Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/qPtqN5TxQfjdDYdkssZvq4hWtuI.roa
File: qPtqN5TxQfjdDYdkssZvq4hWtuI.roa (raw, json)
Hash identifier: Z1jY4qgVDn7xNOA1Yj5uRwpDL3uyZsxT5mIjhA9AC8A=
Subject key identifier: A8:FB:6A:37:94:F1:41:F8:DD:0D:87:64:B2:C6:6F:AB:88:56:B6:E2
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019D6BDDF1483F2661B60A259731C69726AE
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/qPtqN5TxQfjdDYdkssZvq4hWtuI.roa
Signing time: Wed 08 Apr 2026 06:53:20 +0000
ROA not before: Wed 08 Apr 2026 06:53:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198487
IP address blocks: 216.236.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 13:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6b:dd:f1:48:3f:26:61:b6:0a:25:97:31:c6:97:26:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Apr 8 06:53:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8fb6a3794f141f8dd0d8764b2c66fab8856b6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:62:ab:4c:71:8f:57:55:f6:db:37:68:b2:82:
52:4f:f3:16:53:97:2c:7d:86:bb:0c:b5:d2:5c:69:
61:ed:1a:1e:11:a0:00:35:20:5d:ca:14:4e:85:e0:
01:e4:0c:3b:d9:f1:84:2f:aa:f9:c1:03:25:c4:b9:
c0:f0:ce:51:72:98:18:9d:7c:6c:b0:9d:28:0d:99:
6b:a7:09:28:a8:58:ab:cc:78:ea:35:91:7d:3b:fc:
2c:9c:1b:74:76:45:e1:19:31:36:97:70:de:37:ba:
f8:f0:28:1d:c5:46:7a:ce:c9:73:fc:c4:03:b1:80:
a0:96:6e:2c:ce:91:96:98:50:87:e3:71:4c:3e:45:
56:74:da:98:2f:7a:da:57:b1:67:f0:33:78:c4:72:
ea:83:38:05:be:d7:d5:d0:11:74:c0:54:45:b6:0d:
86:28:5f:fb:78:69:4d:1d:30:06:99:4d:50:ce:52:
4f:c9:de:22:bd:19:1e:6d:4d:81:a3:d0:93:9c:9d:
61:60:fd:b3:82:d0:f8:24:3a:ed:9e:c4:82:08:8c:
48:4a:99:3a:07:78:21:b3:c5:10:e6:b5:7f:83:c9:
47:96:84:97:62:04:8f:cb:00:fc:34:ff:82:78:18:
57:29:22:bb:0b:ab:5a:e2:fe:20:e9:1f:00:c6:e3:
eb:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:FB:6A:37:94:F1:41:F8:DD:0D:87:64:B2:C6:6F:AB:88:56:B6:E2
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/qPtqN5TxQfjdDYdkssZvq4hWtuI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.236.52.0/24
Signature Algorithm: sha256WithRSAEncryption
52:bf:a8:47:88:e0:9c:0a:f2:af:9e:98:13:f2:bb:40:73:aa:
93:2b:d6:96:25:7b:9f:9f:0d:ce:93:0e:91:b0:26:8a:f3:c3:
21:a9:6c:34:3b:e1:52:02:5d:ba:09:68:42:41:7f:ea:77:fc:
39:b9:57:25:a5:02:c2:4e:46:0c:83:9a:cc:fa:80:1a:a0:d0:
a9:85:c3:ce:9c:a7:56:6a:0d:c7:41:3c:64:7a:2c:9d:27:dc:
ce:ba:22:a6:91:f8:51:a8:18:76:95:04:53:df:5d:9e:fa:1f:
9a:e7:08:c9:d0:7d:58:30:b2:86:1d:ad:30:55:78:96:fe:3e:
32:07:16:45:9e:1e:88:80:60:a8:02:81:59:89:d8:91:f0:36:
b6:84:fd:6f:ce:47:da:c8:e4:62:60:79:24:e0:fb:94:3e:86:
df:85:83:8b:9f:84:e5:07:d7:16:dd:73:f6:41:cf:2c:6d:40:
9a:e7:29:9f:3c:ea:21:72:45:4f:d6:9b:41:87:cb:aa:01:13:
45:b3:cf:6b:dc:7e:7c:8e:e1:a3:44:67:e7:f3:d1:ec:3f:43:
68:6b:a9:6d:5d:e2:8e:43:41:23:3a:09:fa:20:50:bb:ed:24:
0d:5c:26:27:c9:6d:f8:c8:a1:70:44:62:9b:2d:e1:a0:61:87:
81:82:29:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 21:19:32 2026 by rpki-client