Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/rqQ4396KupGXxkjMb9RqqxVFTPI.roa
File: rqQ4396KupGXxkjMb9RqqxVFTPI.roa (raw, json)
Hash identifier: J6cm/D4mJJQiNP2bKHmrMfZfElpGOWFzldy+Wwkzbh8=
Subject key identifier: AE:A4:38:DF:DE:8A:BA:91:97:C6:48:CC:6F:D4:6A:AB:15:45:4C:F2
Certificate issuer: /CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Certificate serial: 019B79ED3295F1A5FC0C1C01ECD3BFA9F254
Authority key identifier: BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/rqQ4396KupGXxkjMb9RqqxVFTPI.roa
Signing time: Thu 01 Jan 2026 14:19:06 +0000
ROA not before: Thu 01 Jan 2026 14:19:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203897
IP address blocks: 185.34.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.mft
rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 05:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:79:ed:32:95:f1:a5:fc:0c:1c:01:ec:d3:bf:a9:f2:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf98e8170959b5e6018f602b3a7487b2d8028106
Validity
Not Before: Jan 1 14:19:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aea438dfde8aba9197c648cc6fd46aab15454cf2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ed:8d:51:b1:34:47:aa:3e:e5:c7:07:df:16:
71:10:c8:f5:b6:8b:58:1a:1a:89:3b:b7:ff:1f:01:
01:10:b4:e3:ca:f0:b0:ac:ed:93:ba:df:77:0d:2a:
ad:14:43:92:08:8f:82:3f:30:ef:8d:f9:c6:77:0f:
0e:8d:6f:de:b3:ab:29:ee:a8:c7:85:1c:b3:e5:d4:
9c:8a:be:d0:f9:b7:e9:3c:65:6f:d4:e0:65:3c:f3:
30:2a:47:48:d8:43:af:3d:01:c9:a6:f7:7a:07:6f:
33:c0:cd:3f:54:ec:f6:48:a5:b8:2f:cb:07:80:b3:
25:38:f7:74:45:39:87:8a:35:ea:a1:80:4a:64:f4:
b9:16:98:57:22:68:70:c3:32:cd:89:3f:6e:ad:48:
ca:1e:91:ae:78:ed:7b:ea:8c:02:2b:f4:0d:83:66:
d1:0b:64:45:2f:ba:a9:60:2d:af:45:d3:d9:6c:1a:
27:ee:80:38:0d:da:2c:7e:c3:42:86:4f:26:06:52:
4e:72:b0:2b:7f:10:65:be:45:f3:9b:55:a5:1f:e3:
4b:fb:97:5e:eb:af:93:54:d8:0e:b2:72:f0:00:bb:
aa:8e:80:4d:9f:b6:7a:04:5b:9e:3a:df:6d:12:57:
16:c8:f8:c5:a8:ad:d8:80:c1:92:8a:bf:31:33:7f:
e4:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A4:38:DF:DE:8A:BA:91:97:C6:48:CC:6F:D4:6A:AB:15:45:4C:F2
X509v3 Authority Key Identifier:
keyid:BF:98:E8:17:09:59:B5:E6:01:8F:60:2B:3A:74:87:B2:D8:02:81:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v5joFwlZteYBj2ArOnSHstgCgQY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/rqQ4396KupGXxkjMb9RqqxVFTPI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/23fb1a-a791-400c-a41a-48ceed5e438e/1/v5joFwlZteYBj2ArOnSHstgCgQY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.34.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:aa:8a:7c:e6:c6:6b:90:06:cd:87:ea:08:b3:eb:a9:59:c4:
33:04:53:32:20:64:b7:0d:60:c4:78:41:63:24:af:cf:de:12:
cc:3e:86:c8:ba:f6:69:bf:2b:16:f9:b1:7b:45:18:d0:62:3e:
4d:2b:0b:fc:cc:39:aa:73:a7:fe:8a:7c:81:a9:52:57:e0:54:
30:18:fd:14:fc:00:7a:3e:78:52:31:fe:5e:08:a4:a3:94:ea:
fd:f7:40:13:e3:5d:0f:66:04:3c:26:18:c8:57:5e:e9:63:20:
90:69:3f:7e:3c:d9:b0:b2:4f:fa:37:de:cc:0d:4d:ac:d7:9a:
68:51:2e:51:54:6b:6a:2b:26:da:00:6d:be:8e:9c:0a:0e:32:
c4:d0:c4:be:09:c3:26:57:d6:78:c1:a5:f1:2c:5f:8e:cd:3f:
c4:41:b4:d3:91:71:79:60:f7:7d:c4:37:ae:83:5e:35:77:b0:
2a:9b:95:ab:3f:e9:eb:62:61:d3:51:cc:56:ab:4f:c0:32:93:
b9:f5:14:84:36:50:80:ae:1c:73:f7:9e:dd:b5:f6:49:07:2b:
e9:aa:23:5d:46:d1:dd:57:6c:d3:3f:a6:a3:b0:38:d0:25:70:
c9:02:33:71:cd:eb:09:28:43:d4:bf:60:1e:58:ef:8b:39:a0:
75:5d:f9:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 14:04:58 2026 by rpki-client