Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QOOZOBByVqkZ1q-PE7NPKaD3qjM.roa
File: QOOZOBByVqkZ1q-PE7NPKaD3qjM.roa (raw, json)
Hash identifier: j3zyeDdIrn6hRAovoXAWbgDk2QQtVM5UJCCkBnNNH2c=
Subject key identifier: 40:E3:99:38:10:72:56:A9:19:D6:AF:8F:13:B3:4F:29:A0:F7:AA:33
Certificate issuer: /CN=41b88e42f28836df48310dda05636457fa3f70db
Certificate serial: 019F2369317957E4A07FB3123E138F3CAE55
Authority key identifier: 41:B8:8E:42:F2:88:36:DF:48:31:0D:DA:05:63:64:57:FA:3F:70:DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QOOZOBByVqkZ1q-PE7NPKaD3qjM.roa
Signing time: Thu 02 Jul 2026 15:18:44 +0000
ROA not before: Thu 02 Jul 2026 15:18:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4755
IP address blocks: 185.150.216.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:31:79:57:e4:a0:7f:b3:12:3e:13:8f:3c:ae:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b88e42f28836df48310dda05636457fa3f70db
Validity
Not Before: Jul 2 15:18:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40e39938107256a919d6af8f13b34f29a0f7aa33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:fc:3e:a1:14:9c:88:74:e8:f4:a8:df:80:54:
ca:b9:81:b3:0e:95:ad:46:b7:de:02:9f:1d:96:11:
f5:81:de:58:1e:f7:15:80:ed:2c:3d:9b:6a:b3:30:
2c:6d:94:00:36:8e:9a:53:3d:9a:19:1a:d5:72:ed:
09:a7:4e:13:bf:3d:00:1e:e5:33:86:e4:10:24:d8:
98:f8:e3:36:75:76:06:39:9a:52:ce:e8:6e:09:ff:
ae:12:12:ee:3b:60:be:f1:2b:c0:d9:d5:9d:20:b0:
a7:69:2c:0b:56:37:f2:39:47:9f:c0:68:38:c8:ae:
dd:b4:aa:75:d5:de:71:d6:f6:42:30:bd:9e:63:4d:
ed:51:6b:a2:ff:33:4c:a6:62:1a:fd:b9:75:9d:e8:
cb:c7:5f:f1:7b:df:f5:1f:1c:fd:30:da:d1:a2:b0:
51:27:f7:91:4d:1b:3d:0c:c3:f5:d1:52:0d:8d:69:
74:fb:78:0c:94:44:fd:57:69:b7:3b:01:da:7b:f6:
4c:79:ff:a1:93:e5:7a:f6:95:5b:e4:1d:89:89:9e:
ca:13:aa:9a:d8:7f:6a:a0:0d:d1:b1:a3:f9:8b:75:
e5:1e:01:8a:e1:0d:01:f8:f8:f0:71:0b:61:cb:08:
aa:f1:63:d4:8c:03:06:75:f4:cd:d4:c9:6c:38:d5:
35:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E3:99:38:10:72:56:A9:19:D6:AF:8F:13:B3:4F:29:A0:F7:AA:33
X509v3 Authority Key Identifier:
keyid:41:B8:8E:42:F2:88:36:DF:48:31:0D:DA:05:63:64:57:FA:3F:70:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbiOQvKINt9IMQ3aBWNkV_o_cNs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QOOZOBByVqkZ1q-PE7NPKaD3qjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/f501f6-1702-48d3-8027-96b8691f5260/1/QbiOQvKINt9IMQ3aBWNkV_o_cNs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.150.216.0/22
Signature Algorithm: sha256WithRSAEncryption
76:4d:a2:68:ad:62:b8:57:ca:e1:6a:fe:01:ae:43:38:f6:1f:
41:28:8a:92:ed:09:71:66:af:20:74:c6:37:64:fb:af:bf:0c:
af:33:18:c1:5d:3e:b1:e4:14:6a:5f:e2:5c:b5:50:01:bd:d6:
2c:09:e8:91:92:bc:20:f5:71:c9:c7:99:17:cf:5e:3d:32:f9:
00:21:e6:bb:88:df:8f:1e:05:98:dc:91:38:f6:f4:25:bb:32:
09:01:17:95:37:e1:5c:5b:e5:0e:71:e9:5b:97:9e:ff:87:2f:
31:b0:62:29:df:fb:29:57:f3:0a:52:b8:26:e6:a9:ef:56:17:
6a:97:f7:18:49:c2:63:9b:e8:de:38:6a:e4:d5:09:5e:1b:c1:
1f:fc:b0:24:bc:53:12:71:c6:23:b1:52:f2:5f:3e:ee:fe:91:
35:8c:fb:6b:4a:50:43:ff:cf:1f:e7:5f:3b:6c:a0:cb:bf:48:
79:b4:58:55:41:ee:87:43:8c:df:53:87:70:5d:bf:54:bc:ff:
c9:3f:39:81:f6:c8:53:2c:79:37:1f:4d:e2:a1:8b:b7:d5:55:
65:89:d6:cb:86:c6:20:c0:3a:4a:ef:58:b7:41:4e:aa:f1:9b:
be:a7:49:5e:d0:55:f0:76:fc:4e:61:73:67:cf:42:14:09:4f:
36:9a:8d:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:17:43 2026 by rpki-client