Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/qfrTAz0tdBXKUW-xa1sqx-tHKvc.roa
File: qfrTAz0tdBXKUW-xa1sqx-tHKvc.roa (raw, json)
Hash identifier: 5GFDYio6xhM0zB4I8wFB9tG6x/eh6q56v9cYBHFd7V8=
Subject key identifier: A9:FA:D3:03:3D:2D:74:15:CA:51:6F:B1:6B:5B:2A:C7:EB:47:2A:F7
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019EBC8A7774CF2DFC7A46E7E4953CFF6054
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/qfrTAz0tdBXKUW-xa1sqx-tHKvc.roa
Signing time: Fri 12 Jun 2026 15:54:11 +0000
ROA not before: Fri 12 Jun 2026 15:54:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215730
IP address blocks: 89.126.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bc:8a:77:74:cf:2d:fc:7a:46:e7:e4:95:3c:ff:60:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: Jun 12 15:54:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9fad3033d2d7415ca516fb16b5b2ac7eb472af7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8e:2b:28:81:7f:4d:a8:14:ce:e9:9a:7d:ab:
23:95:d8:8a:b2:bb:98:7d:51:f8:51:d2:d9:b1:bb:
eb:04:32:f8:3d:5f:6d:b8:2b:1d:70:ad:73:20:1d:
e2:e5:91:53:44:6e:5a:81:2f:34:9e:c1:48:da:f6:
a4:4b:e6:ca:79:5b:6d:0e:9a:f0:c2:0d:db:f9:a5:
b5:89:c0:02:ec:59:bf:78:d3:04:b8:fa:b0:c7:67:
85:b1:98:57:db:42:3c:88:49:b3:9d:39:5e:be:a1:
84:78:c7:1c:1d:95:58:96:a8:42:b8:8d:4f:36:92:
27:03:8a:d5:20:ea:66:0b:a2:78:1e:58:ee:40:3e:
bd:11:89:12:ed:ff:14:cf:72:56:2f:d9:d4:4b:42:
25:7b:e7:c9:c9:4a:b0:0d:76:36:7a:6d:e0:f8:f8:
17:26:64:bc:57:d5:cd:5e:ab:8d:44:5a:61:bb:1f:
41:f4:0c:54:91:aa:89:35:2b:7f:2b:88:39:57:f9:
b9:50:bc:7f:11:12:b4:d2:c5:1d:83:3b:61:77:42:
83:b0:61:66:3c:d8:72:c2:27:e3:80:02:92:30:99:
36:4a:52:3f:a6:02:78:f5:c7:e2:64:1f:28:3c:5d:
e0:ea:3e:22:bf:e2:94:76:0b:1b:46:41:89:1e:fb:
61:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FA:D3:03:3D:2D:74:15:CA:51:6F:B1:6B:5B:2A:C7:EB:47:2A:F7
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/qfrTAz0tdBXKUW-xa1sqx-tHKvc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.126.226.0/24
Signature Algorithm: sha256WithRSAEncryption
64:a0:f7:dd:65:4a:03:71:d8:1d:e8:93:b5:79:42:55:7e:dd:
eb:03:ce:48:ca:bc:1b:45:00:4a:d9:2f:ca:a3:e6:05:c9:d3:
91:54:d9:2f:ad:a6:54:cc:56:14:42:62:85:a3:41:0a:5c:1a:
cb:6f:7c:73:a2:03:55:4b:87:23:a9:39:34:69:82:e9:86:55:
7d:55:9a:33:94:b1:aa:1e:d5:70:95:6d:2e:d7:a2:b1:6c:c4:
22:06:d8:d2:27:ca:92:96:c4:47:de:58:7f:22:14:b6:b3:69:
43:6e:c5:9d:ef:6b:ec:32:d5:ed:24:da:86:cc:b3:f0:26:c0:
b5:78:8f:c2:c0:6d:a9:2f:76:f5:f2:08:03:8c:87:3a:aa:3b:
4f:b3:23:67:aa:68:d8:79:c0:c8:d1:62:97:4a:88:93:f2:d8:
77:2e:ca:4e:c8:b7:fa:9d:99:00:d8:64:3b:f3:0d:b4:67:ed:
41:bf:2b:94:a5:8c:3f:82:ee:7e:8f:c2:f4:ee:db:bc:a9:99:
71:ee:f9:72:a0:06:53:a7:2c:1e:1f:46:08:dc:72:03:fe:f8:
8c:e9:fc:37:78:53:09:14:e4:5e:81:11:67:48:83:20:d1:20:
15:6a:3e:c1:3d:1e:e1:08:6b:bd:08:81:89:01:99:50:ac:6f:
58:09:d2:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 14 01:24:21 2026 by rpki-client