Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QjANzClkMLid0M36RfBXmS5nou0.roa
File: QjANzClkMLid0M36RfBXmS5nou0.roa (raw, json)
Hash identifier: yRx9/x38TkQtB83gUaaNBnhRx2AxhnfGbLCEBk1ffE4=
Subject key identifier: 42:30:0D:CC:29:64:30:B8:9D:D0:CD:FA:45:F0:57:99:2E:67:A2:ED
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 019F3D0B00BCDA79DA93B4F1645231FFF8FA
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QjANzClkMLid0M36RfBXmS5nou0.roa
Signing time: Tue 07 Jul 2026 14:45:59 +0000
ROA not before: Tue 07 Jul 2026 14:45:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219258
IP address blocks: 89.125.127.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3d:0b:00:bc:da:79:da:93:b4:f1:64:52:31:ff:f8:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Jul 7 14:45:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42300dcc296430b89dd0cdfa45f057992e67a2ed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:0d:d4:40:47:11:d1:92:fb:7a:30:29:b7:99:
af:37:8c:69:35:de:da:92:e2:22:9d:4e:c4:97:9a:
3a:05:c6:7f:96:18:ba:e3:1c:cb:c7:d0:ec:d4:2f:
61:47:59:0d:81:da:54:30:1a:35:ba:93:c7:fb:51:
cc:7f:31:92:93:32:5f:b8:71:64:fe:5c:a9:7e:1a:
9e:49:98:dd:e2:5b:30:b6:de:40:b3:4d:64:86:aa:
8f:6a:6c:f3:1d:bc:d6:19:d3:9f:48:9b:3b:75:f3:
25:bb:49:e8:fa:46:79:28:d0:24:eb:1c:48:8b:88:
da:c2:9f:e2:a9:f3:e2:63:2b:50:bd:3d:40:d5:03:
98:f1:f5:10:3c:87:c3:aa:fe:70:11:d3:57:4a:21:
61:49:12:4a:b3:7b:61:47:23:3e:d2:37:01:dd:a9:
3c:74:1e:c1:fd:30:1b:2f:73:36:da:e4:d6:4f:cc:
ad:ac:e5:00:53:98:8d:51:1b:07:ad:c3:09:ef:e0:
7d:4d:e1:d9:e9:cd:5f:e8:24:59:78:be:7e:1c:77:
c8:5e:f2:53:8a:90:3c:c3:57:7a:6c:b1:6a:41:b0:
07:3a:ab:2b:47:1e:ae:ea:cc:28:02:8c:b7:f7:f6:
81:37:01:d9:d9:13:02:1d:8d:a0:28:29:5b:a2:25:
c5:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:30:0D:CC:29:64:30:B8:9D:D0:CD:FA:45:F0:57:99:2E:67:A2:ED
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/QjANzClkMLid0M36RfBXmS5nou0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.125.127.0/24
Signature Algorithm: sha256WithRSAEncryption
4f:a3:5f:55:b1:2c:8f:34:15:88:83:8d:af:45:66:79:5b:bc:
14:89:02:22:9a:4d:98:ec:00:5a:26:80:e5:13:1d:cb:ac:5e:
a2:f1:eb:8e:2e:c6:47:fc:5e:4f:33:af:8a:6b:a7:58:16:be:
1c:c1:22:de:89:af:b9:3a:16:5a:56:56:d7:41:ec:de:c7:3b:
aa:ff:65:82:d2:13:65:54:24:2c:2d:1f:7a:b3:ec:cd:10:ef:
6b:9f:1c:bd:e5:9b:56:f5:13:3a:dd:15:2c:f6:6d:5f:63:0d:
8d:09:ba:3c:95:a5:2a:f1:10:56:de:24:89:77:8a:dd:13:3d:
48:a4:6c:0d:7f:dc:07:55:8c:83:b8:73:2f:63:d6:e0:d6:db:
93:a3:38:12:e4:a9:b3:b4:77:f9:c8:38:b7:80:37:36:74:b4:
59:06:f2:fb:3a:b8:a1:41:8a:90:54:41:4d:ff:27:7a:70:03:
e8:fd:05:ca:ae:8e:9b:69:b3:0d:6f:2e:87:90:ba:12:76:ef:
4a:d9:6d:27:c3:31:2d:91:fb:91:6c:a1:7a:18:95:1c:c1:b3:
c5:db:3a:35:b9:f0:b0:0b:5d:eb:b6:c5:5f:e9:64:45:34:9a:
e9:e7:55:87:7b:f2:d0:a3:cf:ea:5f:75:af:2e:8c:f5:9f:aa:
18:f8:04:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 12:57:22 2026 by rpki-client