Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/qukZOL3y-aU1clCkqnWrjrRORuo.roa
File: qukZOL3y-aU1clCkqnWrjrRORuo.roa (raw, json)
Hash identifier: AXo2TQQEBH5zNI61c1elakGj9Z6fZg1L8w+i18Gk+4Q=
Subject key identifier: AA:E9:19:38:BD:F2:F9:A5:35:72:50:A4:AA:75:AB:8E:B4:4E:46:EA
Certificate issuer: /CN=3b63139a1f4f88c30cee221c9146a36db554ff70
Certificate serial: 019B7EA5B4E188DE04A6C286F54C9C24C8CA
Authority key identifier: 3B:63:13:9A:1F:4F:88:C3:0C:EE:22:1C:91:46:A3:6D:B5:54:FF:70
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/qukZOL3y-aU1clCkqnWrjrRORuo.roa
Signing time: Fri 02 Jan 2026 12:19:07 +0000
ROA not before: Fri 02 Jan 2026 12:19:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210891
IP address blocks: 83.97.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.mft
rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7e:a5:b4:e1:88:de:04:a6:c2:86:f5:4c:9c:24:c8:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b63139a1f4f88c30cee221c9146a36db554ff70
Validity
Not Before: Jan 2 12:19:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aae91938bdf2f9a5357250a4aa75ab8eb44e46ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8d:5a:56:9b:c8:dc:07:f2:0a:bb:a9:d5:d0:
a4:02:40:f8:49:25:6b:1c:72:6a:b9:f7:03:0b:e7:
c2:da:ca:96:50:7d:82:4b:74:6a:dc:96:ae:6f:3d:
a5:ac:7a:06:06:72:ed:65:67:83:95:8a:c6:0d:ab:
fb:2b:61:77:3a:3a:4a:a1:34:f3:9d:ae:f7:31:7d:
f4:16:3c:6b:a6:3a:be:49:b4:f2:68:ac:f8:0f:62:
28:b0:80:57:c7:68:cc:e0:92:6a:eb:87:06:aa:41:
78:bc:87:bb:24:64:ec:45:61:8a:1e:88:7b:14:ff:
1d:63:16:20:fd:9b:62:78:0d:a5:a7:82:48:47:94:
e5:17:cb:de:f1:78:45:24:b6:07:bb:93:ae:c0:f7:
58:45:01:a8:08:4d:05:19:4d:ec:bc:38:53:b2:17:
6d:6a:71:18:a9:64:c4:ab:48:ae:63:50:0a:d0:01:
34:02:9a:c1:37:3b:5d:4a:7b:1c:e3:5c:27:8b:27:
29:bf:9b:fc:bf:ce:05:87:6b:a7:e2:a5:d7:b7:c1:
5c:2c:d0:52:9a:0f:19:46:e9:8a:c5:05:eb:34:a4:
9c:23:37:75:72:69:dc:1a:ac:38:12:4d:98:3a:8f:
c5:d7:01:c9:10:6b:8f:98:20:b3:1e:ff:9f:09:f6:
4a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:E9:19:38:BD:F2:F9:A5:35:72:50:A4:AA:75:AB:8E:B4:4E:46:EA
X509v3 Authority Key Identifier:
keyid:3B:63:13:9A:1F:4F:88:C3:0C:EE:22:1C:91:46:A3:6D:B5:54:FF:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O2MTmh9PiMMM7iIckUajbbVU_3A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/qukZOL3y-aU1clCkqnWrjrRORuo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/0269c5-268c-45e9-8067-0f7a40b5f6f3/1/O2MTmh9PiMMM7iIckUajbbVU_3A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.97.75.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:18:91:4e:42:4c:cd:50:a6:6d:1a:cf:70:2b:de:b8:f3:a2:
18:b8:81:af:ae:6f:45:7e:ac:2d:08:3f:ed:dc:b8:d7:02:e4:
26:6a:ba:60:86:81:2d:23:72:41:ef:ee:b2:c9:8c:95:82:08:
a3:6c:f7:3c:7d:11:e0:51:66:38:36:80:c3:8f:53:27:62:cf:
32:c1:72:90:0b:aa:1a:05:39:5d:87:38:a7:48:a5:d5:cb:01:
ec:2d:eb:ee:b5:87:2d:71:11:ea:b6:74:8b:79:85:b3:b1:a2:
18:cd:91:41:97:a0:8c:3f:02:0b:68:d6:7f:6e:26:ef:56:68:
59:1d:92:9a:e6:80:df:b7:ff:90:e4:86:51:60:83:1d:56:65:
7d:82:0f:c2:25:c2:cd:56:e6:98:b7:70:41:24:35:84:7f:b1:
72:28:85:66:ae:81:f1:09:fc:03:b0:b2:15:31:6c:2e:06:13:
26:00:68:dc:7d:6a:71:1d:88:1f:b5:32:c2:a3:c2:2b:e2:fe:
5a:e4:c4:50:ae:c2:5d:22:d4:a8:f3:f1:6c:e5:9f:16:2c:02:
cb:a8:f1:52:fc:48:ff:4e:0c:71:d9:19:37:47:b2:08:ef:2f:
94:bb:6b:f8:f4:ff:c6:6a:ab:2f:a5:32:f1:02:01:99:9f:13:
91:04:5a:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:53:42 2026 by rpki-client