Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/QeQH7ttGXunJxWM0h0G7aKwBYQg.roa
File: QeQH7ttGXunJxWM0h0G7aKwBYQg.roa (raw, json)
Hash identifier: IwnRt4W7ZPAUMI6e1S/3zzaB/RIQv7f2/YniSFDSdQQ=
Subject key identifier: 41:E4:07:EE:DB:46:5E:E9:C9:C5:63:34:87:41:BB:68:AC:01:61:08
Certificate issuer: /CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Certificate serial: 019F2298B03F5E7CAA1220E35FFC21CB2208
Authority key identifier: 0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/QeQH7ttGXunJxWM0h0G7aKwBYQg.roa
Signing time: Thu 02 Jul 2026 11:30:59 +0000
ROA not before: Thu 02 Jul 2026 11:30:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219365
IP address blocks: 2a0d:d940:80::/44 maxlen: 44
2a0d:d940:2014::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 12:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:22:98:b0:3f:5e:7c:aa:12:20:e3:5f:fc:21:cb:22:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4e3b3b84242258863142ed3a19792d97cbbc74
Validity
Not Before: Jul 2 11:30:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41e407eedb465ee9c9c563348741bb68ac016108
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:cf:bc:8b:ab:2e:d0:0f:a7:5e:81:ca:c8:ed:
b0:db:7a:ea:a5:bc:7a:61:4e:c0:8f:dd:ec:d4:12:
7c:49:62:b5:31:f6:fa:77:f9:13:33:23:99:df:bb:
65:4b:5a:00:1d:0e:34:62:44:ac:61:5a:1a:7f:e5:
26:04:83:3a:d5:84:74:ef:c1:ff:0e:dc:48:2b:0a:
1b:17:6a:ed:e7:8f:5f:91:19:43:ec:e1:b4:10:85:
54:98:60:d1:d2:b1:f4:20:18:8a:6a:e3:70:e1:11:
d2:4f:8b:b5:d2:14:14:91:8e:31:46:c9:62:24:50:
77:ad:7d:fc:4f:5e:2f:40:8c:cc:2c:da:a7:1a:07:
f8:57:fb:5a:be:62:39:df:23:d3:2f:0c:71:8f:9c:
d9:09:85:b5:ad:2a:3e:84:0d:99:7e:e7:d6:af:f2:
af:60:d2:79:e1:15:36:9e:cb:09:81:73:27:9d:6e:
2c:8e:78:40:8a:15:df:70:72:90:b7:75:67:26:1f:
2e:65:64:be:82:4e:ca:c5:4d:01:4a:8e:16:55:5f:
7a:1f:7d:d1:5f:6a:81:f5:5c:3b:2e:2d:d9:f6:e3:
2c:09:61:67:ca:30:69:03:45:db:03:9a:51:66:2e:
96:ce:67:b0:25:7d:4b:10:04:b4:59:5e:f8:99:df:
1c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E4:07:EE:DB:46:5E:E9:C9:C5:63:34:87:41:BB:68:AC:01:61:08
X509v3 Authority Key Identifier:
keyid:0B:4E:3B:3B:84:24:22:58:86:31:42:ED:3A:19:79:2D:97:CB:BC:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C047O4QkIliGMULtOhl5LZfLvHQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/QeQH7ttGXunJxWM0h0G7aKwBYQg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7ba1b1-5562-4a32-9f5d-14d238527835/1/C047O4QkIliGMULtOhl5LZfLvHQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:d940:80::/44
2a0d:d940:2014::/48
Signature Algorithm: sha256WithRSAEncryption
c7:36:67:0f:4f:ac:f7:34:0f:de:b7:c1:ff:62:ec:2e:2a:b4:
07:01:67:0c:8f:8d:00:5e:5e:c7:ab:5d:17:47:52:1f:b3:d9:
d0:74:b8:4d:20:61:71:00:54:cf:56:c2:84:37:46:ab:b5:6a:
e0:ef:84:a8:4b:a0:a3:c3:fd:fb:45:8d:31:01:11:65:4c:61:
bf:30:23:db:3e:2c:20:f7:93:fd:4b:44:2c:c5:82:61:ff:fe:
71:6e:4c:ac:72:f8:55:2a:cd:76:24:72:74:27:52:05:20:b2:
9a:f6:68:5a:44:5c:bf:a0:be:bc:03:93:37:ed:74:0b:e8:8e:
b3:47:78:49:15:7f:f2:7a:e4:7c:fa:94:69:ac:8a:de:67:06:
7c:4b:c1:e0:53:0d:2a:86:d0:ef:9f:75:97:1a:ac:1d:ef:9c:
4f:de:3e:a6:1d:cd:4a:45:d4:cf:8d:48:34:42:7b:73:b0:5c:
0e:9a:eb:7f:27:29:b3:5e:47:1f:c4:96:fa:43:79:d5:08:5d:
79:98:c0:cb:95:07:f6:fa:4d:78:9b:38:80:a8:74:af:a4:30:
53:f9:d6:4e:62:76:2b:64:ca:e4:6a:c9:fe:dc:b5:2c:ae:c3:
df:fb:49:82:e3:4a:b8:da:bc:f8:15:51:2e:ed:fa:a5:e7:3e:
41:bc:69:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 17:44:46 2026 by rpki-client