Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/QpztarK9bvpnWfXobrI7Q7qFhUI.roa
File: QpztarK9bvpnWfXobrI7Q7qFhUI.roa (raw, json)
Hash identifier: N3nmNaw8DpeSVQsFSUX+b5d+hltwjL59HWcqiupjdsw=
Subject key identifier: 42:9C:ED:6A:B2:BD:6E:FA:67:59:F5:E8:6E:B2:3B:43:BA:85:85:42
Certificate issuer: /CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Certificate serial: 01A09F952832CB82D6D0EE940E26E316D4DF
Authority key identifier: 05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/QpztarK9bvpnWfXobrI7Q7qFhUI.roa
Signing time: Mon 14 Sep 2026 11:02:27 +0000
ROA not before: Mon 14 Sep 2026 11:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210083
IP address blocks: 89.167.230.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 12:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:95:28:32:cb:82:d6:d0:ee:94:0e:26:e3:16:d4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=05f3e160172ecc75c8cab1bae271be3ebf407a80
Validity
Not Before: Sep 14 11:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=429ced6ab2bd6efa6759f5e86eb23b43ba858542
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:e3:2b:75:04:28:72:c3:d0:b7:f4:59:89:f8:
41:dd:a4:9e:8e:39:cf:7e:74:7a:fe:69:3c:e9:bc:
70:e2:d7:04:56:24:b4:2a:80:3e:33:c8:39:bd:0b:
4b:73:f8:a6:95:d2:1c:d5:0f:b3:d7:c3:74:8d:cb:
b9:57:e8:00:13:4f:56:08:09:2a:d1:1f:33:05:fc:
95:bf:e3:c4:6e:35:5e:57:f0:bf:74:52:96:e5:8e:
a8:d8:5e:84:61:8c:01:a6:b6:08:9a:e4:f5:89:64:
08:1f:1e:9a:af:63:e5:c6:64:51:55:94:b4:10:80:
2f:c1:6a:ae:e4:45:c7:0d:55:32:f0:ca:35:09:6f:
28:31:a5:66:70:4f:b0:c1:36:e9:c7:47:28:11:61:
97:18:c0:58:63:fe:8f:d4:0e:2d:52:f2:32:21:26:
77:64:10:87:39:c4:6b:06:56:f6:3c:86:ad:6f:1e:
06:0f:7e:2c:da:89:9c:be:13:a6:00:92:5a:5b:18:
0f:2b:a1:e8:06:63:10:e7:7d:fe:bd:33:5b:23:d1:
95:b6:9a:de:c3:15:98:5c:1e:74:22:e5:46:d1:fb:
d9:b3:91:6b:4e:53:bb:00:54:f9:ca:23:c1:9a:6a:
73:b4:55:de:58:02:5f:39:d9:73:e9:fe:fb:73:ac:
de:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9C:ED:6A:B2:BD:6E:FA:67:59:F5:E8:6E:B2:3B:43:BA:85:85:42
X509v3 Authority Key Identifier:
keyid:05:F3:E1:60:17:2E:CC:75:C8:CA:B1:BA:E2:71:BE:3E:BF:40:7A:80
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BfPhYBcuzHXIyrG64nG-Pr9AeoA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/QpztarK9bvpnWfXobrI7Q7qFhUI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/aa8b46-9645-4620-8479-5d560989cf7b/1/BfPhYBcuzHXIyrG64nG-Pr9AeoA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.167.230.0/23
Signature Algorithm: sha256WithRSAEncryption
45:f2:74:c0:26:4c:cd:2b:58:f5:30:42:d2:0d:fc:1c:1e:74:
98:43:7f:b2:98:22:8b:b7:55:1a:2e:ef:b0:56:07:de:ed:10:
91:af:bd:e1:2d:68:45:9c:27:bb:d9:39:78:29:c6:e1:cb:e6:
e3:e6:45:5d:29:4a:46:67:bc:f2:b8:31:35:99:4c:28:15:4f:
72:8e:ca:3f:f6:0f:87:ef:b6:69:04:ef:ab:a8:3b:44:4f:67:
f6:cd:c6:54:10:4b:18:b3:3b:80:29:cd:39:b8:50:19:8f:ab:
b9:95:8c:7e:25:88:ea:d3:84:6d:b0:a5:07:b9:82:fc:ce:12:
a4:7a:b9:1d:60:c9:3e:d9:a9:38:3b:6e:7b:62:bb:a7:e8:f1:
2e:2d:e1:1f:47:21:85:27:93:b5:e5:df:29:98:fd:1b:ae:d4:
ff:cb:a7:49:73:9a:4d:4a:c4:fd:ce:f5:92:1d:56:e9:6e:20:
57:16:0e:bd:f9:e3:07:47:cf:5f:00:e9:59:44:f1:e7:dd:1d:
d6:97:6a:c7:e2:0f:7c:5d:74:5f:ad:df:ce:72:5d:f1:ff:8d:
0b:34:67:05:8b:91:a2:91:e9:ed:3d:25:62:0a:b4:6f:89:f5:
ca:2b:8a:fc:c2:7c:18:f7:9b:85:fc:4c:6b:40:4e:f2:44:33:
ea:2c:16:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:13:47 2026 by rpki-client