Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/q_lN0AMsr2Qj0y4K_NZe2rjNBPg.roa
File: q_lN0AMsr2Qj0y4K_NZe2rjNBPg.roa (raw, json)
Hash identifier: C6pfCVwE4cQONMTXJ4xVp576Td1nh/4UsOPJ8M0ylXo=
Subject key identifier: AB:F9:4D:D0:03:2C:AF:64:23:D3:2E:0A:FC:D6:5E:DA:B8:CD:04:F8
Certificate issuer: /CN=894928a39627cd5ee5f975bd897c2d775ab29940
Certificate serial: 019E873A04DDFDD8B12E706AD870FF23A8C2
Authority key identifier: 89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/q_lN0AMsr2Qj0y4K_NZe2rjNBPg.roa
Signing time: Tue 02 Jun 2026 07:26:26 +0000
ROA not before: Tue 02 Jun 2026 07:26:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142165
IP address blocks: 149.226.132.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 05:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:87:3a:04:dd:fd:d8:b1:2e:70:6a:d8:70:ff:23:a8:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=894928a39627cd5ee5f975bd897c2d775ab29940
Validity
Not Before: Jun 2 07:26:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abf94dd0032caf6423d32e0afcd65edab8cd04f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:7a:b4:bb:0f:f6:32:af:b9:52:e2:9f:c4:91:
a1:96:ed:5d:31:1f:dd:ff:bd:40:75:87:e6:5b:fd:
38:05:57:24:4c:6c:0b:75:0b:ac:d6:36:4e:35:de:
a4:bc:29:b0:f7:82:3c:f2:89:f3:0a:33:ff:6e:74:
a0:f0:13:b3:dc:8e:64:be:56:e3:93:bc:12:71:20:
36:39:e2:b5:25:dd:1f:1c:ce:5b:74:53:24:b9:9c:
7d:30:2e:47:2d:ef:c3:ff:c6:be:62:df:5b:3f:4c:
f8:65:f9:ce:61:a3:bc:52:26:f0:fb:f5:29:76:6b:
28:e0:38:e2:11:cd:36:e2:d6:69:db:82:cf:ca:d3:
ef:ff:bd:3a:c7:92:5a:6d:02:d8:66:fa:00:d1:eb:
13:33:ad:a3:2e:b0:e6:5f:6c:b9:15:c6:67:97:08:
57:62:c2:34:cd:48:c5:de:ec:36:ef:b6:af:45:ea:
11:8c:45:89:e1:91:e3:d6:8d:60:fd:65:d4:5d:e0:
41:cd:d0:8c:b3:a0:aa:67:33:19:5d:8b:94:8b:5a:
55:37:6e:a8:15:7b:c8:1e:cd:b6:20:d0:20:93:6b:
ab:7a:f6:af:84:47:02:b5:82:6d:a8:fd:78:e9:01:
41:2f:ff:4b:4a:29:86:fb:9a:05:2f:3b:35:4b:f2:
f1:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F9:4D:D0:03:2C:AF:64:23:D3:2E:0A:FC:D6:5E:DA:B8:CD:04:F8
X509v3 Authority Key Identifier:
keyid:89:49:28:A3:96:27:CD:5E:E5:F9:75:BD:89:7C:2D:77:5A:B2:99:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iUkoo5YnzV7l-XW9iXwtd1qymUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/q_lN0AMsr2Qj0y4K_NZe2rjNBPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/69c7d1-c43d-4bcd-8e6a-1593d4045cbc/1/iUkoo5YnzV7l-XW9iXwtd1qymUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.226.132.0/23
Signature Algorithm: sha256WithRSAEncryption
15:45:bc:5d:eb:3e:9d:f1:a8:f4:2e:44:b0:95:78:31:50:aa:
57:3c:ec:09:63:37:3e:b5:6f:3a:0a:ce:f7:13:f2:79:51:b3:
21:69:7e:33:e5:f6:e5:15:9b:4b:a0:89:66:fa:30:03:e3:34:
d4:2e:4b:4e:fb:91:a2:a3:a9:2c:6b:e3:4e:dd:69:2f:4b:f9:
4b:59:73:1d:b1:98:ab:3c:dd:0e:13:79:ba:d8:47:75:12:76:
1a:a8:aa:8c:c3:84:aa:0c:c5:21:96:9d:9d:5b:c4:0e:b8:74:
60:ce:c0:75:70:0b:9a:ea:0f:91:2b:96:eb:65:41:e7:9b:12:
28:0a:ca:74:84:3f:df:cc:98:0d:2f:6a:62:b4:12:fd:ce:43:
6a:51:3c:bd:32:40:53:a3:8b:35:c1:3b:3d:11:ab:38:f5:ab:
a6:e7:f4:22:16:8d:bc:22:59:89:9e:f9:fb:ea:51:41:7a:04:
4f:78:e5:64:33:16:f0:e6:ad:89:c8:fb:e3:b6:fb:e8:12:43:
c5:e6:a3:03:38:73:95:08:6d:7f:59:b5:30:16:2d:2b:29:56:
96:6a:43:b9:3a:6e:b5:35:45:85:70:53:19:c5:0d:2c:a1:f9:
4c:8f:0f:32:e2:b5:bf:a7:16:4d:e2:fe:ff:3a:49:7c:0a:7a:
9a:dc:50:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 12:55:48 2026 by rpki-client