Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/sqdXQjfm4onO1QiOFsXJu-JeMZs.roa
File: sqdXQjfm4onO1QiOFsXJu-JeMZs.roa (raw, json)
Hash identifier: Qw1x6srQqo+v0XYWJ9z2CM3xz/OxwTMeNmtDU3qoGRM=
Subject key identifier: B2:A7:57:42:37:E6:E2:89:CE:D5:08:8E:16:C5:C9:BB:E2:5E:31:9B
Certificate issuer: /CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Certificate serial: 019C4D940883F8DF7E9F3711AF9544496CD9
Authority key identifier: 91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/sqdXQjfm4onO1QiOFsXJu-JeMZs.roa
Signing time: Wed 11 Feb 2026 16:41:12 +0000
ROA not before: Wed 11 Feb 2026 16:41:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399195
IP address blocks: 150.107.48.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4d:94:08:83:f8:df:7e:9f:37:11:af:95:44:49:6c:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=914aa557c3d3d1e6b7f0525c34cc1d488a5a9294
Validity
Not Before: Feb 11 16:41:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b2a7574237e6e289ced5088e16c5c9bbe25e319b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:e7:71:12:38:40:f1:47:74:0e:af:c3:2a:06:
4d:7a:4d:17:51:bf:49:a3:21:dd:cd:0c:d4:f7:6d:
40:01:23:90:ff:c1:c7:3a:4f:ef:e3:22:74:5d:5f:
27:4c:7e:6a:81:00:d2:9c:41:96:79:04:8c:2b:ce:
07:e9:75:05:15:67:31:15:39:c0:88:49:48:a5:23:
f5:33:9b:00:3d:c4:6c:84:65:31:5d:75:b5:63:e1:
02:ee:a1:28:bf:96:07:46:e8:72:26:97:8e:22:d2:
bc:8d:13:be:91:8f:33:79:76:a0:b1:9a:47:95:d6:
4c:66:bc:f0:35:f0:8f:bf:a0:e0:58:8b:2a:14:8e:
1d:45:d3:21:dd:5d:1d:5f:0f:c8:89:9e:cc:dd:f1:
ae:36:06:3c:ba:3a:50:aa:68:66:f1:9a:8c:57:b1:
18:48:1d:f8:c5:7a:6b:b8:cb:24:d0:8b:5e:cb:bc:
c9:ec:f8:84:54:9d:ce:1f:22:74:a6:76:23:8b:e5:
0d:9b:9b:78:14:2f:fa:69:ef:0e:26:eb:1e:0e:a1:
f6:76:b7:e4:f0:d0:c3:0d:e2:c1:80:a8:c4:3d:f5:
6c:13:4d:75:6f:b0:18:d8:4b:30:85:3c:3b:a8:2b:
f1:7e:53:19:34:d2:8e:18:a7:bb:67:18:84:e7:3e:
10:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A7:57:42:37:E6:E2:89:CE:D5:08:8E:16:C5:C9:BB:E2:5E:31:9B
X509v3 Authority Key Identifier:
keyid:91:4A:A5:57:C3:D3:D1:E6:B7:F0:52:5C:34:CC:1D:48:8A:5A:92:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kUqlV8PT0ea38FJcNMwdSIpakpQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/sqdXQjfm4onO1QiOFsXJu-JeMZs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/db97d0-28f2-4329-b856-4a348e7be441/1/kUqlV8PT0ea38FJcNMwdSIpakpQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
150.107.48.0/24
Signature Algorithm: sha256WithRSAEncryption
75:5b:34:98:a9:58:64:97:85:60:11:bc:e6:c4:de:43:50:56:
59:3a:e4:49:93:19:56:f7:cc:8f:74:60:0f:05:ac:d9:42:da:
f4:3b:41:46:c1:78:18:e1:20:02:e9:aa:b5:6e:0e:e3:7d:1a:
14:79:8c:cd:75:df:60:9c:5d:b9:7e:ca:fa:e0:b8:61:9d:be:
16:a5:37:af:56:3c:07:f9:d4:25:4a:1e:14:42:a3:bb:26:52:
28:a9:de:55:71:41:c1:59:bc:93:d1:96:9c:76:87:f2:22:c3:
bf:19:dd:d3:5a:09:e9:37:56:e2:92:34:0f:2c:f5:70:d5:f5:
b1:16:b2:8e:eb:c2:ee:f0:37:0f:28:f5:db:d0:4d:30:72:60:
0e:bd:7b:5a:bb:a3:61:b6:42:b5:16:c9:b9:7c:f4:78:0e:79:
56:f6:92:81:b8:75:31:fe:7e:d0:c0:89:d4:3f:8e:b2:0b:42:
7b:ae:2f:cd:80:b4:04:c7:ac:49:21:d0:26:97:e8:7a:cb:11:
61:b3:ce:32:ff:8f:0c:fb:6e:f1:b6:d3:54:cb:db:04:87:a9:
9d:c6:54:65:76:d4:93:3f:d3:f3:63:99:b5:2c:cf:97:2d:e3:
0b:9d:85:0a:e0:20:ac:d6:a2:ab:ad:3a:f4:82:04:12:da:86:
1a:75:07:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:09:36 2026 by rpki-client