Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/qKQepqb-aSIG5qM5tmN5Ji8EAm8.roa
File: qKQepqb-aSIG5qM5tmN5Ji8EAm8.roa (raw, json)
Hash identifier: 91xfdGqmAApu2khp5vZdzslMXh1yO1zr4vIkqEJnHgA=
Subject key identifier: A8:A4:1E:A6:A6:FE:69:22:06:E6:A3:39:B6:63:79:26:2F:04:02:6F
Certificate issuer: /CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Certificate serial: 01A018A565F305F9430FF01D0DD9B2FCCCEE
Authority key identifier: FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/qKQepqb-aSIG5qM5tmN5Ji8EAm8.roa
Signing time: Wed 19 Aug 2026 06:11:27 +0000
ROA not before: Wed 19 Aug 2026 06:11:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3178
IP address blocks: 5.8.240.0/21 maxlen: 24
185.56.192.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.mft
rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 17:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:18:a5:65:f3:05:f9:43:0f:f0:1d:0d:d9:b2:fc:cc:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe31ddef25d96c84b001a2ac5047b04e060a0ac3
Validity
Not Before: Aug 19 06:11:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8a41ea6a6fe692206e6a339b66379262f04026f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:66:9f:79:ae:04:b6:ce:d3:56:17:15:24:64:
4a:a0:10:e6:02:8e:99:f7:4b:f7:29:3a:18:91:38:
be:61:61:46:c6:3b:af:84:fa:8c:ef:1f:2b:ea:a8:
66:e7:63:6e:5b:03:e9:a3:a8:f5:64:b3:bb:f6:47:
35:d9:83:9c:25:b9:58:e6:4e:bb:60:22:1c:b0:2f:
db:8e:b7:fb:00:09:27:39:d3:55:8b:6a:33:f4:66:
46:f3:f0:f7:aa:70:1a:88:6a:95:ab:40:c0:16:40:
12:7e:e9:5f:5d:11:e3:af:9a:83:dd:20:bc:5e:89:
68:7c:55:1d:9e:e5:56:41:7b:13:e1:33:3b:cc:a0:
4f:80:c6:0e:51:07:03:3a:61:40:5b:e0:e9:11:6f:
88:bd:dc:a1:7e:05:fe:96:c0:73:74:0e:bd:4f:5f:
77:07:2a:6f:a2:14:67:95:58:28:ef:17:46:b1:4d:
68:4b:8a:ca:f2:21:ee:e0:7e:0b:8d:ef:c0:7b:5a:
68:bc:5f:cf:ef:84:7b:24:5c:47:84:ea:31:38:cf:
34:ee:cf:da:bf:25:c4:11:b3:44:33:e3:18:e2:04:
b9:82:f2:ad:33:a5:c3:f8:b8:fa:fd:6d:be:03:1e:
8a:05:ec:56:72:54:3a:76:ea:33:0e:9a:c5:69:ee:
ff:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A4:1E:A6:A6:FE:69:22:06:E6:A3:39:B6:63:79:26:2F:04:02:6F
X509v3 Authority Key Identifier:
keyid:FE:31:DD:EF:25:D9:6C:84:B0:01:A2:AC:50:47:B0:4E:06:0A:0A:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_jHd7yXZbISwAaKsUEewTgYKCsM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/qKQepqb-aSIG5qM5tmN5Ji8EAm8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/7c0f14-5b24-4b1b-8eb5-b4d8c2b7a103/1/_jHd7yXZbISwAaKsUEewTgYKCsM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.8.240.0/21
185.56.192.0/22
Signature Algorithm: sha256WithRSAEncryption
3d:ab:c9:0f:b6:74:80:8d:07:b3:7c:e2:ea:78:91:ea:f2:c5:
7b:f4:55:b7:dc:9a:d8:6b:92:10:23:0e:07:f5:35:2c:01:29:
b6:6b:e0:14:70:b5:32:56:57:8c:18:d3:d9:9e:8f:94:e6:47:
35:99:b0:55:8d:81:ad:7c:a2:54:29:c9:c5:a4:62:c3:fd:7b:
8d:00:42:e3:bf:db:a2:ea:dc:9c:3a:95:7d:21:94:18:74:16:
7a:d1:f7:01:f9:a7:8e:50:7d:ea:ac:fb:60:dd:44:2b:2c:41:
7d:3b:24:5c:8a:c3:7d:5f:a3:97:7e:7e:07:69:22:37:5f:d9:
ab:42:24:be:40:f9:22:17:fb:c8:44:3e:dd:5f:fd:7d:1e:f8:
5d:6d:91:ce:49:d8:9a:92:e3:cc:b2:bc:66:48:a8:fe:ec:15:
7f:c8:5e:c4:81:e1:f7:b6:db:fa:05:84:a6:32:9e:8f:39:23:
9e:a2:8c:fc:6c:aa:7c:32:3c:e3:d7:c2:39:69:26:ff:30:e1:
43:f7:75:27:1f:98:98:5f:a9:63:cd:2b:89:f5:3c:9f:6b:72:
6b:dc:8b:45:b8:80:7c:c1:9f:0e:b5:a3:b8:b9:16:4a:c8:b9:
f6:d0:e0:1b:4c:07:98:72:ad:39:fb:9c:0d:76:5a:82:a6:ed:
9d:2d:d6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 02:37:09 2026 by rpki-client