Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/qNZ0L7aFLI_nkN32KQ_zg4BW-So.roa
File: qNZ0L7aFLI_nkN32KQ_zg4BW-So.roa (raw, json)
Hash identifier: OmK9oafccgMMQCkT534eMgR4xPv3e7+07t/1ADEI7WQ=
Subject key identifier: A8:D6:74:2F:B6:85:2C:8F:E7:90:DD:F6:29:0F:F3:83:80:56:F9:2A
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 01A12006717D06189A4166CBFCBBC5476672
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/qNZ0L7aFLI_nkN32KQ_zg4BW-So.roa
Signing time: Fri 09 Oct 2026 09:37:35 +0000
ROA not before: Fri 09 Oct 2026 09:37:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198831
IP address blocks: 205.234.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 17:37:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:20:06:71:7d:06:18:9a:41:66:cb:fc:bb:c5:47:66:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Oct 9 09:37:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8d6742fb6852c8fe790ddf6290ff3838056f92a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:5a:92:d8:0a:8f:cb:e9:54:c4:44:2e:57:dd:
03:a1:e8:14:21:a7:f1:92:4c:80:97:27:f6:8d:a6:
03:40:14:7e:5c:1e:26:c1:6e:3f:bc:f2:3d:2c:95:
08:47:ea:b4:8b:aa:91:56:8d:df:40:6f:97:00:e2:
60:4e:32:c4:41:6d:b7:3c:20:20:62:77:75:08:1f:
25:10:73:a3:aa:ed:c5:6a:89:83:1c:5c:ca:b7:eb:
82:b6:80:e7:28:3e:5d:d8:c2:f2:67:eb:31:cb:8c:
fa:43:e3:4f:41:2f:ed:ed:c1:76:78:f5:7c:05:76:
18:c2:37:6e:d4:71:0d:c9:fd:5a:96:d1:fb:c4:86:
88:02:90:15:88:56:0a:0a:79:93:6a:84:0f:4d:7b:
b6:a2:fa:ca:c4:bf:bd:73:cf:ef:b8:a0:0b:5f:5b:
75:80:ff:e5:71:3d:c9:39:f7:52:e2:58:c7:f3:6b:
b2:b3:c5:8f:95:ae:8d:78:1e:a8:24:0d:26:cd:41:
f6:44:3c:81:6d:d2:af:6d:43:18:94:bf:35:a7:67:
e1:75:0c:76:64:4c:e0:87:ad:98:5d:37:aa:5f:59:
9a:3d:9d:a8:d3:93:07:8d:6e:7b:75:91:59:16:38:
96:67:db:c3:7e:54:be:f8:9c:8a:a7:d9:39:a1:90:
1c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D6:74:2F:B6:85:2C:8F:E7:90:DD:F6:29:0F:F3:83:80:56:F9:2A
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/qNZ0L7aFLI_nkN32KQ_zg4BW-So.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
205.234.122.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:05:d8:82:c6:3e:76:69:75:15:13:57:3b:46:56:73:52:c6:
dc:e8:b4:d3:fb:f5:93:5b:91:f6:00:14:d6:0b:1b:e2:13:4f:
1e:2a:64:dd:f0:b5:fe:b3:6f:4b:62:65:f8:24:74:7c:f3:8b:
31:ed:2c:d0:a7:81:00:3b:8c:c8:c2:8c:b4:cd:da:d0:f5:77:
27:42:1e:ce:75:1e:ce:63:19:04:07:3b:17:e0:94:47:ad:02:
6a:f6:ad:0b:08:c4:89:4a:23:01:54:d4:ce:4d:47:86:bd:4f:
fd:a9:ba:97:67:33:1a:fc:0b:c1:3f:44:75:29:71:27:38:ec:
41:3b:02:4b:d7:47:da:ed:32:4f:0c:4f:f6:02:50:49:09:56:
8c:2d:f6:2d:64:65:c4:d5:3b:c3:3c:16:9a:0f:7a:c1:47:17:
86:6e:e8:2d:ac:9d:ae:3b:6d:6e:29:7c:f1:c1:43:08:c7:0c:
29:4d:33:bd:ab:1c:ad:03:db:c1:8e:03:05:f3:bd:53:ba:a2:
e4:09:3b:9d:18:e9:29:d6:c6:c7:66:53:54:71:99:e2:75:6c:
e7:7f:80:2c:81:ed:0b:ab:ff:7a:0b:14:a8:7b:33:09:22:2b:
b0:61:e4:a5:34:2f:c0:08:7a:93:6a:e9:3f:7b:8f:a7:56:f2:
9a:34:29:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 04:40:56 2026 by rpki-client