Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QbVGsFeyaKWiUbVnyjqa_CxvFj4.roa
File: QbVGsFeyaKWiUbVnyjqa_CxvFj4.roa (raw, json)
Hash identifier: 07wuNY8CY+rvcLq1delKkp1b3dGV96KqYCviSsvm5NE=
Subject key identifier: 41:B5:46:B0:57:B2:68:A5:A2:51:B5:67:CA:3A:9A:FC:2C:6F:16:3E
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019CBD68366E2C2EADA06046038778B66647
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QbVGsFeyaKWiUbVnyjqa_CxvFj4.roa
Signing time: Thu 05 Mar 2026 09:50:49 +0000
ROA not before: Thu 05 Mar 2026 09:50:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 80.96.68.0/24 maxlen: 24
80.97.124.0/24 maxlen: 24
80.97.128.0/20 maxlen: 20
81.180.92.0/23 maxlen: 24
85.120.81.0/24 maxlen: 24
85.121.4.0/23 maxlen: 24
85.121.149.0/24 maxlen: 24
85.121.183.0/24 maxlen: 24
85.122.114.0/24 maxlen: 24
194.102.105.0/24 maxlen: 24
217.156.8.0/23 maxlen: 24
217.156.64.0/24 maxlen: 24
217.156.65.0/24 maxlen: 24
217.156.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Mar 2026 16:05:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:bd:68:36:6e:2c:2e:ad:a0:60:46:03:87:78:b6:66:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Mar 5 09:50:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41b546b057b268a5a251b567ca3a9afc2c6f163e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:53:50:67:9d:26:93:0c:c1:ac:80:d9:44:1a:
dc:3d:a4:f0:f5:fa:9d:3d:ff:94:c0:1e:26:54:4b:
79:e6:0d:29:8b:f5:f4:48:d7:37:a5:97:34:69:5f:
f1:85:0e:71:e9:b2:f4:c6:38:b4:85:63:17:dc:b4:
7c:fc:e1:52:a6:de:2d:c1:2d:a0:1c:2a:4c:47:51:
e5:bf:ea:01:66:ee:eb:91:6b:81:2f:16:fe:89:d1:
8f:d7:b8:db:d1:23:1f:43:84:fd:dd:17:20:cd:83:
e4:e9:c6:d7:a0:67:bc:39:25:79:a0:4b:f7:2c:9d:
b5:e6:d7:45:cb:be:eb:28:21:cf:7d:fe:e9:e6:7f:
5e:b5:b6:e4:a1:a2:f1:11:e2:d0:6b:ca:d9:0b:05:
dd:85:29:1f:c7:01:e7:26:0e:80:d0:d6:7f:8c:88:
f4:60:5d:57:74:2c:d4:a0:56:15:d0:20:e5:25:eb:
6b:b6:b9:86:64:b3:dc:d4:ac:3b:30:2f:df:ca:39:
0a:7c:e8:9a:db:d5:08:ba:6f:8a:0a:cf:7b:4f:b6:
68:23:54:52:f6:af:0d:c7:b0:4e:47:86:03:c1:f1:
cc:75:88:aa:f9:d9:0f:19:22:e2:31:ba:20:56:d3:
a0:0e:9e:c7:c3:30:47:46:d6:9e:99:28:19:57:10:
d5:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B5:46:B0:57:B2:68:A5:A2:51:B5:67:CA:3A:9A:FC:2C:6F:16:3E
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/QbVGsFeyaKWiUbVnyjqa_CxvFj4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.96.68.0/24
80.97.124.0/24
80.97.128.0/20
81.180.92.0/23
85.120.81.0/24
85.121.4.0/23
85.121.149.0/24
85.121.183.0/24
85.122.114.0/24
194.102.105.0/24
217.156.8.0/23
217.156.64.0/23
217.156.123.0/24
Signature Algorithm: sha256WithRSAEncryption
77:fc:84:20:f9:80:ed:ff:cc:3e:8e:9c:0e:f4:9d:08:0f:45:
69:aa:b0:5b:00:74:96:eb:9f:d9:95:bb:f8:d1:e3:5e:36:51:
03:63:be:7f:e8:e9:92:df:26:8a:15:83:2c:fb:3a:bb:33:f3:
0a:84:b4:dc:db:89:81:45:6f:b6:f9:a0:40:91:cb:8e:6b:83:
1c:10:f5:92:72:45:7c:42:ee:c5:cd:02:38:8c:81:ca:3c:68:
74:1d:48:7f:48:34:5b:3c:05:84:0b:97:0d:f5:bf:d7:0e:e9:
f1:00:aa:54:05:cc:6b:93:a5:df:fd:c3:35:2f:88:c5:e4:1e:
cd:2b:ff:1f:21:75:7d:de:42:86:34:3b:84:6b:b9:41:d0:83:
ed:c5:94:ff:ab:a1:f3:bf:d8:76:6c:28:d8:2e:c2:ea:58:76:
d5:a1:2d:65:7f:2d:5a:8b:f4:e8:6f:f0:f1:f5:e7:48:03:de:
a4:a5:ef:ea:a5:41:0b:d3:72:8d:93:be:00:92:b7:a9:50:c8:
e4:37:04:c9:e1:73:7c:34:5f:3b:b8:bc:7e:d5:e8:80:2f:34:
99:c0:2d:b6:10:ae:0c:d5:e1:4d:de:11:7b:85:88:7a:36:e7:
c8:e1:c7:9d:7c:6a:ba:9c:e4:69:5d:66:5a:41:5d:16:f0:5f:
3b:6f:ad:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 6 02:25:17 2026 by rpki-client