Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/CqjI4xZEaKoR3ZVD6UTJCsw8xz4.roa
File: CqjI4xZEaKoR3ZVD6UTJCsw8xz4.roa (raw, json)
Hash identifier: FOqlEPlc3OzHiMCxxnmni+Z4xjjrux0nAUj5xIZ7570=
Subject key identifier: 0A:A8:C8:E3:16:44:68:AA:11:DD:95:43:E9:44:C9:0A:CC:3C:C7:3E
Certificate issuer: /CN=b05442c4ffe9c1d761e7c569360ead042438f903
Certificate serial: 01A0811DFA41EAC7A478CE34F5893E5BF970
Authority key identifier: B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/CqjI4xZEaKoR3ZVD6UTJCsw8xz4.roa
Signing time: Tue 08 Sep 2026 13:03:40 +0000
ROA not before: Tue 08 Sep 2026 13:03:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50533
IP address blocks: 134.101.64.0/18 maxlen: 18
134.101.64.0/19 maxlen: 19
134.101.64.0/24 maxlen: 24
134.101.96.0/20 maxlen: 20
134.101.112.0/21 maxlen: 21
145.14.224.0/20 maxlen: 20
145.14.224.0/23 maxlen: 23
185.160.248.0/22 maxlen: 22
2a00:17f1::/32 maxlen: 32
2a00:17f4::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:81:1d:fa:41:ea:c7:a4:78:ce:34:f5:89:3e:5b:f9:70
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b05442c4ffe9c1d761e7c569360ead042438f903
Validity
Not Before: Sep 8 13:03:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0aa8c8e3164468aa11dd9543e944c90acc3cc73e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:1d:36:4d:3b:ee:28:53:86:b9:3b:97:8f:1e:
b7:22:9f:e8:30:a2:10:b7:1a:08:ae:3e:ec:95:2a:
f5:b2:31:1d:07:3d:85:40:80:30:31:b2:64:b8:9c:
0c:fd:c5:7b:29:fa:26:90:10:2d:3c:0f:1c:1e:bf:
61:3b:4d:79:e8:a7:7b:30:b0:19:42:ca:ad:2d:55:
2b:17:d7:39:7c:4c:9c:8d:34:60:74:6b:47:f1:69:
38:b9:d3:4f:28:bc:69:da:d4:4a:4c:c3:ce:75:1c:
3f:0a:33:15:ce:b6:18:ca:82:58:53:b6:bd:b0:c2:
34:71:63:70:d1:af:32:b1:7d:6d:e1:3c:0e:8e:22:
0f:cf:c0:9d:af:22:e3:cd:ac:9d:2f:96:82:2b:cb:
c4:88:f8:69:75:ec:6e:b9:2f:a2:8f:66:fa:d6:f2:
bf:60:ba:ed:9c:f2:cd:a2:51:d3:bd:25:6d:ee:8f:
10:c6:d2:f2:56:85:f9:9e:05:dd:6f:d2:1b:16:9d:
bb:1f:3a:dd:9b:a0:91:7e:cd:38:55:79:f1:46:97:
ff:a5:9b:35:5f:82:30:bd:c8:c7:ec:bc:4f:a7:ce:
10:57:dd:09:ec:b1:e0:84:e3:71:de:11:a6:67:4e:
e3:b5:7e:4c:b2:e9:7f:e7:88:b5:57:8e:38:48:85:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:A8:C8:E3:16:44:68:AA:11:DD:95:43:E9:44:C9:0A:CC:3C:C7:3E
X509v3 Authority Key Identifier:
keyid:B0:54:42:C4:FF:E9:C1:D7:61:E7:C5:69:36:0E:AD:04:24:38:F9:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFRCxP_pwddh58VpNg6tBCQ4-QM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/CqjI4xZEaKoR3ZVD6UTJCsw8xz4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/4b77e7-347c-49fa-808b-6ed331f31e09/1/sFRCxP_pwddh58VpNg6tBCQ4-QM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.101.64.0/18
145.14.224.0/20
185.160.248.0/22
IPv6:
2a00:17f1::/32
2a00:17f4::/32
Signature Algorithm: sha256WithRSAEncryption
1e:75:81:61:16:c7:2c:0c:37:36:97:eb:e9:63:f9:15:22:04:
88:44:14:4a:c0:e8:e0:29:5f:eb:5b:f5:a7:3f:2e:20:c4:9c:
84:14:92:cc:af:92:9f:78:0a:d0:0f:9b:b6:d4:ef:3b:c4:a2:
4b:eb:91:f8:2a:db:37:9f:aa:e4:15:e8:d9:5f:e5:c3:83:45:
a9:ba:99:14:a3:89:c7:e4:08:59:9a:ff:43:0f:d7:97:ab:05:
df:d4:97:46:15:e4:e3:87:53:8a:66:fa:51:68:b8:d3:c1:af:
83:dc:7a:53:1b:ff:89:41:f0:b7:39:53:2d:55:88:27:46:74:
68:74:49:3e:63:ad:b9:cd:ea:d7:4d:72:5c:e3:8a:6e:5b:16:
80:91:48:ee:d8:d7:7b:e6:1e:6b:7b:f6:c9:d3:ef:cd:7e:46:
ad:9a:70:41:c9:80:a3:ce:72:d9:99:ef:e8:4c:73:2c:0b:8d:
5f:f7:f5:b6:e2:38:bd:9f:12:9c:27:b5:c7:0e:bc:b1:dc:eb:
e3:2c:c9:9f:03:8d:59:0a:7d:e8:3e:7f:e1:42:24:7c:99:6a:
38:3a:28:f9:b8:aa:7b:54:cb:12:f9:3e:64:d3:3d:6b:5d:98:
1a:f4:89:8b:40:72:72:6e:27:a9:06:2c:71:41:c0:20:8d:51:
2e:20:da:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 10:21:28 2026 by rpki-client