Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/qyjVELc45JYmEbnp6zF7rXu1pCo.roa
File: qyjVELc45JYmEbnp6zF7rXu1pCo.roa (raw, json)
Hash identifier: TO8AQA0UCDarixWrhHiF3hZb2z3ocHdb/3E7YYctwOQ=
Subject key identifier: AB:28:D5:10:B7:38:E4:96:26:11:B9:E9:EB:31:7B:AD:7B:B5:A4:2A
Certificate issuer: /CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Certificate serial: 01A1117CFC55F12319068FDBEB1C415FA9CC
Authority key identifier: 05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/qyjVELc45JYmEbnp6zF7rXu1pCo.roa
Signing time: Tue 06 Oct 2026 13:52:46 +0000
ROA not before: Tue 06 Oct 2026 13:52:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8075
IP address blocks: 5.144.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 16:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:11:7c:fc:55:f1:23:19:06:8f:db:eb:1c:41:5f:a9:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=056f4a43e0b0651247fc3629c627b9c385f0c376
Validity
Not Before: Oct 6 13:52:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab28d510b738e4962611b9e9eb317bad7bb5a42a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:72:31:a5:48:b8:a8:a2:6f:d1:63:04:00:c2:
c1:47:6f:c3:c6:a3:06:61:32:7a:c0:14:eb:b6:90:
74:2b:67:cc:d3:32:f3:d2:87:a6:de:64:7a:bd:bc:
18:95:97:78:92:ce:27:32:1f:74:fa:97:b8:1a:ce:
c5:3a:01:35:f7:3f:c8:6c:a9:20:6b:ba:c2:9b:24:
1c:e4:54:25:09:a3:6b:77:12:d4:38:dc:88:ab:32:
da:f3:03:8c:0f:ee:f0:19:d3:cc:7b:8a:be:0d:fc:
60:f2:ec:bb:31:a8:74:4d:74:ca:80:a3:f8:99:8e:
c5:e4:13:6c:cf:5d:5c:fa:c8:b6:07:fb:02:8b:b2:
ab:cb:f7:c5:9b:ad:2c:cb:43:a4:98:bd:19:b5:f6:
0f:89:46:a9:6d:5e:01:56:09:13:72:82:91:74:8b:
ec:67:8b:54:e0:e0:50:09:af:d1:e8:7d:50:de:16:
8a:57:93:74:94:5a:09:79:9e:14:bf:36:7b:e2:83:
36:9a:c9:3d:43:42:0e:4a:53:be:a4:e6:e8:f0:ed:
7a:9c:ec:89:c5:c1:1c:0c:15:df:ec:09:68:0e:1b:
3f:46:1f:1b:6b:57:54:e4:52:44:9e:5a:1e:b8:38:
32:29:e3:2b:c1:dd:ed:71:74:81:ad:4c:16:96:1b:
c7:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:28:D5:10:B7:38:E4:96:26:11:B9:E9:EB:31:7B:AD:7B:B5:A4:2A
X509v3 Authority Key Identifier:
keyid:05:6F:4A:43:E0:B0:65:12:47:FC:36:29:C6:27:B9:C3:85:F0:C3:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/qyjVELc45JYmEbnp6zF7rXu1pCo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/25b6ce-c211-4668-9a47-fe58f84dd3fd/1/BW9KQ-CwZRJH_DYpxie5w4Xww3Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.144.153.0/24
Signature Algorithm: sha256WithRSAEncryption
62:22:f8:ed:42:a7:57:c4:05:62:ef:af:11:2e:d6:43:58:20:
8e:cd:20:f5:8e:b8:bc:7e:ac:eb:c3:d1:d3:8e:1b:b2:b9:00:
15:df:67:36:06:98:61:1a:bf:34:c7:79:24:d0:f1:7c:ed:fe:
9d:63:81:75:1f:e5:71:46:aa:b1:2e:bf:f5:c3:0c:ca:73:c4:
f5:75:f8:d4:59:6e:1c:0a:91:c6:25:87:e6:03:63:9d:37:18:
ac:c8:59:76:b1:e0:6a:e3:27:d3:b6:c9:c9:7b:9a:b2:5c:02:
83:9a:6c:83:7d:2d:e4:e6:9c:34:87:fb:23:77:49:75:ed:b3:
bc:bb:4a:44:a5:0a:79:7c:cf:3c:37:13:40:e6:44:e4:ba:f7:
b2:21:cc:57:49:4b:25:48:6f:54:ad:e0:40:b9:0e:5a:b6:07:
7f:1c:58:0a:51:ae:dc:f5:2e:f6:5e:b3:52:75:d5:4e:63:5b:
1e:a9:64:d5:86:35:58:44:ec:22:9d:7a:6a:6d:f2:35:21:22:
7a:9c:be:1e:cf:57:ec:e7:42:a6:52:15:35:ca:94:18:1a:d3:
4b:5a:31:f1:97:d1:0a:31:35:1f:b1:4d:0f:34:b2:dd:07:2a:
bd:7c:25:74:af:d1:36:a5:67:63:b1:c1:76:f4:31:0f:ff:e3:
5e:4c:59:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 01:07:46 2026 by rpki-client