Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QBKSf7X_6Cy6uGRlM7F0-cJGw80.roa
File: QBKSf7X_6Cy6uGRlM7F0-cJGw80.roa (raw, json)
Hash identifier: UWb8NwolwE8bjwchBld2IoF9BB8GPvfyXZzD2BJbsic=
Subject key identifier: 40:12:92:7F:B5:FF:E8:2C:BA:B8:64:65:33:B1:74:F9:C2:46:C3:CD
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 019F46B39FD18278796B5B5BCC012E3D40C6
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QBKSf7X_6Cy6uGRlM7F0-cJGw80.roa
Signing time: Thu 09 Jul 2026 11:46:44 +0000
ROA not before: Thu 09 Jul 2026 11:46:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16589
IP address blocks: 45.149.235.0/24 maxlen: 24
109.206.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 11:47:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:46:b3:9f:d1:82:78:79:6b:5b:5b:cc:01:2e:3d:40:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Jul 9 11:46:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4012927fb5ffe82cbab8646533b174f9c246c3cd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:60:6a:66:40:5e:69:9b:69:29:36:a9:58:f2:
39:66:2f:73:13:87:fd:88:f6:a3:ff:8d:43:8c:61:
b8:6c:b4:fe:6b:ef:c0:fd:66:92:65:f7:93:af:ce:
98:eb:6d:9c:5a:7c:19:18:24:9b:4d:3b:51:50:bf:
68:04:32:eb:f4:70:d3:6f:18:2c:82:be:f9:e2:9d:
4f:2a:c8:9e:d6:6e:66:b2:ad:52:d9:ed:df:cc:bd:
d7:90:d1:ca:ff:57:81:17:a7:4c:61:e2:c0:45:fa:
82:eb:7d:25:6c:b2:82:74:ed:2c:a2:d9:97:e7:d0:
4f:d8:7e:10:24:74:f3:27:69:37:92:df:f7:3a:35:
03:0c:84:1c:52:cd:70:2d:d8:00:37:0d:40:20:48:
14:0f:d3:eb:09:87:f5:22:d6:d4:cf:e7:d8:e0:11:
2a:d4:42:7a:46:8e:46:aa:16:e9:88:69:34:6d:21:
c8:02:bd:6c:b3:f5:fe:40:e5:90:94:5a:a2:48:57:
2d:c2:d0:0f:d3:9d:04:06:65:13:78:9d:d6:ba:f3:
f2:0d:d9:03:d6:a7:c1:a6:a9:19:8f:b3:75:9c:79:
a9:ea:1d:8a:9d:8e:71:36:7d:48:a3:5b:5d:9a:00:
31:79:88:0a:e8:5e:dd:8d:9f:08:49:95:a7:c6:25:
8a:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:12:92:7F:B5:FF:E8:2C:BA:B8:64:65:33:B1:74:F9:C2:46:C3:CD
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/QBKSf7X_6Cy6uGRlM7F0-cJGw80.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.149.235.0/24
109.206.242.0/24
Signature Algorithm: sha256WithRSAEncryption
15:39:67:1c:63:ee:23:e6:02:7c:5f:80:4e:0c:4d:2e:bf:31:
0b:f3:f5:83:3f:e1:1d:f5:c6:0b:1a:1a:38:62:9f:2b:84:0a:
51:b9:cf:c2:6d:1d:d6:2b:9e:7e:45:e4:54:e7:60:94:df:36:
63:17:77:72:8b:06:15:c4:c6:e4:4f:b5:8f:5f:b6:b7:26:02:
4c:b8:8e:25:71:03:f1:23:52:2c:6e:b7:ec:e1:4c:e6:ff:b0:
f6:f8:0c:31:87:81:04:b4:0d:28:16:4a:44:0e:98:02:e9:1f:
58:d8:12:82:40:00:05:78:46:13:2e:e0:d4:84:49:60:d8:b5:
e6:ed:a8:0a:0e:36:24:a5:a2:87:3a:14:c1:38:b1:d3:25:e3:
1c:5c:f8:9b:20:dc:b9:c9:c1:90:21:67:f0:2a:77:1f:5b:22:
d5:9e:5f:2d:3d:85:2d:3d:c7:40:2a:4a:14:31:fe:58:0c:53:
91:1a:32:7b:f9:03:95:d2:5a:74:83:ae:92:77:d8:c5:b0:ac:
d0:3f:1e:15:c1:bc:e4:28:a3:95:b6:0f:f5:94:79:6a:be:7e:
7b:27:a0:19:69:c3:c5:83:37:8c:fe:e5:c5:09:37:71:73:43:
6d:4c:67:d9:81:fe:1d:88:e2:d5:b7:5b:b1:cd:26:72:f6:f8:
99:3d:e5:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 17:19:56 2026 by rpki-client