Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/qOFOTIgtuWmyB3nB5uXsKSpLMgQ.roa
File: qOFOTIgtuWmyB3nB5uXsKSpLMgQ.roa (raw, json)
Hash identifier: idpYFROGGssNesfbXU+Tb9v+iJ5WAj2dIKhbReaZJHc=
Subject key identifier: A8:E1:4E:4C:88:2D:B9:69:B2:07:79:C1:E6:E5:EC:29:2A:4B:32:04
Certificate issuer: /CN=24da068248f684a5ae5d979c96782bda2619a664
Certificate serial: 019E853C121F3F50E2E657225018C894B533
Authority key identifier: 24:DA:06:82:48:F6:84:A5:AE:5D:97:9C:96:78:2B:DA:26:19:A6:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/qOFOTIgtuWmyB3nB5uXsKSpLMgQ.roa
Signing time: Mon 01 Jun 2026 22:09:27 +0000
ROA not before: Mon 01 Jun 2026 22:09:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62044
IP address blocks: 2a01:940::/48 maxlen: 48
2a01:940:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 04:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:85:3c:12:1f:3f:50:e2:e6:57:22:50:18:c8:94:b5:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=24da068248f684a5ae5d979c96782bda2619a664
Validity
Not Before: Jun 1 22:09:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8e14e4c882db969b20779c1e6e5ec292a4b3204
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:8b:54:f1:6b:d1:24:ef:fd:92:60:e3:c2:4a:
de:d6:06:65:3e:00:0f:aa:57:8c:7e:a4:63:58:52:
a6:c3:0b:2f:6b:9a:71:48:2f:ef:7e:97:90:d7:b5:
31:1e:7e:90:d1:c3:bc:84:a7:30:f4:3a:60:63:f6:
5f:3c:05:e4:33:51:0e:26:31:c9:5b:27:d3:9d:10:
5a:13:3a:72:6c:68:b2:73:95:f6:6d:2c:4f:3b:60:
16:45:62:9e:3a:46:de:1f:0c:31:6d:11:72:2d:b2:
66:65:46:bb:22:44:1f:0b:4a:d5:38:6e:69:40:d8:
98:61:30:49:8e:c1:05:e2:b6:87:25:4f:2b:4d:f1:
80:0d:a3:2f:5d:e6:5b:23:58:c9:e6:e8:ed:bc:62:
f6:16:84:ed:47:ba:d6:2b:24:4c:4a:f9:dc:1c:95:
71:82:c8:0a:58:39:04:30:c5:bc:72:e1:4c:aa:0b:
ef:8f:22:fa:22:e9:3b:98:03:55:90:c9:a0:51:47:
c8:bb:61:73:38:17:6a:96:31:46:44:33:8e:dd:16:
c7:ec:4a:dc:3a:9f:a0:a8:0c:86:64:06:a4:b3:2f:
12:f0:8e:ca:2f:bf:af:ca:a2:94:f0:28:e6:83:29:
0e:f8:ff:f4:7b:e2:52:0e:8d:ab:85:5e:3f:00:c6:
ca:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E1:4E:4C:88:2D:B9:69:B2:07:79:C1:E6:E5:EC:29:2A:4B:32:04
X509v3 Authority Key Identifier:
keyid:24:DA:06:82:48:F6:84:A5:AE:5D:97:9C:96:78:2B:DA:26:19:A6:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JNoGgkj2hKWuXZeclngr2iYZpmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/qOFOTIgtuWmyB3nB5uXsKSpLMgQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/e60f23-be66-4548-b085-2c760816595d/1/JNoGgkj2hKWuXZeclngr2iYZpmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a01:940::/48
2a01:940:3::/48
Signature Algorithm: sha256WithRSAEncryption
8c:6c:8c:7a:17:5b:37:2f:de:91:fa:f7:22:ff:7c:ec:31:be:
b8:3d:15:44:17:ca:eb:29:de:39:cb:d1:2f:88:66:08:bb:2d:
c3:33:52:b6:17:37:3a:6f:c9:10:b9:02:e8:69:8c:57:cc:8b:
3d:4d:4f:91:ae:38:43:77:3c:cc:0d:35:46:09:b3:bd:71:45:
95:fe:9e:63:01:48:23:2a:35:55:ba:22:3d:34:52:d6:9b:c9:
ec:5c:77:d3:5b:68:55:48:4f:47:44:ee:a3:17:ac:75:8b:8d:
79:7e:1f:d9:af:63:8a:80:98:fe:a2:43:e1:52:43:45:2b:bc:
fd:b5:5e:d1:d3:30:e5:ce:e9:67:49:76:1e:be:f9:95:99:10:
06:04:30:75:af:2b:db:ec:a2:e9:80:4d:89:e8:8d:64:8b:a5:
c8:a8:db:3d:67:0e:56:31:78:90:77:9f:8d:63:e7:5e:5b:77:
bb:35:48:6d:84:32:02:97:cc:29:45:78:8a:6b:22:2c:71:1f:
ac:58:80:82:24:43:1b:c7:13:7e:fe:80:4d:23:ce:1b:6a:35:
25:17:1d:75:2b:54:12:ed:9c:eb:4f:03:ac:5a:70:8b:37:44:
1c:e2:90:97:7d:49:62:1a:e8:97:ba:b8:96:d1:f1:a9:98:12:
ea:56:fe:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 14:45:52 2026 by rpki-client