Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/Ql8xsxKHTv2P-6DoS4lasiauYEc.roa
File: Ql8xsxKHTv2P-6DoS4lasiauYEc.roa (raw, json)
Hash identifier: 9J9e3aQn8b+eEnu+rIh9ZMRWB9y70hUV1u1jPutEvuw=
Subject key identifier: 42:5F:31:B3:12:87:4E:FD:8F:FB:A0:E8:4B:89:5A:B2:26:AE:60:47
Certificate issuer: /CN=9fc7732292962fc9c52c6416ced67665bc2b631e
Certificate serial: 019E2E41AD3D740B186BD65B4A9357BFB413
Authority key identifier: 9F:C7:73:22:92:96:2F:C9:C5:2C:64:16:CE:D6:76:65:BC:2B:63:1E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n8dzIpKWL8nFLGQWztZ2ZbwrYx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/Ql8xsxKHTv2P-6DoS4lasiauYEc.roa
Signing time: Sat 16 May 2026 00:48:36 +0000
ROA not before: Sat 16 May 2026 00:48:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197871
IP address blocks: 2001:678:d44::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/n8dzIpKWL8nFLGQWztZ2ZbwrYx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/n8dzIpKWL8nFLGQWztZ2ZbwrYx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n8dzIpKWL8nFLGQWztZ2ZbwrYx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 21:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:2e:41:ad:3d:74:0b:18:6b:d6:5b:4a:93:57:bf:b4:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9fc7732292962fc9c52c6416ced67665bc2b631e
Validity
Not Before: May 16 00:48:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=425f31b312874efd8ffba0e84b895ab226ae6047
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:b7:bc:fb:06:a7:36:0f:61:ba:4b:2c:f4:29:
ca:eb:db:13:0e:4a:5c:0f:62:65:eb:d1:11:09:54:
14:d8:27:a7:d0:fb:31:fc:df:00:f1:10:d4:9f:de:
de:41:09:87:e7:d5:f1:74:ad:91:9e:01:1c:23:47:
84:58:b4:c0:7e:bc:53:20:eb:01:f8:b8:2a:35:9d:
ca:9e:e8:07:cf:1f:51:93:b4:21:16:83:a8:90:64:
23:11:41:fa:e0:8d:35:af:8e:0b:ef:23:9a:62:d5:
65:90:ef:86:fd:b7:39:d9:da:e0:b6:0b:18:be:77:
ac:33:89:28:6f:68:1b:6d:75:5f:b3:38:c6:d7:64:
a2:ab:3b:c8:63:45:f4:35:57:2e:57:f0:46:6a:e1:
9e:6b:fa:3e:34:c8:4c:6d:3d:40:77:4b:5d:e8:00:
cc:35:42:dd:78:b3:75:77:08:19:d3:f2:b3:6c:08:
02:45:ce:c5:ae:cb:5c:93:97:5d:ed:a1:15:16:e6:
1b:a8:bd:32:19:37:15:59:54:f2:bf:1a:a3:25:99:
8b:1b:55:de:fe:38:21:ba:ae:e9:81:bf:ee:ca:8f:
fe:9c:cf:b1:47:24:3e:cc:0a:e8:b6:ce:3f:cd:2a:
7a:15:ce:ce:fe:0e:1c:78:ae:a1:e7:29:6f:a5:f6:
ee:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:5F:31:B3:12:87:4E:FD:8F:FB:A0:E8:4B:89:5A:B2:26:AE:60:47
X509v3 Authority Key Identifier:
keyid:9F:C7:73:22:92:96:2F:C9:C5:2C:64:16:CE:D6:76:65:BC:2B:63:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n8dzIpKWL8nFLGQWztZ2ZbwrYx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/Ql8xsxKHTv2P-6DoS4lasiauYEc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/4bdf30-f2a8-44ff-8737-a472fb2d4c90/1/n8dzIpKWL8nFLGQWztZ2ZbwrYx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:678:d44::/48
Signature Algorithm: sha256WithRSAEncryption
54:10:a8:a7:73:1b:6d:24:0d:a5:f9:81:2b:19:43:cc:bd:34:
13:dd:b4:dd:0f:7d:db:cb:2e:d5:ee:21:00:a1:e4:f7:1f:84:
f0:c9:5b:8d:3d:e3:91:cb:2b:24:b7:dc:84:aa:ce:7e:84:69:
d3:04:d0:ec:bb:cb:47:13:b7:bd:20:60:10:f9:43:06:6f:3e:
29:6d:f7:0d:83:8f:bc:de:75:cb:45:b0:ff:1f:cb:8a:aa:ca:
cf:60:9c:e5:f9:09:09:26:6c:35:1d:f4:0d:cd:86:fa:b8:85:
58:9b:22:cc:c4:17:37:18:23:11:29:2a:dd:bb:c9:4e:c7:31:
d2:ad:46:6d:58:21:aa:75:42:ca:1d:8c:8c:2f:ae:f0:bf:35:
6d:62:dc:46:fa:b3:7a:b5:1c:7d:02:00:1d:33:59:b1:18:fb:
a8:97:15:99:25:54:ff:bf:85:fb:45:6f:f3:e2:0f:53:d2:34:
da:2c:94:4d:65:c9:7a:1d:d7:ef:f8:7a:f3:e1:1c:09:63:d2:
74:1c:79:60:2b:23:d0:11:47:23:50:fe:69:ab:a9:cf:d0:9e:
5f:51:17:eb:cf:84:18:90:39:77:e0:d2:83:8e:71:29:99:c2:
5a:bd:58:38:84:67:b3:4c:0d:b7:b4:b4:5c:ed:7f:87:7b:f8:
f6:de:43:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 07:06:08 2026 by rpki-client