Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/qMOuGXXFNq70pNcNtow8FDCLMoU.roa
File: qMOuGXXFNq70pNcNtow8FDCLMoU.roa (raw, json)
Hash identifier: wH+YSRt7CZbFibUBDTSCB7Tcuz3hqHMrTNqxDgdQEvw=
Subject key identifier: A8:C3:AE:19:75:C5:36:AE:F4:A4:D7:0D:B6:8C:3C:14:30:8B:32:85
Certificate issuer: /CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Certificate serial: 01A0CE05E384D4B9576EE88D08580229BCED
Authority key identifier: C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/qMOuGXXFNq70pNcNtow8FDCLMoU.roa
Signing time: Wed 23 Sep 2026 11:28:07 +0000
ROA not before: Wed 23 Sep 2026 11:28:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 93.127.161.0/24 maxlen: 24
93.127.180.0/24 maxlen: 24
93.127.181.0/24 maxlen: 24
93.127.182.0/24 maxlen: 24
93.127.183.0/24 maxlen: 24
93.127.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ce:05:e3:84:d4:b9:57:6e:e8:8d:08:58:02:29:bc:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c378bc3bd350eedc4f377c224556b250da6dde6f
Validity
Not Before: Sep 23 11:28:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8c3ae1975c536aef4a4d70db68c3c14308b3285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:a3:a4:a6:49:f0:1b:4b:79:10:2b:75:e6:f1:
64:ce:69:50:91:24:61:5f:06:04:f2:ae:9a:f7:88:
22:5a:32:ec:04:f1:66:e4:87:ce:f2:6a:c2:78:0a:
8f:c0:1e:03:a0:93:15:f1:38:1f:7f:31:00:0c:10:
7d:94:c6:22:a3:a7:5c:b4:fd:b4:e1:cd:6b:cd:ee:
a6:1d:91:4f:bf:ff:c0:b5:07:a4:0f:53:a7:c7:16:
0b:7c:14:94:09:22:34:51:87:bb:0e:6c:3c:0c:ac:
7a:df:6e:7c:4b:f7:be:4f:eb:1e:bb:6f:33:78:7a:
b7:43:f7:9a:07:db:60:db:97:46:4b:de:0a:f4:8d:
d4:c2:9e:24:ee:db:31:c0:55:22:eb:49:3b:93:4e:
4e:9e:36:f0:04:02:f1:db:ac:23:a6:ba:e3:2c:b4:
44:ef:4e:c2:0a:fb:9d:ed:2f:a3:25:bd:38:dc:d3:
8f:02:f0:74:3e:24:ab:d6:20:8d:6a:11:61:b7:96:
f8:d5:89:d8:df:6c:8e:a8:dc:cc:dd:e7:e8:8e:05:
7b:9d:4e:ce:0a:f8:ab:33:fd:a5:c4:d5:b7:8e:3d:
dc:ed:f5:6f:84:0d:46:9c:3f:05:8d:75:b3:fa:8c:
63:02:17:48:dc:95:a6:e3:e0:af:ff:18:a1:92:02:
03:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C3:AE:19:75:C5:36:AE:F4:A4:D7:0D:B6:8C:3C:14:30:8B:32:85
X509v3 Authority Key Identifier:
keyid:C3:78:BC:3B:D3:50:EE:DC:4F:37:7C:22:45:56:B2:50:DA:6D:DE:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w3i8O9NQ7txPN3wiRVayUNpt3m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/qMOuGXXFNq70pNcNtow8FDCLMoU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/be66e4-f14b-4b31-bdaf-4414558fdcbb/1/w3i8O9NQ7txPN3wiRVayUNpt3m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
93.127.161.0/24
93.127.180.0-93.127.184.255
Signature Algorithm: sha256WithRSAEncryption
61:99:6e:d7:76:3c:49:f4:70:02:0a:bc:d2:61:22:f0:62:85:
8f:dd:27:5f:e6:9a:a0:00:28:09:73:ee:f5:74:61:4d:32:bb:
ff:6a:c2:c6:a6:f3:6e:4a:90:3d:82:39:02:88:9e:6a:6f:72:
4d:a8:8d:03:ad:ac:f6:31:df:f3:5b:57:06:d4:90:0b:12:0a:
05:48:69:d8:4d:f0:e4:b1:7c:59:68:d1:62:42:c1:29:1c:3e:
e1:c1:60:a5:7a:5e:c5:b4:04:f7:ba:2f:62:60:35:e8:b7:f4:
8e:5e:3d:c5:c9:ca:7b:0f:4d:f2:bb:86:b4:e1:7a:ab:a8:df:
1f:5b:f5:a2:94:36:91:26:79:29:2a:4e:ce:54:84:a0:96:4b:
b8:9e:a2:19:e5:c5:c3:85:8e:bc:d5:1b:cf:57:bc:25:ce:a2:
b7:81:bc:ae:c3:21:02:b8:94:83:24:54:4c:7d:01:78:48:0c:
8d:f4:8d:4b:5e:43:72:56:94:43:6f:51:40:2a:a5:c6:1b:ca:
79:fa:ed:62:d8:ea:90:67:15:ff:56:eb:10:f7:b0:f3:b7:61:
f2:fe:ab:bd:14:5a:c7:3f:45:43:36:4c:70:d5:30:01:2d:89:
a1:ec:82:f6:fd:0b:33:a8:47:ad:23:d3:93:01:f6:34:b4:eb:
46:39:d0:fd
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Fri Sep 25 21:07:29 2026 by rpki-client