Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/qJnVj3Zs2i38NS_GvtNSRBYOWbE.roa
File: qJnVj3Zs2i38NS_GvtNSRBYOWbE.roa (raw, json)
Hash identifier: h7mzOdGL4lo+Kqx9x5P2yddSOacnumyUrjBXBH0gi30=
Subject key identifier: A8:99:D5:8F:76:6C:DA:2D:FC:35:2F:C6:BE:D3:52:44:16:0E:59:B1
Certificate issuer: /CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Certificate serial: 019E68F5E931FC452EBF6511F65A24645E05
Authority key identifier: B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/qJnVj3Zs2i38NS_GvtNSRBYOWbE.roa
Signing time: Wed 27 May 2026 10:23:26 +0000
ROA not before: Wed 27 May 2026 10:23:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41998
IP address blocks: 194.76.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 16:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:68:f5:e9:31:fc:45:2e:bf:65:11:f6:5a:24:64:5e:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b483bc0a71a52d0cf3989522367575959ebdcef5
Validity
Not Before: May 27 10:23:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a899d58f766cda2dfc352fc6bed35244160e59b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e8:a6:35:1a:e2:4a:86:b9:ac:49:26:77:13:
78:17:7d:9a:06:d8:42:62:eb:ec:c1:62:f3:01:a9:
e9:a5:32:f6:2d:af:e9:71:6e:bf:f6:5e:bc:66:97:
09:a7:05:bf:0d:8e:13:29:5d:3a:85:ba:3f:37:3f:
54:3e:1b:83:f9:5f:54:b0:5f:2b:fd:b6:f3:28:1d:
fd:f4:0d:9b:ff:d5:bf:44:90:1b:f6:f0:81:c5:c0:
92:3d:79:bd:35:f9:56:39:a9:14:d7:63:22:8c:e2:
57:28:d0:fc:1b:84:bc:7c:40:94:32:ff:f5:46:aa:
60:08:a3:72:70:9d:73:3a:d4:55:00:94:57:d7:ad:
07:d6:25:04:36:d5:24:67:40:cf:d9:df:99:fd:e2:
0f:03:f3:b0:a9:81:50:dd:c1:86:f6:07:e1:01:a2:
06:46:7e:a5:4e:a4:3c:0a:20:cb:59:3b:15:ce:91:
c7:ff:63:8f:6f:88:83:a8:65:a0:1e:9b:ad:80:11:
c8:8a:fe:4c:1a:81:4b:8a:75:1d:ac:bd:17:61:10:
a2:7c:45:e5:6b:47:24:c9:0b:25:76:10:c5:ec:4f:
bd:78:a6:70:4f:42:7f:98:b9:a8:1c:2c:a8:f6:8f:
7f:58:ba:e7:8a:d3:31:7f:68:7d:60:0d:78:24:75:
f7:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:99:D5:8F:76:6C:DA:2D:FC:35:2F:C6:BE:D3:52:44:16:0E:59:B1
X509v3 Authority Key Identifier:
keyid:B4:83:BC:0A:71:A5:2D:0C:F3:98:95:22:36:75:75:95:9E:BD:CE:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tIO8CnGlLQzzmJUiNnV1lZ69zvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/qJnVj3Zs2i38NS_GvtNSRBYOWbE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3e/f89fbd-5142-4bcc-bab1-994ef87db3a3/1/tIO8CnGlLQzzmJUiNnV1lZ69zvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.76.222.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:63:14:c6:b9:72:d2:5b:c2:c6:b6:96:de:11:12:7f:3f:37:
c5:db:20:3b:23:d6:12:24:e6:61:ae:02:bf:53:d8:79:2e:a9:
d3:3f:d9:ac:12:40:fa:13:14:ef:0a:83:dc:05:ee:42:31:aa:
ef:90:fd:99:08:75:eb:8e:b2:d2:12:9d:b0:76:6d:72:ae:54:
7b:a4:b5:7b:94:3e:0e:f9:e7:8b:e8:9f:4b:b6:85:74:01:9a:
54:05:c7:c6:11:2c:29:39:87:06:5e:93:36:19:94:05:e7:a1:
b9:a4:f2:b4:3f:39:5c:d0:ff:c9:f2:da:5b:b8:c8:bf:8d:7f:
2f:b1:44:aa:17:b1:41:82:c5:b7:70:13:98:ba:98:e3:1d:e7:
2c:39:41:84:7e:0f:c8:50:a5:47:d3:a1:7e:39:fe:0b:25:d8:
ea:6d:63:3c:3c:85:47:d7:a8:13:e4:f3:59:09:3e:9b:5d:f8:
45:d0:cd:af:28:cb:38:0a:e5:bd:03:45:d8:b1:25:c0:81:3c:
19:12:d8:ab:dc:43:af:09:1c:7d:f3:3d:ca:9b:70:16:55:59:
2a:70:19:89:67:e5:41:cc:07:4f:9e:1d:36:f5:02:f5:0c:5a:
1f:0e:4f:b4:bd:3c:1b:ca:e7:ba:98:57:db:14:b5:1d:a2:6c:
fb:09:28:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 00:01:58 2026 by rpki-client