Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QIPFdxMFxllrL23fhTScJITpmPg.roa
File: QIPFdxMFxllrL23fhTScJITpmPg.roa (raw, json)
Hash identifier: KD8wKR28Bo9bp7GV9fPlA5PALHHSMAzJp2G45baryws=
Subject key identifier: 40:83:C5:77:13:05:C6:59:6B:2F:6D:DF:85:34:9C:24:84:E9:98:F8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019FD5D41AE9211C668E9B07FDECFAD22756
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QIPFdxMFxllrL23fhTScJITpmPg.roa
Signing time: Thu 06 Aug 2026 06:47:55 +0000
ROA not before: Thu 06 Aug 2026 06:47:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206491
IP address blocks: 5.230.5.0/24 maxlen: 24
85.118.162.0/24 maxlen: 24
178.18.146.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 17:22:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:d5:d4:1a:e9:21:1c:66:8e:9b:07:fd:ec:fa:d2:27:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Aug 6 06:47:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4083c5771305c6596b2f6ddf85349c2484e998f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:2e:47:29:af:4c:fc:da:aa:8c:f5:2a:a8:44:
a5:7a:a0:27:d0:39:af:e7:eb:eb:c2:e9:8a:d6:3c:
50:ec:3d:a6:ef:f8:e4:e6:59:a0:d1:56:ed:10:fc:
45:c6:26:cd:54:d9:90:74:cd:7a:56:55:11:e6:06:
52:d2:ba:35:c1:b5:17:f3:69:f9:f3:ff:ff:d8:4a:
14:2e:1e:73:b2:4f:0a:bd:72:e0:b0:70:c5:07:4e:
0f:72:d4:4f:9a:3a:fe:80:7c:a9:a8:40:52:93:81:
e0:10:5a:1e:45:9c:8d:ba:9b:68:a7:b4:63:b6:56:
f0:2b:d7:a0:65:67:96:d8:89:ef:92:c5:86:9e:f9:
e0:77:df:b5:b5:b3:9a:19:ee:01:6b:27:2a:1c:ba:
f1:d9:fd:09:e0:08:09:92:9c:f1:aa:df:78:0e:93:
b7:96:68:0d:5c:22:0e:b8:d7:db:6f:3e:02:12:81:
22:9b:03:62:d6:59:90:76:7e:10:cb:de:9d:40:36:
e0:b9:ec:b8:61:be:34:4f:f3:8b:9e:e1:c7:ea:94:
50:49:0b:4a:27:7e:c6:26:5e:0c:93:76:f5:33:d8:
b0:12:6f:26:3b:8e:82:d3:70:5e:82:a3:71:5b:c9:
1e:66:ad:32:70:b3:3a:79:6a:72:6d:b1:b1:b1:34:
df:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:83:C5:77:13:05:C6:59:6B:2F:6D:DF:85:34:9C:24:84:E9:98:F8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QIPFdxMFxllrL23fhTScJITpmPg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.230.5.0/24
85.118.162.0/24
178.18.146.0/24
Signature Algorithm: sha256WithRSAEncryption
94:71:6f:4e:33:7e:40:c2:50:9c:9b:72:f6:70:63:24:61:4f:
bb:c6:a9:4f:0f:08:f9:5a:26:cf:db:e7:e2:c5:d9:39:70:6c:
63:45:d4:89:70:4a:fc:4d:e7:5b:bd:8e:99:cc:bc:8f:f5:db:
db:8c:d5:5c:89:95:02:d2:8e:e0:4b:b8:02:89:c8:d0:cb:d1:
16:81:8f:c9:41:ac:b5:3b:ef:46:d9:4e:af:26:9f:11:b7:4c:
cd:3f:08:a7:f2:94:a8:d7:16:a8:ee:a8:78:bd:db:ff:ed:f9:
3f:7e:4e:8b:f3:ab:7f:65:bb:25:6b:f2:90:03:8c:e7:66:b9:
f8:54:a2:eb:43:6d:76:72:64:5f:b5:93:54:a5:af:15:76:80:
45:18:cc:22:ec:2d:89:47:e1:85:bb:e7:67:d8:8d:cb:10:f1:
29:28:29:2b:9f:4a:b1:4d:92:ac:6f:b8:7b:b4:cb:87:f6:0c:
53:6e:3d:c3:e9:46:5f:fe:a7:e8:37:5c:a2:12:99:95:1d:69:
61:10:3c:f5:16:b4:30:b3:f9:22:2e:16:dc:ee:5d:e6:3b:4f:
8a:5c:b5:93:60:f6:38:7e:03:db:d4:04:20:1a:24:08:1a:ef:
61:49:f0:11:c7:2b:48:87:6c:80:a2:ad:53:f2:b3:55:08:f5:
dd:0e:6d:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 01:42:36 2026 by rpki-client