Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/qKzaJUIBAPvWJOkDIQNuUbv9QVU.roa
File: qKzaJUIBAPvWJOkDIQNuUbv9QVU.roa (raw, json)
Hash identifier: GRZQviYkINuzq0jisrJA3LQ2fHSiy0wtjPfGGzXaIHc=
Subject key identifier: A8:AC:DA:25:42:01:00:FB:D6:24:E9:03:21:03:6E:51:BB:FD:41:55
Certificate issuer: /CN=1455ca30592313388925ee1441009ad31d4bb41f
Certificate serial: 019F38CA34BE96CFAC39BCE75F1F4190CB98
Authority key identifier: 14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/qKzaJUIBAPvWJOkDIQNuUbv9QVU.roa
Signing time: Mon 06 Jul 2026 18:56:43 +0000
ROA not before: Mon 06 Jul 2026 18:56:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43131
IP address blocks: 31.44.32.0/21 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.mft
rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:38:ca:34:be:96:cf:ac:39:bc:e7:5f:1f:41:90:cb:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1455ca30592313388925ee1441009ad31d4bb41f
Validity
Not Before: Jul 6 18:56:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8acda25420100fbd624e90321036e51bbfd4155
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:4b:75:77:f2:10:54:0b:33:37:a1:a1:59:be:
82:07:fd:3e:cd:78:dd:d4:73:2b:b1:b1:cf:44:49:
e2:58:58:c5:b1:ea:6b:58:84:92:5b:42:df:37:bd:
ef:2a:c7:51:b8:7e:0c:49:97:92:58:a9:0c:5c:7b:
d7:77:40:06:3c:20:c0:f9:ce:6b:bb:8e:ac:9d:16:
d1:fd:ff:94:1a:98:20:90:d7:7d:d1:1a:df:cb:9c:
a9:70:c1:f3:89:86:62:5e:7c:0e:46:e0:6f:64:2f:
77:22:9d:df:dc:45:05:d0:c4:4b:e9:6f:3d:bb:8f:
0e:e7:15:84:7e:15:ad:b8:cb:4f:09:d0:bd:cf:a5:
18:6e:6a:9f:39:bd:8d:03:ba:5c:91:31:77:e0:2d:
f7:82:32:c0:de:9a:f1:f2:68:10:b4:61:2e:71:ac:
b3:ca:b6:85:4f:3d:cb:e3:c6:cc:c4:89:77:c0:33:
6d:18:f9:3b:83:bf:dd:9e:aa:6f:63:72:3a:f1:80:
bb:de:b5:8a:93:fe:c0:2c:8b:1b:e2:ff:a9:70:04:
e2:fe:82:13:a7:ca:cc:c9:31:2f:0a:79:b3:2a:a8:
1f:47:3c:37:c7:96:b3:f0:c4:cd:15:f3:58:cf:b5:
ce:53:26:b4:f3:e2:81:55:11:5b:5a:d5:3d:89:f9:
19:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:AC:DA:25:42:01:00:FB:D6:24:E9:03:21:03:6E:51:BB:FD:41:55
X509v3 Authority Key Identifier:
keyid:14:55:CA:30:59:23:13:38:89:25:EE:14:41:00:9A:D3:1D:4B:B4:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FFXKMFkjEziJJe4UQQCa0x1LtB8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/qKzaJUIBAPvWJOkDIQNuUbv9QVU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f0832e-675b-4ec2-a802-9b26cab79451/1/FFXKMFkjEziJJe4UQQCa0x1LtB8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.44.32.0/21
Signature Algorithm: sha256WithRSAEncryption
80:bb:1d:9d:dc:17:03:2b:68:7c:18:b1:ae:99:24:2d:f7:90:
e8:f7:5b:db:04:f8:7c:21:e6:2d:1d:fc:ba:f2:58:f5:19:c0:
3c:34:9e:8c:1a:ee:87:17:78:a6:d6:36:f2:02:34:30:02:aa:
f7:f9:bb:4c:8e:4d:95:e9:86:e8:8d:02:dc:2d:f0:c1:63:09:
3f:a6:9b:41:59:d3:8f:c5:43:0c:21:54:1f:a0:f4:d6:0c:07:
2b:55:38:3a:66:af:66:1a:1d:de:2d:f1:48:f6:4f:21:58:3c:
9b:04:6a:43:5e:63:3a:48:00:95:c8:8b:f7:3a:5b:a4:18:d4:
18:32:64:83:fa:bf:20:be:2c:88:86:21:e3:bd:22:2d:06:36:
f9:70:d1:8d:1d:b2:9a:33:d5:c6:cf:b9:a6:d3:41:db:a9:75:
67:45:2c:4d:86:c5:79:8f:f0:d7:94:f7:d5:10:84:4c:0e:01:
1d:d6:74:18:07:08:1a:b0:9b:08:4c:f2:5e:2e:c9:89:9a:e7:
28:76:ec:1c:de:67:0f:8a:a5:4a:3e:ff:15:d6:12:3f:25:76:
14:36:b2:25:b1:48:e1:fc:e7:12:b3:ba:6a:cd:ee:b3:c6:93:
b6:23:24:19:0d:21:c9:75:d2:04:66:99:e2:38:db:91:c1:d3:
9a:2c:dc:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 04:05:31 2026 by rpki-client