Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qJaMPtB0uY2_CzLKLqjWuDsOGdw.roa
File: qJaMPtB0uY2_CzLKLqjWuDsOGdw.roa (raw, json)
Hash identifier: RtqC5k+jzcH3Y6M80w+2mgUIV8oL0/mmKUrO/Q9mGjc=
Subject key identifier: A8:96:8C:3E:D0:74:B9:8D:BF:0B:32:CA:2E:A8:D6:B8:3B:0E:19:DC
Certificate issuer: /CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Certificate serial: 01A04A3F8CFD3A34E581562ED8F5FF1C7796
Authority key identifier: 4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qJaMPtB0uY2_CzLKLqjWuDsOGdw.roa
Signing time: Fri 28 Aug 2026 21:21:13 +0000
ROA not before: Fri 28 Aug 2026 21:21:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 142240
IP address blocks: 217.60.92.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:4a:3f:8c:fd:3a:34:e5:81:56:2e:d8:f5:ff:1c:77:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f1b095fab67633c0127d61ff6857864ea6b25c5
Validity
Not Before: Aug 28 21:21:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8968c3ed074b98dbf0b32ca2ea8d6b83b0e19dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:c8:40:e6:fd:92:d3:d1:46:0c:69:44:b8:aa:
f3:0f:21:64:fa:64:e4:05:77:f2:7b:31:f4:b6:36:
21:25:c3:57:cb:1d:c9:ba:8c:b7:fa:c7:73:8d:10:
44:71:61:74:51:bc:0f:6c:e5:67:10:fd:e2:13:9b:
52:95:ea:7d:c5:7e:8f:08:fd:23:6f:96:b6:39:00:
75:43:66:97:63:d5:e1:78:fe:35:22:34:7e:00:36:
f4:d0:4b:14:9c:c2:7e:86:12:2f:f9:41:d9:60:77:
93:60:78:73:7e:63:90:df:36:14:ac:8b:c4:d3:02:
8c:73:b6:01:eb:c1:b4:e3:ba:f2:21:16:4a:c9:42:
21:54:4c:4e:c9:e2:f2:ba:f8:ef:55:39:73:9b:fc:
44:5b:c0:10:77:5d:2e:fa:b7:9f:66:82:4b:c1:9a:
aa:ad:78:16:34:6f:e2:fd:02:de:5f:88:4c:68:26:
49:5e:69:28:eb:c1:64:ba:c4:a7:23:d8:1b:04:0f:
42:86:49:0b:2a:88:9d:bb:e7:ae:bf:a3:61:50:02:
85:c2:dd:8a:49:10:1e:db:ad:c7:ea:0d:28:ed:6d:
98:08:91:f3:11:3b:e7:7b:da:d9:9d:03:17:d9:fe:
f5:b6:a9:a9:f6:bf:31:62:8e:9d:91:92:75:d9:a9:
f3:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:96:8C:3E:D0:74:B9:8D:BF:0B:32:CA:2E:A8:D6:B8:3B:0E:19:DC
X509v3 Authority Key Identifier:
keyid:4F:1B:09:5F:AB:67:63:3C:01:27:D6:1F:F6:85:78:64:EA:6B:25:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/qJaMPtB0uY2_CzLKLqjWuDsOGdw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/511f95-e4bf-43f1-af2f-b811cfcb9fd5/1/TxsJX6tnYzwBJ9Yf9oV4ZOprJcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.60.92.0/22
Signature Algorithm: sha256WithRSAEncryption
3f:13:c6:f0:6f:d3:71:bf:f7:f8:ef:1a:04:b2:c1:42:e9:ef:
e6:81:71:70:51:19:11:30:b8:f3:56:78:3c:fa:05:c6:b5:07:
c2:d7:f0:2c:33:4a:f8:98:64:4d:83:15:fa:37:66:74:ac:25:
09:35:f3:d6:70:d1:49:2c:5c:ef:88:c3:4b:18:fa:86:22:0c:
b3:9b:13:ae:24:33:d8:3b:2a:5d:43:85:7d:86:58:62:e5:43:
cd:a0:fc:34:de:bd:2c:ce:eb:8c:d8:2b:d1:db:22:cc:70:db:
ef:4d:4e:ac:24:14:ee:38:a1:15:0e:3f:f9:06:48:bc:a6:63:
d7:e7:9a:94:fe:66:ef:af:47:5e:27:ef:8a:e5:6d:a4:41:12:
59:a7:f7:5f:97:42:be:53:69:5c:da:91:c8:eb:f8:07:69:dc:
12:f8:de:e0:ce:46:98:a6:27:bd:27:e1:30:58:e6:98:10:db:
d1:b8:73:dc:d1:17:81:35:02:d7:f5:c3:a7:bf:8e:17:de:84:
98:ea:0d:c6:c5:26:40:0b:0f:62:29:5e:19:a9:2d:3d:11:70:
aa:1f:e2:54:2d:22:c3:3e:3c:2e:39:6f:72:41:ba:a4:ce:9e:
04:98:0d:19:f2:aa:fa:11:70:c5:1c:0a:d5:ce:ea:12:b6:ff:
3d:3d:64:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 05:04:47 2026 by rpki-client