Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/QFJo88OrSd5myk0E5S5m6WsZwaw.roa
File: QFJo88OrSd5myk0E5S5m6WsZwaw.roa (raw, json)
Hash identifier: x19Hxs736Hslfil2wfO0+dv8wvGTZgyM4+9jHYUWRK0=
Subject key identifier: 40:52:68:F3:C3:AB:49:DE:66:CA:4D:04:E5:2E:66:E9:6B:19:C1:AC
Certificate issuer: /CN=96e5ad53bfc73840c425711c010453571057dc23
Certificate serial: 01A19D975A1D17E045CADE991BFECFED9DDB
Authority key identifier: 96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/QFJo88OrSd5myk0E5S5m6WsZwaw.roa
Signing time: Mon 02 Nov 2026 18:48:23 +0000
ROA not before: Mon 02 Nov 2026 18:48:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215197
IP address blocks: 204.57.220.0/24 maxlen: 24
208.90.252.0/24 maxlen: 24
208.90.253.0/24 maxlen: 24
2001:67c:e40::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.mft
rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Nov 2026 08:45:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:9d:97:5a:1d:17:e0:45:ca:de:99:1b:fe:cf:ed:9d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96e5ad53bfc73840c425711c010453571057dc23
Validity
Not Before: Nov 2 18:48:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=405268f3c3ab49de66ca4d04e52e66e96b19c1ac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:34:ce:bb:28:aa:a1:00:92:cf:3f:c4:06:f0:
ab:8d:9b:a7:0b:c4:01:cb:c3:f9:df:21:71:02:86:
94:96:1b:b2:2a:e1:63:7e:c4:72:1d:04:3b:5a:8c:
24:23:a6:3d:97:a9:c7:80:21:10:82:ea:de:3a:de:
23:98:b0:1e:9f:ce:aa:98:93:ed:a6:14:4f:f0:04:
b0:4d:13:07:61:63:a3:bd:eb:5f:a8:92:49:16:a6:
c8:10:17:c5:92:35:6b:25:ce:57:27:b6:8c:bd:e2:
38:7b:79:91:d7:7d:a1:6d:5e:44:e5:53:1a:55:f6:
f9:8d:3e:29:81:31:82:4b:57:74:17:ce:7c:7d:1b:
1c:e6:c7:09:27:25:b7:5d:11:03:b2:c8:a8:81:74:
0f:87:a7:23:e2:45:fc:0c:d6:8a:43:3f:69:e8:5f:
9e:3b:05:c3:e1:5b:1d:56:e0:0b:d3:19:f8:85:b5:
09:da:cd:cd:4d:f7:06:90:b9:28:e7:07:63:6f:bf:
1f:fd:d0:8b:d8:93:7a:45:95:b2:e9:b9:83:ed:a2:
f6:53:90:58:20:23:32:39:37:af:91:75:03:a4:ba:
a0:58:38:10:0e:2e:11:00:e2:29:c4:08:1f:d9:d4:
92:49:a4:fa:d3:1d:41:64:a6:35:e4:68:52:9b:5e:
96:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:52:68:F3:C3:AB:49:DE:66:CA:4D:04:E5:2E:66:E9:6B:19:C1:AC
X509v3 Authority Key Identifier:
keyid:96:E5:AD:53:BF:C7:38:40:C4:25:71:1C:01:04:53:57:10:57:DC:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/luWtU7_HOEDEJXEcAQRTVxBX3CM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/QFJo88OrSd5myk0E5S5m6WsZwaw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/2d8e6c-69e2-47cb-bf8d-ef9a584bd113/1/luWtU7_HOEDEJXEcAQRTVxBX3CM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
204.57.220.0/24
208.90.252.0/23
IPv6:
2001:67c:e40::/48
Signature Algorithm: sha256WithRSAEncryption
7e:c5:fe:30:b7:2f:42:c6:f4:b2:42:40:03:18:78:b1:61:20:
cc:34:3e:f5:c6:d2:a0:b7:80:53:10:80:1c:e3:12:d1:6c:61:
31:fc:c0:9e:8d:66:db:4e:25:7c:57:a8:82:16:53:9b:ad:8d:
c7:22:09:3a:1d:03:46:4a:35:d2:b6:d5:55:3d:f0:1b:ac:53:
b7:07:21:ea:e8:95:1a:aa:00:50:da:b6:8b:f3:b6:00:70:cc:
f7:91:31:7b:c2:2b:86:26:b1:a4:da:04:19:80:73:16:08:b8:
b9:d3:df:59:b3:76:41:24:94:ae:c0:29:af:51:93:80:41:c6:
fc:3b:b1:9d:70:39:41:50:6d:c5:72:2b:e9:47:15:69:70:f6:
9f:63:7b:c1:a9:98:51:a2:4d:76:73:19:fc:c5:17:5f:94:66:
9b:22:46:42:b8:2b:e6:04:2c:b7:fb:94:0c:15:f9:c7:30:af:
90:ff:48:5b:31:f3:34:f6:9c:97:7e:a4:8d:f0:eb:94:76:2d:
d8:2c:c0:1b:10:c1:5e:31:48:b1:3a:ed:82:25:75:87:29:55:
13:c2:5e:fc:ad:cd:31:14:b6:2d:82:87:9c:c8:c4:1c:d0:19:
e7:95:40:75:29:41:5f:c6:38:80:8f:d4:44:12:1c:23:82:58:
3a:9c:f1:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 5 19:51:41 2026 by rpki-client