Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QLmJRyVq457o-y8BZfurXUSxTks.roa
File: QLmJRyVq457o-y8BZfurXUSxTks.roa (raw, json)
Hash identifier: K3gJG/K2/IFV2gLGVkamJj/CPDtorOElmlYSSQHkuAI=
Subject key identifier: 40:B9:89:47:25:6A:E3:9E:E8:FB:2F:01:65:FB:AB:5D:44:B1:4E:4B
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F148790F29FE8D1CB12ED3AB87AF7DE73
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QLmJRyVq457o-y8BZfurXUSxTks.roa
Signing time: Mon 29 Jun 2026 17:57:36 +0000
ROA not before: Mon 29 Jun 2026 17:57:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207590
IP address blocks: 94.177.147.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:87:90:f2:9f:e8:d1:cb:12:ed:3a:b8:7a:f7:de:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jun 29 17:57:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40b98947256ae39ee8fb2f0165fbab5d44b14e4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:a0:f3:4d:88:0a:02:2e:2b:e3:10:6f:31:d6:
fb:64:66:f7:b3:ae:e2:62:f8:e1:6e:2c:b9:a4:80:
31:4f:87:42:d4:80:e5:3a:aa:2a:2a:20:c2:96:d3:
84:41:d4:0c:b3:3c:41:e9:78:bf:c9:25:ff:f7:ea:
90:47:63:bd:9e:c2:48:f4:76:eb:df:1c:f8:a5:6e:
fa:0d:79:6a:14:a7:c7:a7:49:cc:9d:dd:99:6e:a9:
0c:45:cd:69:6c:1b:56:c6:3b:37:a5:f3:ea:d1:72:
ee:e1:18:7f:4d:08:3f:eb:f2:21:33:69:94:41:da:
55:ff:26:b8:74:03:8c:ac:b4:7e:1a:20:44:38:ed:
86:fa:b3:93:c3:62:c9:6b:9d:17:cb:da:34:46:ab:
4e:d1:2d:81:ae:0b:bf:3c:1b:5c:1d:d7:d5:08:d4:
e4:8b:09:19:5d:45:ed:e8:d6:83:b6:2d:49:1d:3b:
db:04:c8:52:e4:38:09:cb:6d:b7:87:7a:51:8e:4f:
20:67:25:10:6c:2d:32:e7:4e:b9:93:d4:bb:c6:c6:
f3:24:19:0d:ee:e8:be:8b:58:55:eb:2e:1e:3e:24:
05:2b:9a:c8:11:7e:8b:42:ec:6a:65:75:99:6c:a3:
40:23:a8:bb:d3:6c:7a:21:2b:ff:58:8d:1a:da:30:
0d:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B9:89:47:25:6A:E3:9E:E8:FB:2F:01:65:FB:AB:5D:44:B1:4E:4B
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QLmJRyVq457o-y8BZfurXUSxTks.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.177.147.0/24
Signature Algorithm: sha256WithRSAEncryption
34:07:cf:cd:89:f5:5b:ce:e9:9a:d4:ba:8a:b0:57:f8:b3:ba:
66:87:2d:07:51:69:1c:82:59:ce:fa:6e:03:70:84:d9:63:1d:
41:68:1b:1e:b1:f8:6e:ee:b5:5a:7e:bd:35:6a:80:3a:3f:60:
ba:10:30:d5:cf:be:d2:ae:48:1e:9a:15:ec:38:21:16:16:b3:
14:6a:08:f4:b4:9a:93:4f:d4:24:a4:88:56:93:7a:05:61:cf:
c3:83:fb:0a:8e:76:f7:45:42:73:cc:bc:6c:28:e1:0d:f8:11:
be:60:40:82:a7:2b:ef:96:58:6c:95:4c:fd:3e:3c:e1:9a:87:
d3:0f:29:4e:6b:17:b9:98:62:00:ca:c4:25:9c:ba:ad:12:5e:
f3:76:2c:96:2f:72:b5:ac:15:cc:44:ad:b7:38:a0:6c:c7:8c:
00:bf:2f:ea:5f:b8:fa:f2:f5:a4:b4:26:97:1e:30:4b:92:37:
62:0c:9d:65:bd:81:56:46:ae:64:3d:ad:44:c9:f9:8c:ae:db:
a4:37:71:2a:78:fd:07:8f:4e:31:b4:88:06:db:5d:59:64:fb:
f2:37:76:cc:96:ee:19:ff:99:de:c9:2f:3f:2c:f3:f9:93:a3:
2b:a1:4a:be:9a:ef:95:d8:ca:f4:91:82:15:4d:a2:6f:21:81:
df:24:dd:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:22 2026 by rpki-client