Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/qCxbncErzk4900gAaePx5yenewA.roa
File: qCxbncErzk4900gAaePx5yenewA.roa (raw, json)
Hash identifier: GQ8NXjQ+vN1fWJvNU40z0ytK/A56AMCqS+vkok7OXnY=
Subject key identifier: A8:2C:5B:9D:C1:2B:CE:4E:3D:D3:48:00:69:E3:F1:E7:27:A7:7B:00
Certificate issuer: /CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Certificate serial: 019CE1E201E99EE8B38E7C9A9C86F0B2C5B7
Authority key identifier: 75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/qCxbncErzk4900gAaePx5yenewA.roa
Signing time: Thu 12 Mar 2026 11:50:11 +0000
ROA not before: Thu 12 Mar 2026 11:50:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213861
IP address blocks: 2a12:a340::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 02:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:e2:01:e9:9e:e8:b3:8e:7c:9a:9c:86:f0:b2:c5:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7508475ff0d8ec960336016e0e04221a98e5ecf2
Validity
Not Before: Mar 12 11:50:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a82c5b9dc12bce4e3dd3480069e3f1e727a77b00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ad:f6:8e:1d:71:a2:70:f5:07:d2:1b:fe:92:
55:9c:03:84:36:57:a1:e3:49:0d:34:d3:84:c1:c4:
a7:00:8c:9f:33:49:64:cc:eb:de:2f:ef:9d:06:da:
6e:7f:42:32:5e:9c:d3:d5:30:59:cc:2b:fe:58:9a:
0d:d7:88:6b:95:d2:7d:0e:40:47:de:8c:86:e6:2a:
84:17:47:de:bd:60:e8:a9:0a:5a:39:5a:89:68:6e:
84:a1:db:7c:cc:da:73:33:88:10:33:50:99:43:a7:
73:6e:aa:1f:b4:0a:a4:dd:7e:3c:0e:b0:26:65:5e:
74:22:d4:0c:17:5e:c7:af:68:70:d5:fa:aa:6e:b1:
90:71:f9:d5:33:64:55:ae:c9:69:80:9c:98:8e:13:
8b:19:b0:72:25:6d:4f:7f:96:23:9f:dc:61:27:76:
78:fd:9a:cb:cf:da:d1:e5:59:cd:84:b7:2e:dd:3b:
e3:4b:61:82:c8:98:a7:35:d7:e3:66:c9:ea:d4:12:
e3:e0:d5:a2:62:7f:34:7e:63:45:49:c4:3a:6a:09:
85:66:08:fa:37:43:39:38:ec:46:9f:ea:c9:ed:1c:
26:b5:00:2d:ff:d2:1f:31:6c:4d:e6:9b:6b:22:f1:
b7:3d:ef:64:3e:29:7b:3c:59:55:aa:83:11:bc:28:
59:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:2C:5B:9D:C1:2B:CE:4E:3D:D3:48:00:69:E3:F1:E7:27:A7:7B:00
X509v3 Authority Key Identifier:
keyid:75:08:47:5F:F0:D8:EC:96:03:36:01:6E:0E:04:22:1A:98:E5:EC:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQhHX_DY7JYDNgFuDgQiGpjl7PI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/qCxbncErzk4900gAaePx5yenewA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/1fa6a3-8dc5-4c35-a49b-171c367be782/1/dQhHX_DY7JYDNgFuDgQiGpjl7PI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:a340::/32
Signature Algorithm: sha256WithRSAEncryption
4d:62:bc:da:94:70:a2:fb:80:3c:56:b8:04:99:6b:76:86:ef:
2e:e4:fa:fd:13:c3:82:f5:7d:7b:04:cb:d7:9a:d1:ff:b0:b1:
ef:d7:29:ad:9c:22:2c:e0:a9:97:58:e5:52:9b:33:03:5f:ff:
8a:b8:15:b0:c5:3f:ce:21:c8:0d:a7:4d:f1:18:47:fc:7c:57:
b5:a3:89:43:c1:45:57:ce:c9:b3:29:b8:3a:64:0d:71:77:6d:
01:6d:e5:9e:01:2f:cc:3d:47:e4:a5:5a:a6:f9:1a:cc:f4:61:
19:2b:c4:d2:55:0c:e4:4e:8d:e2:30:57:2a:d9:c8:de:1b:e8:
f1:82:e5:cb:db:13:3d:73:49:cc:86:56:46:38:f5:9e:72:71:
3c:c0:0e:11:bd:6c:64:6f:d1:9a:3b:54:3a:49:c5:2a:58:18:
30:9a:7c:da:7a:58:a7:e3:f1:cf:ae:66:51:3f:fd:84:91:97:
6d:3d:d5:5a:aa:52:38:ba:e8:97:75:1b:77:6a:05:ec:71:ed:
42:8c:07:bb:80:ba:28:68:b4:44:54:8a:96:9b:77:63:7e:1b:
dd:b3:4b:7b:85:ed:fc:70:e8:06:91:42:20:96:9b:3e:c6:12:
2e:06:99:a8:78:3a:0d:1f:7f:01:22:f9:e0:fa:c7:6b:6e:76:
08:bf:b9:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 12:16:09 2026 by rpki-client