Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/K9_QQKuvjoMBPg5PnGp4EtxQ2U4.roa
File: K9_QQKuvjoMBPg5PnGp4EtxQ2U4.roa (raw, json)
Hash identifier: 64Qmx/op9ERZUSdmHO9jq9BNruGnHdMOtFzSa0MsHDk=
Subject key identifier: 2B:DF:D0:40:AB:AF:8E:83:01:3E:0E:4F:9C:6A:78:12:DC:50:D9:4E
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0A3C27F8D409A594A99A0F57BC224FAF1
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/K9_QQKuvjoMBPg5PnGp4EtxQ2U4.roa
Signing time: Tue 15 Sep 2026 06:30:27 +0000
ROA not before: Tue 15 Sep 2026 06:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142146
IP address blocks: 109.66.25.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 05:53:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a3:c2:7f:8d:40:9a:59:4a:99:a0:f5:7b:c2:24:fa:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 15 06:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=2bdfd040abaf8e83013e0e4f9c6a7812dc50d94e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:49:22:8b:7f:0d:51:4b:d0:46:44:20:17:a6:
ae:2f:07:6b:61:cc:05:0f:4d:2e:b2:6a:4c:6c:f9:
96:c5:35:5a:00:b1:24:9b:cb:af:dc:d0:d1:9c:ef:
15:10:a9:17:f2:56:b9:35:6d:a3:33:64:39:2d:6f:
17:aa:75:7c:21:97:c0:f7:c2:e7:15:e3:79:86:73:
86:cf:c1:ed:02:fb:ae:db:50:59:22:8f:fb:c7:e0:
b6:d1:df:5a:33:27:4e:1f:b4:d8:6b:b9:d9:94:8d:
25:9a:c4:ba:a9:90:0d:6e:3d:e9:83:e7:97:3e:43:
7b:20:5e:3e:81:52:8c:7d:cb:7d:f0:48:e1:53:9c:
9c:62:88:25:6c:46:82:ed:a1:6a:54:79:61:50:ca:
7b:e5:38:05:60:48:ef:ed:ae:88:c9:a7:05:43:f9:
ad:ea:df:a1:ad:00:d5:d7:ec:72:e4:1d:80:ea:ff:
18:88:64:1c:02:21:bb:d1:b9:26:fe:d6:91:58:99:
f4:4c:17:a0:39:6f:8e:97:6c:3c:f0:13:57:7b:3e:
e3:bc:b0:34:bd:a9:2c:cc:6b:fc:74:35:48:6f:ed:
ff:bd:e5:ff:52:58:a9:7c:6f:58:65:42:26:09:eb:
c2:d5:4e:e1:60:be:7a:75:58:ca:6a:42:e5:9d:3a:
49:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:DF:D0:40:AB:AF:8E:83:01:3E:0E:4F:9C:6A:78:12:DC:50:D9:4E
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/K9_QQKuvjoMBPg5PnGp4EtxQ2U4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.25.0/24
Signature Algorithm: sha256WithRSAEncryption
45:53:cc:0a:f1:75:35:8d:19:b3:63:60:3b:e2:44:43:13:0c:
1a:c0:52:95:8c:2a:e6:ab:11:2b:1a:3b:a9:eb:a0:3c:08:c1:
97:23:a4:9e:51:f6:d1:fd:9d:b9:26:ba:48:59:d8:0a:b9:bd:
61:b3:6c:d9:e8:56:6f:84:45:0f:dd:16:62:cd:b1:3f:08:f2:
d5:99:eb:82:4b:ba:52:e9:dd:e5:c0:3d:77:bd:89:3a:ee:13:
ad:f4:99:be:c3:bc:32:df:93:a3:38:8a:63:b6:cf:20:bd:16:
ba:c0:c2:f3:be:2a:b3:89:12:a3:b0:e6:06:b4:aa:7d:93:66:
92:ac:52:85:35:34:fc:29:85:a9:5d:92:48:64:90:5a:f8:aa:
2b:07:6e:7b:0d:0e:08:1a:19:df:24:99:53:54:b3:72:13:4e:
41:fe:2f:42:d3:b2:e9:cd:5b:d8:4e:97:b6:4d:92:60:9d:ca:
79:df:8b:fb:eb:82:bf:41:ba:b5:a2:6b:46:d1:d2:22:0c:bd:
b9:fb:e2:62:24:1f:0b:eb:df:c2:34:7a:bb:4b:d6:a9:d0:d1:
12:11:95:90:f9:43:bd:07:9a:70:e9:c2:4a:95:45:ed:bc:8b:
61:c2:3d:53:48:47:95:fd:54:88:d2:b7:05:da:e9:b9:11:9b:
86:5f:1a:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 16:32:08 2026 by rpki-client