Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/qfDAGHDDZhbG_VUXj0goKE-xsTE.roa
File: qfDAGHDDZhbG_VUXj0goKE-xsTE.roa (raw, json)
Hash identifier: 00PBxTZATabx2MDk9b4T2x5pqNTy64WZzmYqaLHUFhk=
Subject key identifier: A9:F0:C0:18:70:C3:66:16:C6:FD:55:17:8F:48:28:28:4F:B1:B1:31
Certificate issuer: /CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Certificate serial: 01A09FA5A1D7008BB68F9C3FC288A35453FC
Authority key identifier: 00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/qfDAGHDDZhbG_VUXj0goKE-xsTE.roa
Signing time: Mon 14 Sep 2026 11:20:27 +0000
ROA not before: Mon 14 Sep 2026 11:20:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53356
IP address blocks: 84.19.10.0/24 maxlen: 24
84.19.12.0/24 maxlen: 24
84.19.13.0/24 maxlen: 24
84.19.14.0/24 maxlen: 24
84.19.15.0/24 maxlen: 24
84.19.31.0/24 maxlen: 24
195.62.20.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 11:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:a5:a1:d7:00:8b:b6:8f:9c:3f:c2:88:a3:54:53:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=002647c801fb58fcfaac135bb48f5e61fea7e566
Validity
Not Before: Sep 14 11:20:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9f0c01870c36616c6fd55178f4828284fb1b131
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:74:0a:7b:50:8c:e2:1f:fc:ce:bb:87:08:71:
e0:e2:e3:00:39:15:e5:98:d8:12:3e:3e:2b:58:95:
98:d9:12:61:6e:e0:a3:32:e3:94:71:61:ac:d8:6b:
6a:9a:a4:f4:91:0a:f0:e5:5c:7d:00:46:e7:1c:f6:
35:d1:5f:57:e0:23:72:dc:1f:7e:c4:18:ee:98:2e:
0b:ac:71:f4:f5:bd:ad:f9:98:30:1a:6c:11:ef:27:
52:bf:ad:1e:93:f8:e6:bd:a6:96:f8:33:eb:c3:04:
07:db:c9:ef:19:4a:74:99:9e:be:ce:97:1b:99:c2:
13:27:9f:2b:b6:ea:0c:57:1d:22:27:2d:78:e8:ae:
b0:84:ca:5f:f4:e8:be:8e:d4:83:eb:39:71:c4:36:
6d:24:56:f9:c3:17:da:f6:e3:5a:11:d1:d2:1b:42:
42:fc:70:dc:7a:19:a1:b6:35:b5:e0:a2:e9:f0:61:
35:e0:07:2c:03:0a:61:fb:e1:a1:f6:d8:62:c7:48:
e7:1b:aa:36:fd:2d:bb:24:d2:4f:47:cb:96:a7:70:
30:79:5f:15:a0:16:ed:a8:e2:42:cd:cb:af:ff:54:
f0:42:45:9f:89:57:12:ff:b3:77:fc:9b:de:cc:83:
f3:46:76:a7:da:04:f6:d9:0f:b0:2a:c1:15:f3:57:
95:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:F0:C0:18:70:C3:66:16:C6:FD:55:17:8F:48:28:28:4F:B1:B1:31
X509v3 Authority Key Identifier:
keyid:00:26:47:C8:01:FB:58:FC:FA:AC:13:5B:B4:8F:5E:61:FE:A7:E5:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ACZHyAH7WPz6rBNbtI9eYf6n5WY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/qfDAGHDDZhbG_VUXj0goKE-xsTE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/cfc06f-82be-49fb-bc82-94efbf5cecd4/1/ACZHyAH7WPz6rBNbtI9eYf6n5WY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.19.10.0/24
84.19.12.0/22
84.19.31.0/24
195.62.20.0/23
Signature Algorithm: sha256WithRSAEncryption
02:2c:65:29:a6:27:b6:68:16:8a:c6:42:16:ef:f6:3f:bb:d8:
fd:8e:ea:80:97:c0:3b:5e:b2:74:00:83:97:b3:22:94:4c:ff:
14:66:75:08:35:07:e1:4f:c9:51:b3:d1:3e:58:e5:14:8d:96:
6b:ed:7e:87:6f:fa:30:7e:b1:6b:2b:20:38:88:56:5f:19:40:
4b:f8:28:c7:86:d2:7b:78:23:5c:e7:37:e2:54:07:f3:94:04:
d6:36:30:a5:70:fc:99:59:a9:15:a3:3f:cd:e8:47:ee:2c:75:
5d:ca:e3:11:29:a0:02:22:60:04:f1:70:bd:1b:2d:45:10:74:
7c:f7:60:de:ea:e7:19:7b:3d:c6:ad:2f:6d:38:47:11:6e:45:
81:d9:20:0b:25:04:0f:d4:d7:96:57:3d:c8:7f:91:29:8d:6d:
ec:bc:97:d6:d1:27:f9:e4:7b:04:bb:df:d6:1d:49:dd:bc:c4:
8f:7a:26:6a:e0:38:f7:a4:df:a3:95:78:40:16:2b:79:47:b2:
22:b6:a0:a9:49:5b:b6:1c:c6:db:f4:81:65:52:f4:b5:69:b6:
49:20:36:6e:8a:05:50:af:84:d3:04:08:bb:89:35:2e:aa:f1:
40:8f:91:e9:7e:b2:a6:d3:0d:05:37:20:81:f4:f0:d1:ab:07:
e0:6a:59:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 16:15:51 2026 by rpki-client