Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/_tQfUv-ZF8l6ECirIU08-QDKATk.roa
File: _tQfUv-ZF8l6ECirIU08-QDKATk.roa (raw, json)
Hash identifier: jyN189Yy9sENguau2gQDFaDGR/1qRo4t+nodcN1wD68=
Subject key identifier: FE:D4:1F:52:FF:99:17:C9:7A:10:28:AB:21:4D:3C:F9:00:CA:01:39
Certificate issuer: /CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Certificate serial: 01A06B436DDE315EFB0B98A3E02DEC84EA18
Authority key identifier: F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/_tQfUv-ZF8l6ECirIU08-QDKATk.roa
Signing time: Fri 04 Sep 2026 07:12:56 +0000
ROA not before: Fri 04 Sep 2026 07:12:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200726
IP address blocks: 185.98.72.0/24 maxlen: 24
2a06:ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 05:59:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:43:6d:de:31:5e:fb:0b:98:a3:e0:2d:ec:84:ea:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f555ba6e2b3db5521dbc7062a58c16dda1b9f22d
Validity
Not Before: Sep 4 07:12:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fed41f52ff9917c97a1028ab214d3cf900ca0139
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:5e:53:7d:5c:81:1b:6a:ad:cd:fd:8d:74:a2:
70:c1:12:a8:70:1e:44:e5:f4:5b:96:57:08:e2:9b:
8d:98:bc:3c:4f:ff:52:9d:df:b1:5e:fd:31:e4:0e:
d5:42:17:2b:63:ba:38:70:5e:40:fe:b5:c5:3b:b3:
1c:77:44:ec:15:97:a2:98:b2:c4:74:23:75:f4:ee:
16:8d:3b:7a:65:ad:15:b7:d4:a4:88:41:db:bd:f5:
b0:5f:da:f6:37:de:da:41:25:ed:7a:9e:95:a0:d6:
a2:17:b1:4d:55:45:93:99:be:6b:b9:69:30:10:b8:
d7:72:9a:0c:47:c2:7f:25:63:52:aa:a6:13:44:86:
f8:26:81:2d:0e:dd:13:c4:8c:3e:7d:b5:53:1b:58:
02:0b:64:0e:7b:63:97:71:e1:06:a8:aa:61:40:45:
73:d4:d6:6f:a2:e7:03:dd:34:3a:ca:00:d9:44:af:
fe:8c:2b:aa:d5:3a:8a:8d:41:bc:ff:60:b6:76:35:
06:0c:7d:93:1a:78:60:61:7c:99:77:41:cd:29:2b:
d8:37:78:e0:63:3c:cb:a1:90:c0:4f:3c:f5:84:f6:
f2:cf:a8:c3:16:74:c3:32:5c:08:f5:4e:cb:76:47:
c7:37:2e:a6:d8:07:06:af:e5:4b:fd:73:76:06:50:
78:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:D4:1F:52:FF:99:17:C9:7A:10:28:AB:21:4D:3C:F9:00:CA:01:39
X509v3 Authority Key Identifier:
keyid:F5:55:BA:6E:2B:3D:B5:52:1D:BC:70:62:A5:8C:16:DD:A1:B9:F2:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9VW6bis9tVIdvHBipYwW3aG58i0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/_tQfUv-ZF8l6ECirIU08-QDKATk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/20eaa9-3620-4bb5-b42f-db5125df34cd/1/9VW6bis9tVIdvHBipYwW3aG58i0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.98.72.0/24
IPv6:
2a06:ac0::/29
Signature Algorithm: sha256WithRSAEncryption
21:c7:7a:37:90:a8:79:5b:0e:14:30:35:ad:47:7b:d6:7e:14:
df:1e:0d:c7:7c:76:fc:1a:aa:46:61:d8:be:2f:09:33:59:18:
71:a5:74:ec:34:70:0f:47:43:a8:b8:fb:b6:9c:46:10:c1:b1:
0b:4b:b6:82:d0:c5:09:dc:8d:41:76:56:75:25:65:f1:85:58:
76:2a:b6:3c:20:de:ea:5f:8f:3c:dd:4d:97:2d:ed:e1:1a:61:
15:6c:57:08:d9:06:25:56:1d:ef:8f:32:e4:ac:3e:68:1b:5a:
70:3e:5c:56:b9:b8:f2:fb:97:69:03:41:7b:4b:59:37:8a:b1:
76:f5:8d:a2:80:2e:24:aa:25:2e:0a:30:c3:47:05:49:6f:41:
f8:14:76:12:dc:18:79:04:52:be:f2:41:f3:cd:54:2b:3a:9f:
c2:ea:62:a6:ca:4a:c0:08:cc:bf:ba:ef:0b:89:49:f2:99:a2:
f5:3c:62:c3:25:7c:7d:08:8d:1e:85:c8:63:8e:87:51:01:e6:
74:e1:c2:2e:36:89:48:0f:fe:ce:04:90:d8:77:4a:d0:cf:52:
97:2c:f6:aa:4e:cf:81:52:2e:5c:87:16:c0:92:82:3e:4f:30:
ef:fc:b2:be:29:05:39:0b:12:81:66:e4:98:f9:a9:09:28:0e:
48:57:45:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 16:26:18 2026 by rpki-client