier: A9:59:75:BE:76:17:68:59:77:EF:2E:55:EA:AC:69:AE:C5:EE:30:CE
Certificate issuer: /CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Certificate serial: 01A037776905EBDA665F0C22D6BB4DD3F798
Authority key identifier: 45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/qVl1vnYXaFl37y5V6qxprsXuMM4.roa
Signing time: Tue 25 Aug 2026 05:49:27 +0000
ROA not before: Tue 25 Aug 2026 05:49:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a01:f440::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 19:30:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:37:77:69:05:eb:da:66:5f:0c:22:d6:bb:4d:d3:f7:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45effe98c24c3d6d6087c8d1d3f901b8ccd40088
Validity
Not Before: Aug 25 05:49:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a95975be7617685977ef2e55eaac69aec5ee30ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:df:ba:00:3c:72:f1:96:81:0c:f0:be:fd:5e:
48:2c:6e:5f:8c:8e:30:41:ca:84:eb:06:05:c4:f3:
29:0f:50:2d:7a:91:6e:e9:0e:81:1b:57:32:e9:83:
3a:f8:3e:40:df:66:18:10:63:01:c6:0c:3e:9a:b2:
d0:5e:c2:87:47:b0:5e:82:8a:fb:ac:86:13:59:d8:
e0:7c:eb:2c:d1:50:65:c8:c4:cc:ee:4a:ba:98:ac:
81:eb:26:c8:d5:86:1e:dd:64:76:bc:73:87:dc:c4:
5e:cc:85:f6:f5:94:73:c6:2d:11:39:02:dd:0d:c4:
0e:cf:30:c8:27:9c:d2:bd:20:15:61:9f:34:de:90:
a8:02:81:49:2a:16:e2:f5:cc:ec:b0:0e:e0:2f:d8:
aa:93:d7:59:42:59:6c:d8:4e:6a:90:21:83:13:02:
fc:24:9d:d7:9a:cb:a1:3c:9e:69:37:7a:33:4b:93:
5f:9c:38:aa:13:af:40:db:37:8c:04:4f:9f:cf:69:
d0:01:7b:80:39:1e:af:d5:08:81:98:8c:67:28:72:
d9:58:bf:62:ac:12:b3:d1:6a:ca:50:0c:60:4e:3c:
4a:f1:89:38:04:26:25:50:54:3f:df:84:83:7a:31:
22:32:1f:0e:bf:c6:e1:a4:c9:56:88:13:2e:3b:18:
6c:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:59:75:BE:76:17:68:59:77:EF:2E:55:EA:AC:69:AE:C5:EE:30:CE
X509v3 Authority Key Identifier:
keyid:45:EF:FE:98:C2:4C:3D:6D:60:87:C8:D1:D3:F9:01:B8:CC:D4:00:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Re_-mMJMPW1gh8jR0_kBuMzUAIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/qVl1vnYXaFl37y5V6qxprsXuMM4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/1e4a64-7aa0-4c94-9bb0-deb7b9189169/1/Re_-mMJMPW1gh8jR0_kBuMzUAIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:f440::/29
Signature Algorithm: sha256WithRSAEncryption
38:bc:fe:c9:2e:4d:07:37:cf:e2:f2:db:db:06:ab:d0:a3:e5:
d8:b5:6c:fc:1e:55:db:3a:c7:55:b1:dd:f1:f7:80:48:64:c0:
e5:37:10:47:c5:c6:bf:2e:2b:bd:2b:35:8b:d0:d6:0e:c1:75:
e6:92:79:8e:ff:7b:3e:a9:be:a1:eb:9a:a3:2f:6c:4c:3e:e5:
28:c2:19:80:47:0d:00:88:b3:6e:9f:7e:d2:54:4a:64:68:3e:
7b:2f:ac:99:0e:48:ab:87:fe:e0:16:80:33:e1:cd:46:1c:04:
f9:87:09:34:2c:7b:ea:53:9d:a0:ba:ac:66:31:08:7a:5f:83:
5e:56:90:8d:9b:97:20:ee:3c:af:ae:91:e4:8d:59:6d:3b:62:
82:70:ef:8c:d4:37:ab:d0:96:02:b4:d3:3e:ec:36:88:c5:13:
86:30:c5:91:a9:40:ae:06:e0:c1:bf:6e:5f:b8:c6:98:ec:2e:
6d:5d:73:73:7a:d9:dc:2f:3c:51:7d:49:fe:99:a1:84:53:47:
7e:0e:cd:5a:da:03:23:ed:ac:83:2c:bd:f0:97:f6:46:bb:10:
1c:87:e4:e1:e6:cd:70:67:7a:a6:36:a8:31:37:35:5f:2a:3b:
4e:a7:2d:ac:d3:a6:b6:12:25:bb:bd:48:05:ad:2a:94:e2:41:
2c:a8:89:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 27 03:26:41 2026 by rpki-client