Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/qTje26BZZKRMARRDkJdC0IeHiRU.roa
File: qTje26BZZKRMARRDkJdC0IeHiRU.roa (raw, json)
Hash identifier: oaFttIih0ec3ogfrn2Cq/QjqWOUDC1z4Lnrsr8BVOtw=
Subject key identifier: A9:38:DE:DB:A0:59:64:A4:4C:01:14:43:90:97:42:D0:87:87:89:15
Certificate issuer: /CN=7988bf28c525c52d186c000c9bded9c1775c129f
Certificate serial: 019F2368887C771C3912BFAF719D165AD896
Authority key identifier: 79:88:BF:28:C5:25:C5:2D:18:6C:00:0C:9B:DE:D9:C1:77:5C:12:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eYi_KMUlxS0YbAAMm97ZwXdcEp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/qTje26BZZKRMARRDkJdC0IeHiRU.roa
Signing time: Thu 02 Jul 2026 15:18:01 +0000
ROA not before: Thu 02 Jul 2026 15:18:01 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50904
IP address blocks: 91.216.24.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/eYi_KMUlxS0YbAAMm97ZwXdcEp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:88:7c:77:1c:39:12:bf:af:71:9d:16:5a:d8:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7988bf28c525c52d186c000c9bded9c1775c129f
Validity
Not Before: Jul 2 15:18:01 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a938dedba05964a44c011443909742d087878915
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:e4:34:9d:a0:83:af:55:f5:3a:d8:d5:f1:ca:
c2:ab:a4:80:4d:37:c8:12:21:93:c2:21:5a:9f:20:
4e:34:8c:d9:3e:1c:02:84:2a:64:ca:94:f3:1d:26:
79:61:2c:96:8f:55:a1:5b:64:e6:8e:7e:51:aa:64:
24:9a:88:34:67:75:e7:62:b1:56:77:eb:6d:08:9a:
af:f0:5f:f6:a7:67:b0:44:a2:5c:35:1a:c0:fd:af:
ec:3c:52:c9:de:ea:8e:a4:56:73:31:a7:42:2b:11:
a1:0c:b2:bf:ed:22:89:d7:eb:05:44:90:13:69:78:
14:ae:e1:2e:19:af:60:09:65:ce:a4:e2:c0:a2:a2:
5c:52:7a:1d:bb:85:ad:62:9f:f3:35:6d:97:24:9f:
ef:13:4d:83:a0:b4:c4:47:60:7a:1c:d2:e4:ca:e1:
b2:ad:1e:ce:e3:13:1e:0d:63:cc:6b:01:95:4f:e9:
42:f3:d2:a9:6b:b6:6e:24:78:22:6c:95:9e:f2:a3:
5b:fb:b7:6b:3d:4f:86:54:e4:35:ef:c1:1a:ce:24:
7b:3d:f5:96:15:df:6c:1a:d1:1e:f3:10:3d:69:65:
66:f6:9e:ae:7b:cc:73:0d:71:e1:a2:13:aa:56:c5:
a4:75:1a:ed:d1:7a:8b:b2:b9:e7:70:92:44:d6:d5:
6f:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:38:DE:DB:A0:59:64:A4:4C:01:14:43:90:97:42:D0:87:87:89:15
X509v3 Authority Key Identifier:
keyid:79:88:BF:28:C5:25:C5:2D:18:6C:00:0C:9B:DE:D9:C1:77:5C:12:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eYi_KMUlxS0YbAAMm97ZwXdcEp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/qTje26BZZKRMARRDkJdC0IeHiRU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/cc2039-2451-405e-b06d-ac183a9adeb1/1/eYi_KMUlxS0YbAAMm97ZwXdcEp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.216.24.0/24
Signature Algorithm: sha256WithRSAEncryption
4c:43:34:b6:7f:ef:84:df:e0:b4:43:8f:9f:1f:3d:45:c6:6e:
0b:1f:44:0c:7b:16:b4:cd:1f:3b:49:a4:21:2f:a9:92:05:19:
83:56:6a:37:b7:64:7e:c1:bd:63:e0:94:d2:13:4b:e4:60:ac:
50:c3:89:74:f1:a7:24:4a:96:49:8f:2e:07:f3:bb:c6:0d:f4:
ac:41:32:29:4e:17:96:94:a3:25:eb:8f:a3:a3:52:da:b4:4c:
6d:c2:9d:93:24:52:4c:30:67:9e:86:8d:41:f2:6c:67:66:5e:
7e:c0:bf:3e:3b:37:69:4b:2f:eb:85:44:2a:df:9d:64:bf:07:
43:1a:93:27:43:70:57:3d:00:22:6f:f8:93:ad:66:6f:60:f2:
29:3b:4c:fe:62:59:5f:c4:db:8e:47:b0:84:06:ba:47:e2:13:
86:b8:60:dd:12:4c:30:f8:ad:b0:8c:cf:10:62:a9:d9:92:cb:
62:57:e6:cd:39:e6:79:be:04:19:b4:98:1b:f5:38:45:eb:a1:
7c:d0:51:2a:81:21:dc:ee:db:ba:1c:f1:12:43:a9:66:05:6e:
0a:c9:ce:22:87:3f:f4:a9:0f:a0:5f:54:9f:56:ea:26:32:63:
82:31:22:d2:db:9d:b2:e5:f4:31:2a:ab:11:f6:c3:d9:5f:75:
b8:14:bb:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 20:33:26 2026 by rpki-client