Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QZxXdlUYPc4v1TXAwYW09F94HeE.roa
File: QZxXdlUYPc4v1TXAwYW09F94HeE.roa (raw, json)
Hash identifier: vCXnWWc4gCJUM1ID1Jt/Fz2IDVAXfzFKnmXxx2sACGw=
Subject key identifier: 41:9C:57:76:55:18:3D:CE:2F:D5:35:C0:C1:85:B4:F4:5F:78:1D:E1
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019EC670A8C26A1EC4119CB4A51AB15159DF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QZxXdlUYPc4v1TXAwYW09F94HeE.roa
Signing time: Sun 14 Jun 2026 14:02:12 +0000
ROA not before: Sun 14 Jun 2026 14:02:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219496
IP address blocks: 94.249.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 18:43:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:c6:70:a8:c2:6a:1e:c4:11:9c:b4:a5:1a:b1:51:59:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 14 14:02:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=419c577655183dce2fd535c0c185b4f45f781de1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:48:52:35:73:18:db:65:cb:8d:19:2a:58:9f:
00:cb:ba:1f:1d:7b:14:a2:45:07:67:77:0b:01:48:
8f:12:a7:06:fc:b0:54:ec:b9:80:07:e1:89:47:97:
c6:70:3b:65:db:d8:b7:0c:d8:83:23:ab:b8:42:d7:
fa:a6:05:fe:b5:2b:dc:d9:b3:34:c5:cf:ea:4c:0b:
bb:ce:9d:91:60:c6:a2:a4:5d:42:99:41:48:49:c1:
e5:1f:9d:ed:3b:6f:7f:4e:80:c9:79:fd:df:2d:0e:
aa:a8:ea:e6:7d:6c:55:28:2b:77:b3:3b:da:07:cc:
26:2c:88:91:f2:5f:62:3c:87:54:c7:48:c3:37:e2:
1f:9f:fb:b6:0d:e8:ee:c3:20:b7:75:3d:bc:58:b1:
82:c9:b8:7d:55:46:34:4d:e9:16:13:fe:d6:4d:c6:
1d:b9:c6:94:50:7c:cb:9f:35:dc:aa:d3:df:57:2b:
cd:72:31:33:77:04:b6:20:d9:17:d1:a5:b5:15:52:
83:e8:9a:7e:e5:b1:8d:12:56:74:9b:9c:3d:6f:04:
dd:f2:ac:b9:94:23:5a:36:3f:af:06:c8:c0:77:eb:
1b:35:ae:d3:17:e7:81:3c:5a:23:09:8d:2e:23:3c:
cf:08:56:9e:f3:af:1e:4d:4a:8f:d7:d9:9e:91:2e:
8c:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9C:57:76:55:18:3D:CE:2F:D5:35:C0:C1:85:B4:F4:5F:78:1D:E1
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QZxXdlUYPc4v1TXAwYW09F94HeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.241.0/24
Signature Algorithm: sha256WithRSAEncryption
65:ff:08:d5:11:35:fd:c4:b6:4b:a3:82:d7:53:ef:18:8b:30:
1f:d6:0e:98:5d:a8:f2:c3:19:37:ef:7a:09:5f:6c:f6:f5:66:
21:23:5e:fe:d6:43:3d:9e:fe:c7:d9:47:7c:f5:11:ae:d9:ae:
93:f4:63:0a:46:d0:02:68:de:f4:84:f1:25:de:99:e3:03:74:
1b:c3:77:40:3b:0d:93:4b:e1:08:9a:d7:9a:7e:68:77:7b:1b:
bd:d3:94:fc:e7:79:20:02:8a:59:d2:de:1e:15:35:25:d7:44:
67:08:22:ae:31:d9:52:f9:72:50:f3:ff:01:f4:b9:54:38:9b:
91:04:15:70:24:0d:d8:ce:09:8f:46:ec:41:b9:86:59:e2:61:
09:78:8e:02:1d:8c:8b:57:95:09:59:ad:ee:15:2f:08:bb:8a:
9f:82:35:5e:03:59:ba:68:50:c3:f3:de:d8:67:b9:42:76:23:
e1:4a:41:8a:18:bd:36:3a:19:5f:30:e4:6e:36:6e:7d:f7:e3:
39:e7:28:3b:20:ee:09:35:bc:0d:37:7d:ae:36:d5:6e:d5:7f:
aa:e8:ca:c1:ee:9e:20:f8:47:5d:a8:da:47:b2:99:e2:e5:ee:
1b:39:4e:de:42:d6:93:91:04:2b:39:34:b2:df:9d:f6:1b:e6:
93:aa:02:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Jun 28 04:02:10 2026 by rpki-client