Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/cQX5eN2lbhVeUxzV1wzLUCHBV1E.roa
File: cQX5eN2lbhVeUxzV1wzLUCHBV1E.roa (raw, json)
Hash identifier: ngo5lXOLVy6FLpzOmrGOPzq70ozWmBI0PvKNWkY2CdE=
Subject key identifier: 71:05:F9:78:DD:A5:6E:15:5E:53:1C:D5:D7:0C:CB:50:21:C1:57:51
Certificate issuer: /CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Certificate serial: 019C4C9EAB532489E25D9C8652FB424FF7F4
Authority key identifier: 9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/cQX5eN2lbhVeUxzV1wzLUCHBV1E.roa
Signing time: Wed 11 Feb 2026 12:13:12 +0000
ROA not before: Wed 11 Feb 2026 12:13:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20546
IP address blocks: 212.29.0.0/24 maxlen: 24
212.29.25.0/24 maxlen: 24
212.29.30.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4c:9e:ab:53:24:89:e2:5d:9c:86:52:fb:42:4f:f7:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f69bdf9bbd2a4597e26ce20bfe138624cad33dc
Validity
Not Before: Feb 11 12:13:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=7105f978dda56e155e531cd5d70ccb5021c15751
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:43:e9:ae:81:f0:96:db:63:c7:c4:9f:93:91:
81:c4:07:f9:6e:3c:c0:6a:75:47:35:1f:1d:53:96:
ee:46:00:35:48:00:19:f6:47:bb:b6:39:07:9c:01:
06:d8:bc:74:78:a4:04:0a:ca:f0:b0:39:71:bc:2c:
2b:23:1a:78:52:5a:72:e9:67:ed:c2:7f:8f:26:48:
3a:dc:4f:82:0a:c6:d0:08:4c:b2:0a:d7:c8:58:21:
19:cd:c6:64:46:f0:40:16:39:83:0a:53:ba:44:7e:
88:cd:f9:f2:8c:ca:4e:97:63:f8:68:29:68:e1:47:
7d:fc:28:44:ff:1b:d8:92:1e:91:a8:af:57:60:bd:
3f:54:5b:e4:4e:45:88:e1:e4:ad:44:e5:4e:50:cd:
10:38:16:c5:f5:20:8f:84:31:4b:18:73:b6:58:25:
5a:4b:45:6f:49:09:f4:40:83:80:54:ae:7d:0c:89:
a8:86:8d:a9:22:18:37:3b:55:bd:2d:8b:f2:84:11:
ce:c5:22:c4:ea:b0:e7:b7:ba:b9:a8:cc:56:c3:22:
f8:0d:fc:a4:70:de:3e:01:12:16:63:b5:94:8b:78:
ba:2e:46:f3:92:39:fa:7f:bc:c1:31:76:ce:4a:12:
89:3f:76:ba:65:b4:f6:2b:ca:b6:66:95:51:77:53:
f8:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:05:F9:78:DD:A5:6E:15:5E:53:1C:D5:D7:0C:CB:50:21:C1:57:51
X509v3 Authority Key Identifier:
keyid:9F:69:BD:F9:BB:D2:A4:59:7E:26:CE:20:BF:E1:38:62:4C:AD:33:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n2m9-bvSpFl-Js4gv-E4YkytM9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/cQX5eN2lbhVeUxzV1wzLUCHBV1E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/cdbd0a-68ec-487d-8fea-619281380bc2/1/n2m9-bvSpFl-Js4gv-E4YkytM9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.29.0.0/24
212.29.25.0/24
212.29.30.0/24
Signature Algorithm: sha256WithRSAEncryption
10:b6:d2:c0:3a:9b:8f:b0:d9:d1:5c:2b:ea:8e:a9:f7:e0:d8:
44:b9:be:f7:a7:fa:23:ce:2d:c1:c7:a5:e3:e7:6b:2b:2f:4b:
ad:29:b8:2d:07:bf:34:af:f6:98:55:d3:2d:af:91:c2:82:64:
c4:cd:b2:ca:ec:84:f2:73:e6:26:ab:63:64:74:3a:a5:3d:a6:
81:48:b7:67:f2:5a:6d:5d:6b:90:ea:a0:68:e7:84:9b:69:88:
aa:57:5f:99:3d:d9:b6:80:9d:6d:37:8b:56:b7:9d:d9:85:a4:
9f:d9:2b:e3:fb:cb:0f:7e:91:20:5f:3d:e6:e9:9a:22:31:01:
47:f4:86:f3:0a:19:64:3d:5b:bc:33:3e:5d:47:2e:4a:01:b7:
5c:4f:ec:2f:8f:93:88:a7:46:01:b6:2f:d4:0a:47:b1:49:dc:
57:6b:cc:50:b0:7d:77:ee:92:f8:e2:f4:43:aa:69:4b:a3:ec:
af:76:f1:27:88:24:43:47:6d:46:a1:b9:d1:09:2a:e2:92:9e:
6c:b6:fd:c0:0d:74:88:4b:27:19:1d:70:bc:9e:4f:d9:59:49:
bb:cf:77:86:5f:24:6d:b6:0c:3c:4e:e5:63:1c:55:6d:93:93:
09:4a:9a:ef:d2:41:07:ee:22:ea:99:f3:23:4a:4c:f1:b0:18:
c9:60:47:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:50:26 2026 by rpki-client