Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qbLZvmNVHDw6ywTDJfp7jpRSx3Q.roa
File: qbLZvmNVHDw6ywTDJfp7jpRSx3Q.roa (raw, json)
Hash identifier: FbKNMJ+Crca/g+9TD+lTtkZskVkL4sJsLikc3sygVLE=
Subject key identifier: A9:B2:D9:BE:63:55:1C:3C:3A:CB:04:C3:25:FA:7B:8E:94:52:C7:74
Certificate issuer: /CN=a887bbe8b05ead0e2e4484f81cc8d3cd34d524c5
Certificate serial: 01A014A7AAE5CB6166B4AE92A12A74C2A135
Authority key identifier: A8:87:BB:E8:B0:5E:AD:0E:2E:44:84:F8:1C:C8:D3:CD:34:D5:24:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qIe76LBerQ4uRIT4HMjTzTTVJMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qbLZvmNVHDw6ywTDJfp7jpRSx3Q.roa
Signing time: Tue 18 Aug 2026 11:35:27 +0000
ROA not before: Tue 18 Aug 2026 11:35:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211192
IP address blocks: 217.180.62.0/24 maxlen: 24
217.180.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/qIe76LBerQ4uRIT4HMjTzTTVJMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:14:a7:aa:e5:cb:61:66:b4:ae:92:a1:2a:74:c2:a1:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a887bbe8b05ead0e2e4484f81cc8d3cd34d524c5
Validity
Not Before: Aug 18 11:35:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9b2d9be63551c3c3acb04c325fa7b8e9452c774
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:9b:3f:6a:e3:57:4c:58:4e:07:11:f6:05:
b0:58:c1:84:72:62:24:51:ef:c7:7c:c2:7d:85:78:
e4:85:96:55:b7:ae:4b:70:c2:b7:75:e5:48:c5:03:
0e:d1:09:47:c8:aa:a2:26:19:da:b9:f2:3d:c1:a5:
3b:b1:cd:88:fa:fb:88:aa:25:e2:37:55:13:2b:62:
82:0f:21:5d:47:2f:89:cf:61:2f:b1:fc:12:42:98:
30:c8:2d:7b:ed:6b:9f:bf:72:d3:e4:cc:b4:6f:e1:
a1:0b:f3:be:33:ef:67:3c:e5:79:a6:67:a1:5c:63:
55:f9:d4:46:fe:77:fa:04:56:5b:c3:b6:33:0e:ed:
3c:7b:a8:4a:95:e5:46:a2:c9:06:b4:4a:28:53:ad:
be:19:62:18:8b:bd:57:13:d9:69:36:4e:af:71:5a:
35:c3:d9:a8:7c:c2:9f:3b:49:05:8c:40:65:49:41:
53:7a:14:c7:77:78:41:08:ea:ca:6d:f6:90:96:9f:
a0:73:66:60:fe:cf:a7:9b:63:81:f6:76:a3:8f:b2:
1b:e0:d1:7f:4d:47:ae:7c:14:72:52:a8:cb:b5:48:
20:03:d2:6e:24:ac:0b:46:57:77:e9:75:f8:31:c7:
21:83:6b:62:f0:f2:48:c2:21:7a:36:a0:99:e9:6e:
9e:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B2:D9:BE:63:55:1C:3C:3A:CB:04:C3:25:FA:7B:8E:94:52:C7:74
X509v3 Authority Key Identifier:
keyid:A8:87:BB:E8:B0:5E:AD:0E:2E:44:84:F8:1C:C8:D3:CD:34:D5:24:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qIe76LBerQ4uRIT4HMjTzTTVJMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qbLZvmNVHDw6ywTDJfp7jpRSx3Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0f/3596be-52ff-40a3-b0d7-c167117f8645/1/qIe76LBerQ4uRIT4HMjTzTTVJMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.180.62.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:5b:6d:4b:5f:ab:14:ee:11:52:0e:de:6b:2b:fe:89:ff:35:
70:ee:f8:8a:3c:db:49:87:a0:0f:cc:a2:3d:46:ea:43:96:dc:
cc:85:13:c3:24:de:1a:01:0d:a8:93:70:1c:0c:db:21:2a:cb:
75:7f:e5:08:b8:ea:39:3f:9b:d5:b1:66:e2:6b:ea:89:6a:8d:
92:6f:45:4b:db:4e:ce:8c:66:d3:4c:a3:1b:ad:65:a4:67:de:
72:14:e7:2b:e7:80:0d:f0:fb:09:a6:80:94:44:84:46:95:1a:
2a:1b:f5:fa:1a:34:71:30:54:85:91:2c:88:bc:99:c4:2b:bb:
d8:ef:6a:5e:99:61:b1:b6:2f:91:79:d1:88:84:eb:dd:c9:e5:
8a:ec:63:02:59:91:2e:fb:6d:b6:ee:d5:b1:96:bb:72:3f:f1:
aa:65:40:ad:71:e7:54:38:a6:b9:7a:ad:4e:ba:fd:c9:6c:e8:
85:30:d9:db:8a:98:19:84:94:29:81:fb:8c:2f:72:55:3a:e2:
96:62:b5:df:a1:d1:ee:5a:88:a8:ba:78:24:d9:1f:4a:f5:94:
a4:e9:4f:dd:66:58:e2:3c:2f:13:55:22:f7:cd:a5:96:c5:36:
c5:cb:6e:9a:3e:59:a7:95:cb:df:9b:dd:ef:12:f1:40:2d:31:
dd:39:af:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 11:49:43 2026 by rpki-client