Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QpnqJQ3bdBrCWsBMfXFd09rBmCU.roa
File: QpnqJQ3bdBrCWsBMfXFd09rBmCU.roa (raw, json)
Hash identifier: YP9w8kgGDIZO3aW6DCaxRaieRHWfJq0yKayFWtp6vkk=
Subject key identifier: 42:99:EA:25:0D:DB:74:1A:C2:5A:C0:4C:7D:71:5D:D3:DA:C1:98:25
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A19D975B598C9F71FA0C0D5695A995C554
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QpnqJQ3bdBrCWsBMfXFd09rBmCU.roa
Signing time: Mon 02 Nov 2026 18:48:24 +0000
ROA not before: Mon 02 Nov 2026 18:48:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 26548
IP address blocks: 217.60.20.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Nov 2026 15:25:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:97:5b:59:8c:9f:71:fa:0c:0d:56:95:a9:95:c5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Nov 2 18:48:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4299ea250ddb741ac25ac04c7d715dd3dac19825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:1c:77:57:02:5e:db:0b:f1:cc:07:71:5a:75:
97:03:ff:61:c7:2b:45:cc:83:e9:18:b7:90:f6:05:
5d:43:e9:b6:bd:76:a4:49:26:b9:6b:8a:9a:6a:5a:
4f:8d:63:a4:87:5e:64:a6:cb:81:40:07:d5:3c:c8:
82:d3:c7:61:ee:89:23:68:7d:da:40:12:97:05:d9:
e7:e7:b1:b4:4d:4c:c6:a5:b8:e8:84:85:5b:c6:fd:
1c:2f:0c:70:f0:14:65:b7:da:87:d3:b9:9d:41:4b:
70:79:1d:59:17:db:74:dc:86:c1:53:3e:4d:49:c5:
7f:57:a7:53:fe:ad:84:72:48:a6:e9:19:6a:db:bf:
ee:73:81:f7:a6:2f:8b:64:ce:e9:50:78:a8:7b:fa:
b6:7e:ed:00:7f:3c:b3:d5:73:8f:d8:34:b4:fc:56:
03:35:4e:97:00:f8:64:26:27:7d:66:b3:44:ee:27:
ad:3a:19:fd:ba:2a:a3:3b:a0:8f:80:6b:4d:83:c4:
53:39:65:b2:ca:76:74:83:e8:64:53:d9:f1:b2:6e:
35:b0:7c:41:1f:67:92:4e:f8:e2:c4:c7:16:dd:5f:
0e:42:ab:5d:1f:a1:81:58:77:dd:66:3a:30:42:aa:
a6:61:f7:a3:9b:8a:de:83:98:0b:64:cd:50:25:8f:
4f:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:99:EA:25:0D:DB:74:1A:C2:5A:C0:4C:7D:71:5D:D3:DA:C1:98:25
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/QpnqJQ3bdBrCWsBMfXFd09rBmCU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.20.0/24
Signature Algorithm: sha256WithRSAEncryption
76:b1:3c:7d:76:e2:1f:38:f6:97:3e:90:9d:c1:60:5a:a3:8c:
8d:0d:54:61:c8:59:04:e7:23:9e:b7:d7:c3:85:c3:c0:1a:7d:
66:ff:31:74:96:bd:eb:2a:c6:82:9f:83:57:3a:7f:b4:22:2f:
7c:15:ab:96:a5:8d:03:fd:0d:2b:09:f2:43:dc:4a:b4:26:49:
73:81:8e:fc:73:5a:47:f0:e9:cf:71:06:fa:a6:8b:58:11:b9:
69:2c:29:6e:18:30:56:44:38:c3:24:0f:ae:de:f3:7c:9e:8c:
1c:6a:2f:b9:2b:5a:6a:3c:3b:b0:d5:93:fd:4f:db:7d:ec:bb:
e7:e2:91:53:b5:63:19:68:a8:e8:e0:57:66:91:4b:84:7a:41:
f8:be:99:69:5a:71:33:8e:f8:47:c2:4e:2f:a8:1a:11:b5:89:
2b:45:06:fd:4d:cb:24:78:f2:a4:24:d1:1a:84:bc:dd:8f:ee:
88:61:ec:20:e6:35:b4:b6:8f:04:e9:ee:c6:07:03:60:e8:f1:
b9:9f:3d:d5:5f:9a:13:6a:2f:e5:b6:bb:4e:81:d9:c4:28:0b:
fa:da:72:e1:6e:52:a2:32:c0:19:a7:ab:8f:d2:b5:04:0d:e0:
88:75:64:b6:89:9b:24:d2:8a:fc:78:40:2c:49:9c:77:3c:0b:
d9:69:2a:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 10 02:37:53 2026 by rpki-client