Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qqLZbftpuADDMME5-3fMERy3fPc.roa
File: qqLZbftpuADDMME5-3fMERy3fPc.roa (raw, json)
Hash identifier: y9ue5WzkMXadtoLC0zPzmZ+FJ/My0toTsvp++5pEgxU=
Subject key identifier: AA:A2:D9:6D:FB:69:B8:00:C3:30:C1:39:FB:77:CC:11:1C:B7:7C:F7
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A09FE5BB61F55861226FF46B41F224B9AD
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qqLZbftpuADDMME5-3fMERy3fPc.roa
Signing time: Mon 14 Sep 2026 12:30:28 +0000
ROA not before: Mon 14 Sep 2026 12:30:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 94.249.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:e5:bb:61:f5:58:61:22:6f:f4:6b:41:f2:24:b9:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 14 12:30:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aaa2d96dfb69b800c330c139fb77cc111cb77cf7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:cf:09:28:12:4d:98:2e:54:be:0d:5c:63:04:
b0:a0:4b:02:bf:af:ad:79:5c:39:44:7f:55:f9:cd:
b0:eb:33:98:04:9c:58:2c:2b:e5:24:0e:ec:69:a2:
48:23:bd:08:ba:f9:d1:38:94:a1:5a:83:a2:07:7f:
61:0c:77:63:f0:e2:7d:9d:ab:02:fe:86:c1:a2:db:
30:91:88:ce:01:f7:8f:99:94:d7:a9:cc:00:ec:8e:
cf:fd:7e:83:3b:7c:95:f3:b0:40:af:c4:31:ac:4d:
84:ba:3c:4b:d7:f3:57:15:5d:61:92:18:67:68:88:
56:73:d4:d1:48:f8:7d:e9:6d:11:c0:36:34:a8:a7:
57:6c:90:f7:7e:0f:2a:2b:39:d8:65:12:51:48:a3:
84:e9:0f:30:fd:6e:9b:a0:c0:96:3e:61:60:30:c2:
22:8a:f6:2f:56:f7:6a:ce:6f:5a:0b:0c:91:5d:d8:
ee:97:00:4d:01:9a:80:94:b3:12:44:a6:47:51:91:
ec:46:7f:d5:2f:5e:db:87:07:98:0e:4e:9e:aa:e2:
3c:01:ec:bc:46:95:cd:1b:45:8e:43:d2:8f:38:2b:
7d:d9:d2:45:2f:81:c9:71:d1:8f:b3:32:47:d6:a8:
44:cf:9a:06:8c:2c:cc:7e:2d:3c:91:0f:b3:55:8c:
bf:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A2:D9:6D:FB:69:B8:00:C3:30:C1:39:FB:77:CC:11:1C:B7:7C:F7
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qqLZbftpuADDMME5-3fMERy3fPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.236.0/24
Signature Algorithm: sha256WithRSAEncryption
7c:81:f5:21:14:09:72:9e:f1:5a:a6:2a:db:af:c9:10:5a:6a:
6e:a8:8f:b3:43:a0:33:50:dc:06:6b:04:00:aa:1a:1f:df:b4:
92:ad:44:40:c2:b8:47:76:e9:e7:94:57:d0:f3:58:a7:72:24:
db:ac:e2:a9:ff:f1:f4:da:f5:09:9d:7e:38:6b:1c:fe:22:6b:
33:03:fe:45:29:16:28:29:0d:90:98:d8:48:f5:1d:0a:9e:81:
67:30:84:e9:09:77:b1:c8:de:19:ca:05:fb:b2:f5:24:ad:c2:
ab:0f:08:2c:3e:f0:07:c5:42:8f:57:78:a0:3b:1f:ee:eb:06:
81:d7:b3:92:56:61:71:3a:90:c7:e0:16:37:28:26:24:44:eb:
97:78:c8:ee:1b:9d:53:be:bf:f1:d1:c0:88:e8:5b:9f:19:d2:
a9:51:3a:f1:bd:16:04:6e:91:12:a6:6e:cc:33:b4:43:0f:84:
b6:a2:9b:1f:86:98:16:55:77:0d:64:d5:cc:8f:93:af:09:0d:
38:bd:4e:06:09:55:17:d3:83:ff:97:73:3f:4f:c5:94:4c:de:
b7:bf:df:4d:45:a8:30:52:29:ae:20:e1:44:a1:55:4e:16:54:
a9:e1:da:e5:74:a7:68:e3:f6:70:58:4f:a6:da:1c:f4:b9:6e:
c5:9a:81:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 14:25:49 2026 by rpki-client