Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/qebm1HnOnmQZcMHnLu3dqkHA5nQ.roa
File: qebm1HnOnmQZcMHnLu3dqkHA5nQ.roa (raw, json)
Hash identifier: e345WxTWzVBJ85lJWbHPeY1YmwF+VFHc7cHG1I1//LA=
Subject key identifier: A9:E6:E6:D4:79:CE:9E:64:19:70:C1:E7:2E:ED:DD:AA:41:C0:E6:74
Certificate issuer: /CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Certificate serial: 01A0A01AD1BC08A934D910225B414DD2536C
Authority key identifier: 61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/qebm1HnOnmQZcMHnLu3dqkHA5nQ.roa
Signing time: Mon 14 Sep 2026 13:28:27 +0000
ROA not before: Mon 14 Sep 2026 13:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47692
IP address blocks: 79.142.188.0/24 maxlen: 24
79.142.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.mft
rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a0:1a:d1:bc:08:a9:34:d9:10:22:5b:41:4d:d2:53:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=614799c67c08547d80bb35d02dae505d5a65dc5b
Validity
Not Before: Sep 14 13:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9e6e6d479ce9e641970c1e72eedddaa41c0e674
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:d8:0f:a3:7a:5f:3c:76:66:bc:8f:25:b9:2a:
d6:a5:0e:d5:94:12:0a:01:95:3d:ec:0c:ac:fe:4a:
a7:6d:6c:b1:30:85:65:a8:3a:4b:1f:81:95:b9:74:
e9:ae:7c:ca:92:a6:1b:5e:1f:ce:06:6a:e0:ff:d4:
5c:50:13:41:b9:02:53:5d:80:1f:4b:0a:b8:d3:1b:
83:b8:f3:b6:80:27:b3:29:fa:74:1c:cc:57:19:4d:
f3:30:23:a9:50:a4:98:94:4d:47:d5:41:4b:cc:bb:
83:00:cc:b9:b2:cf:d4:39:2e:da:d5:c2:0e:d9:37:
13:3c:3a:50:db:e2:91:ba:bf:a9:10:5a:44:73:83:
cc:e8:fb:61:63:ad:8d:56:9f:c2:73:03:66:d2:21:
61:bd:02:05:fb:53:7f:ef:31:99:aa:64:d9:02:7c:
9a:9b:8a:75:6f:c5:53:e0:d4:e4:e8:92:b9:0a:87:
02:4f:e8:6d:ff:70:5f:6f:51:8e:e3:82:82:83:b5:
ed:af:d6:08:07:e6:cf:91:0d:ff:fb:45:93:10:fa:
c6:11:87:3b:38:25:2c:de:ca:97:a5:13:0c:c2:7a:
64:d5:1a:00:c7:e5:87:61:28:68:4b:0d:ec:72:e3:
9c:87:23:ce:13:97:62:6a:84:1b:63:92:fd:31:49:
b4:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:E6:E6:D4:79:CE:9E:64:19:70:C1:E7:2E:ED:DD:AA:41:C0:E6:74
X509v3 Authority Key Identifier:
keyid:61:47:99:C6:7C:08:54:7D:80:BB:35:D0:2D:AE:50:5D:5A:65:DC:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/qebm1HnOnmQZcMHnLu3dqkHA5nQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/f7c9d1-0f5b-42f5-931d-1dc0b84a1c7e/1/YUeZxnwIVH2AuzXQLa5QXVpl3Fs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.142.188.0/24
79.142.191.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:25:87:29:3c:21:85:6e:d0:3c:c5:86:65:b8:f5:cc:16:ce:
df:ac:30:38:97:c5:3d:94:7e:4e:77:d7:0e:99:78:86:43:cf:
0d:f7:ea:a6:06:d0:1c:fc:b8:ce:ca:2d:ec:a2:0f:ca:fd:c6:
a5:65:98:2b:c1:38:f8:41:b4:54:45:ad:53:20:11:ed:7a:b2:
d0:99:d3:0c:37:39:df:e7:c0:da:c8:f1:47:c2:e4:c3:3a:ef:
51:7a:ae:44:02:a9:31:65:8d:df:db:22:ef:c1:ce:36:55:a4:
eb:2f:a4:ad:5c:2e:2f:d9:de:9f:9c:92:2d:e3:f9:50:d0:7e:
83:e3:8d:fe:0d:35:b7:3b:16:c3:ef:07:5b:35:94:5f:b2:82:
cc:c1:0d:2d:c1:5f:aa:e5:b0:c9:eb:17:03:94:50:02:6d:97:
ff:6b:48:d5:c9:b4:08:b2:d7:68:0f:4d:0c:eb:ac:06:de:f1:
d5:d4:46:ea:82:a9:7f:1a:aa:97:2b:39:39:46:72:89:fb:20:
50:e3:a7:2b:29:7a:47:73:0a:08:a7:2a:3c:3c:42:7d:5b:14:
8a:0d:a0:cd:11:16:4f:87:27:1a:b2:72:7b:cb:a5:03:55:58:
be:b3:c9:5b:c4:dd:53:d5:66:f2:93:0d:a5:ce:70:6b:1b:2a:
fa:60:07:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 23:47:59 2026 by rpki-client