Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/qMO76GFUq-hY40YmP_a09TsI33Y.roa
File: qMO76GFUq-hY40YmP_a09TsI33Y.roa (raw, json)
Hash identifier: Qi8hHlIjIYV89eN37DhURxMC9pA+eWxI7cGfJgzjw+4=
Subject key identifier: A8:C3:BB:E8:61:54:AB:E8:58:E3:46:26:3F:F6:B4:F5:3B:08:DF:76
Certificate issuer: /CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Certificate serial: 019B7C12CB06B91CBBF73C9ABB6C386C9927
Authority key identifier: 47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/qMO76GFUq-hY40YmP_a09TsI33Y.roa
Signing time: Fri 02 Jan 2026 00:19:24 +0000
ROA not before: Fri 02 Jan 2026 00:19:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207674
IP address blocks: 193.26.146.0/23 maxlen: 23
193.26.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 06:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:12:cb:06:b9:1c:bb:f7:3c:9a:bb:6c:38:6c:99:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475360f3a192dcaa1d3d194db64c0254c374bd46
Validity
Not Before: Jan 2 00:19:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8c3bbe86154abe858e346263ff6b4f53b08df76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:af:71:10:a9:d0:bc:02:ec:93:c0:c4:a3:1c:
c3:70:30:8c:07:a3:eb:0a:bd:ea:5d:83:19:45:da:
38:f5:de:98:d9:ef:f0:37:4e:f7:95:c8:f0:74:ed:
d0:74:71:0d:42:dc:8f:ac:86:87:5b:92:1f:b0:d9:
78:cf:97:30:4b:de:1a:0f:28:e2:6a:86:46:38:c4:
c4:fd:5d:bf:d9:ff:27:65:35:49:d0:c0:d2:c8:af:
71:ba:a2:d8:86:d9:54:84:b0:2f:0c:5e:5a:9e:86:
b3:05:a3:dc:f2:9f:1d:d3:e1:16:c8:55:0a:13:08:
63:7a:33:a6:da:04:2b:40:71:ee:8a:e6:59:2b:01:
ae:2a:27:9e:92:b4:95:c0:78:44:f6:6c:2a:b6:d8:
d8:85:f8:5d:4d:25:ef:c1:2a:0e:d5:74:40:36:06:
22:1c:e8:e6:2a:fc:b3:53:f2:a7:00:59:bf:e4:d6:
48:43:51:3d:82:7c:f9:76:62:0f:63:e0:65:2f:8f:
ed:b8:e3:93:56:3a:61:d9:5b:21:49:6a:63:3f:38:
52:f0:c5:0f:80:f9:46:28:83:fd:02:77:90:e2:73:
2a:51:d9:b6:9a:db:1d:7e:70:3c:a2:a1:50:5f:e6:
65:6f:86:77:4a:ab:88:2a:b7:9b:97:ee:2a:98:fd:
99:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:C3:BB:E8:61:54:AB:E8:58:E3:46:26:3F:F6:B4:F5:3B:08:DF:76
X509v3 Authority Key Identifier:
keyid:47:53:60:F3:A1:92:DC:AA:1D:3D:19:4D:B6:4C:02:54:C3:74:BD:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1Ng86GS3KodPRlNtkwCVMN0vUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/qMO76GFUq-hY40YmP_a09TsI33Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/624497-5091-402b-9129-b03ba4ab0c54/1/R1Ng86GS3KodPRlNtkwCVMN0vUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.26.146.0/23
Signature Algorithm: sha256WithRSAEncryption
41:13:87:6b:2a:66:f4:9d:f0:5f:e1:0a:2a:db:85:74:ce:8d:
61:9f:5b:4f:2e:81:8b:c4:df:8d:30:ff:34:f9:51:11:c8:54:
41:7b:0b:16:67:3a:92:9c:03:54:45:0a:4f:a7:9f:be:0f:9a:
37:2b:ae:60:7e:30:37:0d:cb:29:a3:18:db:1a:7a:71:cd:2a:
16:73:99:65:6e:64:0f:9a:40:80:d4:c5:f4:7f:17:38:f8:24:
82:f1:93:da:b2:b8:0e:c3:59:95:29:90:e1:05:f0:94:b8:c9:
f6:79:d9:3b:6e:4d:24:af:d9:ca:b0:e9:99:36:6b:cd:f1:82:
94:0c:ba:0b:28:21:fe:40:68:e8:8d:9b:fb:bc:76:77:2a:56:
e7:ef:9e:bf:dd:28:ee:41:00:0d:68:64:1e:1b:c2:33:d7:77:
f5:eb:47:a0:b5:d3:1f:75:d7:4b:ee:31:31:df:1a:87:e3:dc:
07:7c:c2:86:2d:16:d7:e0:ab:65:3f:fd:e5:65:02:1f:dc:6a:
cd:2b:f1:2a:bb:48:43:45:a3:5b:5f:87:20:97:ec:4f:7d:7a:
dd:5e:e5:05:58:95:af:cc:6a:5e:20:f0:0d:d7:e6:b0:ac:de:
fa:ff:ea:d9:5e:d5:bc:2f:d3:d4:1f:3e:d5:ec:4a:27:cf:60:
36:a5:94:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 15:46:30 2026 by rpki-client