Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/qlVHtidyMtTQ064ypejRJRTrhIs.roa
File: qlVHtidyMtTQ064ypejRJRTrhIs.roa (raw, json)
Hash identifier: 4mWiwniRAL4tXa87dTnfBRs6/ACyraRAiFOgqpNYILY=
Subject key identifier: AA:55:47:B6:27:72:32:D4:D0:D3:AE:32:A5:E8:D1:25:14:EB:84:8B
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 01A0A4EB1EACDD81E45E5319234DCF02BA5C
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/qlVHtidyMtTQ064ypejRJRTrhIs.roa
Signing time: Tue 15 Sep 2026 11:54:27 +0000
ROA not before: Tue 15 Sep 2026 11:54:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44589
IP address blocks: 138.226.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 13:49:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a4:eb:1e:ac:dd:81:e4:5e:53:19:23:4d:cf:02:ba:5c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Sep 15 11:54:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa5547b6277232d4d0d3ae32a5e8d12514eb848b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:a8:ad:cb:c9:26:ff:3a:b6:99:00:05:a6:51:
a4:7d:10:69:79:c1:c5:97:07:2c:1b:26:51:49:81:
f6:02:4a:b5:c3:f6:43:9e:fe:ee:f8:d4:78:f9:99:
a8:45:7c:fb:b9:f3:4d:30:1f:d4:92:bb:18:ad:89:
58:16:7a:cc:35:a4:00:40:85:9c:52:ba:54:ba:9b:
b9:e2:cf:d4:2a:e3:6a:cc:cb:5d:82:5c:c4:8d:48:
43:cc:48:4f:61:8f:72:63:80:08:35:a3:db:f8:24:
fb:d1:bf:99:46:46:5d:c8:79:19:94:73:4d:e7:2e:
a5:71:aa:a7:a2:fb:51:6d:48:53:99:73:d0:c9:37:
cd:04:8f:f0:7d:2d:b3:67:41:66:66:3c:07:00:d9:
ca:27:56:d8:00:53:8b:85:c2:62:2b:c5:e1:c1:22:
f0:90:2c:c0:fd:f1:ac:7c:0b:6a:9d:90:fa:55:e6:
59:ae:a0:38:03:e9:1e:a5:b7:64:af:86:39:ed:b1:
37:ed:b0:fc:d7:26:1e:de:dd:22:cd:13:c8:8a:26:
62:96:ab:eb:27:36:f4:5b:e8:c5:3f:37:49:ed:4b:
a6:ca:c6:a1:ac:c6:86:68:0e:73:f1:2a:6f:08:e0:
0c:ad:8e:de:61:af:27:b5:15:a5:9c:b9:10:10:f1:
18:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:55:47:B6:27:72:32:D4:D0:D3:AE:32:A5:E8:D1:25:14:EB:84:8B
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/qlVHtidyMtTQ064ypejRJRTrhIs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.226.239.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:a7:a6:fd:e7:80:58:26:77:6d:5c:04:ae:fc:0d:26:0d:0a:
05:5e:d8:89:71:71:b7:4e:f5:4b:54:06:ff:23:9f:ac:25:b6:
7d:27:48:48:42:0f:cf:ef:2b:a0:3d:47:73:4b:70:07:2f:a6:
c3:2a:a1:ea:25:49:e4:28:1b:e2:48:b8:84:a8:52:3f:18:e3:
13:0e:8a:d7:3e:a1:f9:e9:2f:3b:05:48:6e:2c:27:e3:5c:fe:
78:cc:58:b4:4d:d0:5c:bf:1a:fd:6f:08:98:80:66:c5:4d:34:
24:03:4d:1c:cd:f8:ff:31:00:1e:2c:6b:83:ab:02:50:b3:3d:
87:50:86:5e:56:b3:bf:e0:0b:a9:dd:97:41:e2:46:cf:be:8e:
59:5c:dd:31:29:2d:1c:ec:5e:51:8e:e5:cf:a2:6d:19:44:86:
ba:97:7d:0a:c8:40:8e:d5:c2:ea:40:ea:1a:c9:9f:68:40:75:
83:86:f9:f5:05:95:39:04:b0:5a:6b:a3:c9:ab:cb:50:4d:c1:
8f:98:06:27:33:b9:e1:93:20:3a:4c:c9:ff:59:7f:06:ff:59:
0b:46:f3:3b:98:82:e6:6f:b6:96:f4:c0:1b:36:09:e9:ed:4b:
47:8b:51:d8:d8:b7:88:1f:8c:af:30:1c:93:4b:2b:73:1a:fe:
6c:9b:8f:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 17:53:50 2026 by rpki-client