Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/qxChhloFeAAfPXrErBGVS4Zq-Wg.roa
File: qxChhloFeAAfPXrErBGVS4Zq-Wg.roa (raw, json)
Hash identifier: IO6Zyi9Y6wGlhi5O3h37NWdJlhnnR0c96B57Ye5sRPc=
Subject key identifier: AB:10:A1:86:5A:05:78:00:1F:3D:7A:C4:AC:11:95:4B:86:6A:F9:68
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019C1DAEA58B1D6C4C949E3CDF1FFEB19EF3
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/qxChhloFeAAfPXrErBGVS4Zq-Wg.roa
Signing time: Mon 02 Feb 2026 09:28:30 +0000
ROA not before: Mon 02 Feb 2026 09:28:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 216402
IP address blocks: 2a12:bec4:14a0::/48 maxlen: 48
2a12:bec4:14a1::/48 maxlen: 48
2a12:bec4:14a2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 14:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1d:ae:a5:8b:1d:6c:4c:94:9e:3c:df:1f:fe:b1:9e:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Feb 2 09:28:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab10a1865a0578001f3d7ac4ac11954b866af968
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:48:40:ef:dd:fe:5b:c1:7e:3a:80:34:06:36:
bd:67:4e:72:39:83:3e:6a:b7:08:ea:53:0a:bd:b2:
2c:40:ad:e1:1c:4c:58:e5:69:1f:fd:03:44:38:9a:
32:65:1b:2c:f3:41:f0:08:96:8b:3f:56:b1:ba:34:
b4:7d:b2:e0:5f:90:59:ad:82:c1:51:a0:8b:99:10:
73:ed:a5:73:9e:67:73:0b:d2:13:ec:89:ea:fc:0d:
c1:ed:59:dc:61:1c:1c:c3:7a:d6:26:4a:3d:d0:23:
47:61:9a:3b:84:64:90:55:de:39:52:f3:4a:65:88:
b2:1d:b3:be:e2:fc:e7:05:31:e2:38:aa:63:55:85:
72:f2:3b:26:a3:3e:40:c2:49:92:56:c5:1d:1a:98:
27:3e:4a:ff:2f:1c:9c:dc:0f:06:04:89:4c:0a:33:
7a:f9:a1:5f:ec:b0:ea:99:d8:41:c0:de:59:d6:d3:
4e:ab:70:5a:18:60:15:fa:86:a9:1a:61:b3:da:c8:
cb:0a:7f:07:08:9b:e6:1e:ef:a7:db:89:c1:9c:ac:
5d:a4:0b:61:37:65:c9:a0:92:93:f5:04:c3:85:49:
91:99:ce:63:e6:36:86:e1:00:aa:27:18:72:af:cc:
94:64:91:97:a0:17:9b:f9:8c:61:45:eb:80:2c:9f:
af:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:10:A1:86:5A:05:78:00:1F:3D:7A:C4:AC:11:95:4B:86:6A:F9:68
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/qxChhloFeAAfPXrErBGVS4Zq-Wg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:14a0::-2a12:bec4:14a2:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
40:55:b6:cb:5c:d2:10:83:2b:79:33:47:71:67:7e:86:d1:6d:
d8:e1:38:94:fd:63:ed:d7:5a:63:1a:e7:49:ac:74:24:ac:4c:
bb:ff:31:fa:82:8b:e8:4c:47:29:d6:1f:f6:1c:4e:16:3f:3d:
11:b4:d8:fd:e7:9c:7c:25:dc:84:15:88:17:f6:03:53:b7:10:
24:57:de:75:ed:2e:3a:0c:7c:65:d8:27:c7:63:b6:3b:02:41:
43:c6:d3:c8:52:f7:84:22:af:d5:80:7d:cf:0c:e7:1a:8d:c1:
57:c2:01:1b:b8:f4:b8:2f:60:07:38:1b:2e:c7:4b:47:e7:e4:
33:fa:91:7f:c0:db:32:34:d8:3b:69:65:84:a6:0b:81:d9:79:
5a:f9:80:2f:d2:fa:c9:a1:50:ac:9e:43:d3:61:3e:26:44:39:
da:93:e9:ce:03:85:f5:bf:5f:63:e2:4f:70:59:0a:61:de:59:
d6:bf:a6:f1:5c:74:ba:74:8a:30:87:45:f7:ed:c2:dd:a9:ec:
7f:b3:60:13:b7:89:db:0c:23:81:22:cf:3e:36:b2:f1:eb:4a:
ca:73:f3:ae:87:90:9d:e9:27:5b:d3:ab:cb:da:c6:73:92:13:
c6:3f:44:31:05:9b:98:eb:b1:5d:ac:be:5d:1c:fa:c5:1e:5b:
aa:35:09:7f
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:37:50 2026 by rpki-client