Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/q9y4amZYkqv_KoHKPueJqFfjJP0.roa
File: q9y4amZYkqv_KoHKPueJqFfjJP0.roa (raw, json)
Hash identifier: I5s0bMFdiuRz6q+Mllh6MJhrpjsMQ0LuTHDyl5OnvsI=
Subject key identifier: AB:DC:B8:6A:66:58:92:AB:FF:2A:81:CA:3E:E7:89:A8:57:E3:24:FD
Certificate issuer: /CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Certificate serial: 01A0B42CE2591E3175AAC1B4EA98D5FFC881
Authority key identifier: 62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/q9y4amZYkqv_KoHKPueJqFfjJP0.roa
Signing time: Fri 18 Sep 2026 11:00:35 +0000
ROA not before: Fri 18 Sep 2026 11:00:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211138
IP address blocks: 45.8.196.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 02:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b4:2c:e2:59:1e:31:75:aa:c1:b4:ea:98:d5:ff:c8:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62fdb67654df6184e7d60c4150ea9533c2cf9704
Validity
Not Before: Sep 18 11:00:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abdcb86a665892abff2a81ca3ee789a857e324fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:65:41:34:0f:95:66:55:15:de:6f:97:d1:90:
58:83:35:33:9f:99:4c:2f:8e:6c:8f:d2:2e:6a:c8:
5f:81:71:25:32:d9:8f:f1:00:5d:92:83:85:75:41:
e1:f3:5b:6c:a8:7e:8a:96:c9:5d:3a:ed:c7:22:1a:
df:35:64:60:94:e6:48:89:78:85:24:24:6f:0a:24:
ed:d3:0e:f5:42:95:75:fb:b7:44:65:f3:c3:a0:f6:
e4:fd:e0:f6:4d:67:2c:33:50:bd:13:32:ed:1e:7d:
bb:45:fa:84:a8:2c:8d:ca:4d:99:7c:8c:b6:65:c0:
d4:9a:dd:ce:11:af:fe:d4:54:99:5f:16:77:c1:b7:
2b:b6:67:4f:03:ba:5b:ea:06:c4:62:b1:6f:b4:44:
ce:a9:d1:78:da:f1:bd:3c:e6:29:d3:c8:7e:f4:ab:
33:f7:61:d3:c1:0a:7c:8e:08:c3:6e:f8:17:f2:38:
03:32:a1:57:00:f1:04:a6:99:08:3d:f6:ff:8a:38:
35:a9:6f:0e:ab:af:5e:a4:ed:9e:8f:82:9b:f7:42:
93:e9:c5:c9:12:21:c9:8a:8c:da:19:0a:d0:14:94:
3f:77:8b:d9:9f:a6:46:db:d0:9b:ed:a5:dd:01:4b:
02:eb:ef:4d:2b:06:26:0b:b4:21:5d:87:d0:ab:21:
29:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:DC:B8:6A:66:58:92:AB:FF:2A:81:CA:3E:E7:89:A8:57:E3:24:FD
X509v3 Authority Key Identifier:
keyid:62:FD:B6:76:54:DF:61:84:E7:D6:0C:41:50:EA:95:33:C2:CF:97:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/q9y4amZYkqv_KoHKPueJqFfjJP0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/704071-8dc0-4ed6-9457-e86121c594df/1/Yv22dlTfYYTn1gxBUOqVM8LPlwQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.8.196.0/24
Signature Algorithm: sha256WithRSAEncryption
44:5a:c7:80:57:7e:a2:87:69:02:fc:a9:f0:5d:11:3f:eb:98:
e2:f6:a8:0b:eb:0c:87:af:73:9c:46:fd:d8:f1:f6:8f:07:a7:
f3:ce:2f:3c:53:e3:6d:59:55:6d:3c:e4:be:f0:8d:7b:f0:b1:
07:85:85:5a:ec:b5:dc:7e:93:8f:63:7d:83:a7:83:8b:3e:19:
4e:1e:33:a2:a9:90:4e:a6:6d:40:2b:7e:a9:6f:8c:af:a1:58:
f9:7d:aa:22:bb:b8:30:18:ee:54:93:32:7b:9a:94:9d:3f:b9:
59:1e:68:73:fe:8c:15:dd:04:eb:13:a9:21:7c:58:bf:cd:41:
3c:cf:89:d6:7b:7e:b0:6a:bd:2c:48:b7:8b:b4:b8:62:72:a0:
2e:8f:08:f9:56:4c:52:50:f9:e6:48:62:fa:f3:75:4f:2d:35:
17:1e:10:11:fb:19:c1:09:5b:31:70:bc:49:96:e6:2c:b2:94:
e7:e5:56:45:37:70:55:0e:5a:c1:86:9c:2a:5c:4b:59:f1:bd:
8b:00:16:27:9d:83:47:7a:ce:dc:89:84:0f:ef:0d:d6:79:51:
cd:90:80:d1:27:a8:4c:7e:43:f4:62:17:0e:3d:88:75:8a:11:
0a:6e:6d:35:62:b4:b7:c4:02:e0:d4:77:71:ed:32:02:f4:a6:
9e:78:a9:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 13:05:45 2026 by rpki-client