Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CQbtqGeHroEF8J1AxnP8i5Yhrr0.roa
File: CQbtqGeHroEF8J1AxnP8i5Yhrr0.roa (raw, json)
Hash identifier: /Gg/8Ryo7BVCxrb9JaNzPqRm+qkvjS7VJHN7uW5QJfE=
Subject key identifier: 09:06:ED:A8:67:87:AE:81:05:F0:9D:40:C6:73:FC:8B:96:21:AE:BD
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C8DEA96F45D1A5F400F25F44765E7246A
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CQbtqGeHroEF8J1AxnP8i5Yhrr0.roa
Signing time: Tue 24 Feb 2026 04:31:27 +0000
ROA not before: Tue 24 Feb 2026 04:31:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20473
IP address blocks: 2a02:2fc0:2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8d:ea:96:f4:5d:1a:5f:40:0f:25:f4:47:65:e7:24:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 24 04:31:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0906eda86787ae8105f09d40c673fc8b9621aebd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:32:6c:19:de:f1:9a:be:7a:2e:8f:4d:d4:42:
4e:36:0f:c9:f5:58:9c:73:de:6d:6b:c9:53:29:99:
7b:e9:51:d0:5e:11:3e:c0:bb:28:df:9d:69:ac:c0:
15:26:39:2e:8b:1c:85:25:25:e0:cd:f2:b6:87:3c:
9c:ae:f7:92:4f:4b:aa:93:3c:d2:78:08:a6:29:ad:
dc:70:4d:b1:96:70:da:39:4a:c7:b9:55:94:5d:80:
7e:2b:db:74:dc:fa:27:4f:07:e9:ab:71:57:dc:5b:
fe:64:d7:99:03:a2:ea:ea:b7:d0:29:9a:2b:18:58:
f4:93:28:30:ce:2f:52:ff:2d:95:7b:c2:cc:a3:95:
c2:8b:f2:9d:bd:dc:5a:36:72:66:d6:9f:60:28:c7:
fc:74:e2:fe:be:ac:ea:8f:4e:52:25:15:a2:1a:22:
04:2b:4d:a2:3b:7b:4b:4c:c4:82:66:49:85:63:62:
c1:a4:b3:ac:ea:ef:3f:52:c3:60:28:36:95:21:6e:
25:17:58:46:d5:fb:9e:b2:0e:19:30:e8:5d:8a:00:
34:76:42:de:b0:73:7a:35:12:4e:cb:fe:f6:0d:d1:
f7:fb:db:8e:b9:73:df:e9:49:83:09:f5:b8:d3:d9:
0d:56:6e:a1:7d:bc:48:a2:fe:d1:2a:39:dd:4e:64:
9d:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:06:ED:A8:67:87:AE:81:05:F0:9D:40:C6:73:FC:8B:96:21:AE:BD
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/CQbtqGeHroEF8J1AxnP8i5Yhrr0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:2fc0:2::/48
Signature Algorithm: sha256WithRSAEncryption
8e:7a:4e:24:87:79:d6:ab:85:6a:4c:54:a9:20:e2:c9:b8:6a:
09:7d:21:5c:c2:28:f2:34:a5:8d:dc:59:17:14:cd:ed:a9:e2:
87:d7:c5:11:02:e3:9a:82:ae:62:85:f4:71:d5:75:c4:8a:de:
8e:e2:12:bf:fd:ae:4a:b5:d8:58:90:fe:fa:64:35:2d:f0:65:
48:6a:86:da:6f:55:05:ac:9c:e3:56:4b:76:f7:90:b5:c1:70:
95:ff:b0:3c:ba:1f:02:e2:d8:50:a8:99:db:a6:68:5d:e8:cd:
01:f5:c7:83:ed:bd:48:6c:52:23:08:65:3b:cf:e5:26:ae:b0:
89:55:f4:8a:b3:61:aa:db:49:0d:36:28:9c:e9:5e:3e:d6:b1:
2b:24:a6:a5:a9:40:a8:83:14:10:8c:19:b6:15:b8:da:f4:27:
f5:44:e6:43:42:26:ff:c2:bc:22:46:99:64:6b:f8:47:10:44:
0e:91:82:1e:6c:ce:73:50:28:bf:3e:3f:04:ee:9c:7f:4a:65:
f1:e4:c1:e7:24:e8:a2:46:39:fe:6d:cf:dc:95:06:b3:f5:d1:
96:ba:14:f5:2c:58:8f:a5:9a:08:d7:1f:78:f0:a0:31:9e:21:
22:ec:39:39:21:4c:07:37:ba:6f:7d:a3:97:07:f8:96:13:02:
20:2e:72:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 20:06:27 2026 by rpki-client