Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/QGn7qwBSb-aDCmcB72sRlQjFuqY.roa
File: QGn7qwBSb-aDCmcB72sRlQjFuqY.roa (raw, json)
Hash identifier: viTlkuXOKEHPRGpj/iXhEKABilpBEiqBOa97D8tnSRE=
Subject key identifier: 40:69:FB:AB:00:52:6F:E6:83:0A:67:01:EF:6B:11:95:08:C5:BA:A6
Certificate issuer: /CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Certificate serial: 01A0ABE80FAFF2A8F99747E99BFB7CBBF06A
Authority key identifier: 12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/QGn7qwBSb-aDCmcB72sRlQjFuqY.roa
Signing time: Wed 16 Sep 2026 20:28:27 +0000
ROA not before: Wed 16 Sep 2026 20:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218824
IP address blocks: 62.169.153.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.mft
rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ab:e8:0f:af:f2:a8:f9:97:47:e9:9b:fb:7c:bb:f0:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12be29c956894c49c6d4be0ed98882b90d1bc77f
Validity
Not Before: Sep 16 20:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4069fbab00526fe6830a6701ef6b119508c5baa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:64:cd:c9:49:87:12:ab:67:c9:58:cc:bf:34:
01:ab:dd:f3:a5:0a:18:1a:1a:9e:d0:bf:e3:19:79:
97:a9:0c:55:18:74:c4:4d:b1:00:09:fe:d9:5d:c8:
75:ef:88:03:2e:a6:78:1f:d6:6c:6d:43:c6:7e:5b:
76:8e:83:ca:ba:56:2e:e2:59:e2:bc:ba:5b:e9:d1:
16:0e:3f:8d:e5:cf:21:f6:ae:7d:da:6b:52:3a:bf:
75:be:01:56:18:44:56:31:94:34:bd:5e:34:c3:e1:
bf:58:b0:f5:64:53:83:7c:f4:ba:dd:28:2b:77:30:
ce:d5:1a:06:e8:2b:af:0a:d2:09:0d:7c:3d:ae:62:
97:2a:30:ed:a4:f0:10:9a:2a:5d:1e:c9:a3:ac:21:
c3:db:c6:11:32:ce:90:24:3f:12:e9:28:ef:30:0a:
63:f4:c6:cd:32:54:af:61:94:5b:da:52:61:ac:fb:
34:b7:e9:ce:b2:3f:6d:95:6a:f1:50:30:ea:b0:9f:
af:96:bb:48:e0:58:ed:df:a1:86:4c:8c:44:28:17:
43:4e:3b:8f:f0:80:63:19:fb:ac:d3:f1:98:95:d8:
66:bf:8f:9f:f0:50:58:63:e8:54:c6:da:73:0e:81:
dc:eb:94:80:56:ac:ed:96:1b:a6:b3:19:c3:4d:a2:
ec:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:69:FB:AB:00:52:6F:E6:83:0A:67:01:EF:6B:11:95:08:C5:BA:A6
X509v3 Authority Key Identifier:
keyid:12:BE:29:C9:56:89:4C:49:C6:D4:BE:0E:D9:88:82:B9:0D:1B:C7:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Er4pyVaJTEnG1L4O2YiCuQ0bx38.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/QGn7qwBSb-aDCmcB72sRlQjFuqY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/c2788f-8c8c-47bb-b922-aa6ed4dafb3b/1/Er4pyVaJTEnG1L4O2YiCuQ0bx38.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
62.169.153.0/24
Signature Algorithm: sha256WithRSAEncryption
02:b2:67:3a:4f:0c:aa:5c:4c:aa:8e:2c:a3:3f:cb:08:c5:ad:
54:e7:fa:ed:df:04:72:ff:f4:22:b4:d7:20:e3:c9:c4:3b:46:
e0:fa:cc:0f:4a:8e:e1:e6:aa:90:df:b2:47:5a:b2:8a:fc:2b:
da:0c:24:74:3f:0e:97:09:07:55:97:e0:49:5a:06:17:03:c3:
a0:36:4f:52:0d:b7:4c:5d:36:a6:3f:60:e1:ff:37:b4:8f:a1:
66:05:78:7c:58:e8:f4:ea:25:50:ef:68:f4:e8:a3:01:87:46:
65:c5:0a:64:d4:cf:13:a1:61:0f:49:49:6a:3c:d3:dc:53:ae:
b2:52:c4:0a:d1:58:56:a6:c2:28:9e:66:60:7e:00:b9:f5:5c:
c4:9a:55:47:bb:df:b4:38:a6:67:62:b5:3c:82:b7:2b:8c:28:
9d:82:ec:9d:45:60:90:f7:b5:ae:ab:df:3c:ec:c8:a9:77:63:
ab:26:6e:32:55:75:70:4e:ab:7a:7e:af:a0:55:17:de:8e:bf:
c4:57:71:8c:31:48:30:92:44:4b:6b:5e:ad:17:28:aa:52:99:
83:a4:9b:8a:35:c5:23:7c:ca:97:06:ed:21:37:b1:84:77:0e:
19:de:f6:5e:a4:a1:f5:4f:bf:d2:e0:4c:d0:12:10:91:73:1c:
e8:8f:c5:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 13:26:57 2026 by rpki-client