Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/QcJ1_3me8VKJVSwljpvJ4RRo4bI.roa
File: QcJ1_3me8VKJVSwljpvJ4RRo4bI.roa (raw, json)
Hash identifier: oLE/UmjEKWdlluphq/E4JLOUzru3Xt/qp1y2xi32ZuM=
Subject key identifier: 41:C2:75:FF:79:9E:F1:52:89:55:2C:25:8E:9B:C9:E1:14:68:E1:B2
Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Certificate serial: 019F2368467CDD4403E8EE3DCC6E9F788754
Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/QcJ1_3me8VKJVSwljpvJ4RRo4bI.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42831
IP address blocks: 86.110.48.0/24 maxlen: 24
86.110.50.0/24 maxlen: 24
86.110.54.0/24 maxlen: 24
86.110.55.0/24 maxlen: 24
86.110.59.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 05 Jul 2026 03:02:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:46:7c:dd:44:03:e8:ee:3d:cc:6e:9f:78:87:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41c275ff799ef15289552c258e9bc9e11468e1b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:fe:76:ce:ee:32:15:5d:28:37:e3:c2:98:99:
49:1a:8b:fd:ea:a9:c7:b4:83:00:12:42:08:b2:a2:
93:a5:cf:9c:e0:0e:fb:24:9a:03:6f:e6:41:58:fe:
e9:ed:62:57:45:83:8b:35:01:9e:23:0f:ff:7c:af:
96:42:de:85:0b:cb:19:d3:79:17:98:82:1d:e7:97:
85:d9:ff:4e:19:d0:f0:25:2f:98:96:e1:25:fe:0f:
e8:d9:23:a7:cf:94:6b:b3:ff:cf:93:87:25:5b:ba:
6f:6a:b4:14:5e:e5:09:d0:a5:86:4d:16:f7:cb:eb:
81:87:39:8e:63:ff:ba:9c:ef:5a:67:a5:04:b7:34:
8e:62:75:e0:3f:01:89:65:aa:f6:80:e8:f5:af:be:
7c:9f:f4:c1:30:55:84:6e:06:fb:06:16:80:5b:8a:
91:ca:a7:76:48:aa:37:5d:26:26:e8:87:36:5d:f8:
ae:50:45:9b:99:47:2f:04:c8:8c:88:39:58:d1:a7:
ec:2d:3c:27:29:fd:0d:e2:96:1c:c5:62:b7:0e:a5:
4e:ee:c5:a5:71:e2:9c:aa:4d:27:6b:aa:74:f9:31:
98:4c:e1:c4:53:06:c3:8e:89:b4:05:c2:39:1b:c2:
79:4f:6b:de:ec:9c:d8:0e:92:38:14:f4:40:ee:58:
d2:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C2:75:FF:79:9E:F1:52:89:55:2C:25:8E:9B:C9:E1:14:68:E1:B2
X509v3 Authority Key Identifier:
keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/QcJ1_3me8VKJVSwljpvJ4RRo4bI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.48.0/24
86.110.50.0/24
86.110.54.0/23
86.110.59.0/24
Signature Algorithm: sha256WithRSAEncryption
8a:0b:f2:91:b4:5c:d4:34:38:59:67:6b:c9:af:89:14:0f:0f:
4a:ac:9a:ac:22:ea:d0:89:84:1f:b0:dd:91:c7:24:c9:50:ef:
2b:47:c1:e9:1b:68:77:b0:ac:50:6a:ce:77:5e:82:cd:21:c7:
55:fc:35:f1:5f:34:0a:0d:06:2f:2a:e9:b4:73:8d:45:90:3b:
d7:0a:55:15:9e:49:1f:ba:c9:30:0d:dc:72:85:4a:c8:82:7c:
37:76:4e:5b:cc:44:7f:8e:63:91:62:14:ed:98:03:75:cc:03:
dd:49:35:f8:06:85:5c:35:a6:cf:a2:01:31:ab:b2:31:54:1d:
c1:85:8a:34:69:05:e0:10:f5:e6:f3:62:c7:d5:24:24:7d:00:
15:d7:7e:e3:90:30:6a:e3:aa:d4:b5:ef:f8:78:02:55:9e:f6:
a7:bc:1b:bf:11:09:9e:20:8f:fb:34:fe:48:e5:ce:24:ef:2e:
a5:e5:17:b0:7d:6a:5d:6d:73:f6:12:99:d7:a7:32:1c:10:44:
97:fa:bd:47:30:bf:e5:67:ef:47:bc:df:9c:b2:a3:71:90:75:
02:0d:cd:30:6a:26:a7:7f:09:86:3e:5f:16:b9:f3:41:30:ba:
61:67:84:d4:53:fe:dd:48:2f:33:50:5f:ca:ab:be:a0:31:b1:
4c:9a:73:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 4 09:19:30 2026 by rpki-client