Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/QMgYo5_wNxg_qK7J8FYlcjLjKok.roa
File: QMgYo5_wNxg_qK7J8FYlcjLjKok.roa (raw, json)
Hash identifier: z9iacb3Rbw61I+ea9IyCW4933amaijBqwswUbO3BTGg=
Subject key identifier: 40:C8:18:A3:9F:F0:37:18:3F:A8:AE:C9:F0:56:25:72:32:E3:2A:89
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019DBAF8968DCEAEB2275D39631079A29F10
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/QMgYo5_wNxg_qK7J8FYlcjLjKok.roa
Signing time: Thu 23 Apr 2026 15:32:26 +0000
ROA not before: Thu 23 Apr 2026 15:32:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 23422
IP address blocks: 152.89.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Apr 2026 21:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:f8:96:8d:ce:ae:b2:27:5d:39:63:10:79:a2:9f:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: Apr 23 15:32:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40c818a39ff037183fa8aec9f056257232e32a89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:3b:e1:d1:94:ed:dc:f0:c0:72:a1:28:ad:14:
28:53:15:a3:35:ea:f3:e0:3b:ff:71:21:c7:8a:3a:
0d:0c:33:3f:03:3e:c6:70:8d:2b:97:b3:31:69:1f:
59:ac:11:ee:02:c8:2b:8a:a4:6d:d6:69:7f:b3:c7:
1c:ac:a7:4a:c3:d3:21:46:07:8d:bd:a6:ff:62:dc:
6a:ed:3a:36:23:eb:a2:ba:85:d8:37:21:64:ea:7a:
f9:08:82:48:f0:89:5a:aa:09:ee:d1:ea:0e:e5:e0:
34:ff:07:02:08:21:da:a7:a8:32:31:9d:ac:bd:54:
f9:87:2e:68:8d:f3:08:bd:ea:21:6c:d3:9c:b0:9f:
06:44:eb:1f:68:64:08:9c:51:ca:11:42:78:4d:a4:
1c:15:85:6d:a9:af:44:01:4f:11:63:01:db:d6:74:
ba:c4:23:e6:52:29:29:77:ec:b6:73:bc:cf:af:ea:
50:47:85:ac:7a:10:09:b8:86:2d:4b:20:61:ce:42:
4a:e9:31:57:b4:6f:f0:23:c7:99:d6:c4:16:f8:6f:
88:b5:a6:3b:ec:de:c7:26:30:0e:cf:fa:e1:df:0c:
a1:a1:64:45:57:1d:9c:a0:40:8e:0a:0f:de:26:b3:
43:1f:8e:ba:84:71:c9:07:e2:7e:a6:2c:e0:7e:f0:
37:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C8:18:A3:9F:F0:37:18:3F:A8:AE:C9:F0:56:25:72:32:E3:2A:89
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/QMgYo5_wNxg_qK7J8FYlcjLjKok.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
152.89.252.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:5c:83:72:98:47:d2:27:a4:69:8a:bc:15:bf:49:87:1a:6d:
46:ca:7c:69:6f:5c:ca:da:b1:68:59:63:8f:ef:31:2a:ff:12:
62:7f:55:b0:6f:a6:1e:28:ce:12:c4:6b:3f:06:d5:33:25:13:
a3:57:90:87:9f:7e:d0:d4:41:24:9e:54:72:22:a1:86:d5:69:
43:ad:f7:e1:f0:b1:24:99:11:8e:e9:c4:d5:dd:d5:8b:c8:90:
0a:69:4f:c7:e9:3b:b3:f0:76:4c:9b:24:7f:94:bc:b4:aa:5a:
1a:70:c7:45:fa:71:9d:89:f8:a8:e7:4a:76:bc:1b:25:a0:fa:
0d:e5:9c:33:e4:45:f3:78:7d:d6:f0:a2:8b:4e:60:e3:1d:99:
f3:ce:e1:1b:2c:4e:14:ad:59:a0:aa:31:95:60:ec:84:1f:93:
d7:34:7c:4d:59:d7:7e:d5:47:71:9e:bb:f4:e4:6f:82:fe:de:
b6:7e:71:ac:ee:2c:b7:62:dd:1a:e7:ae:72:c2:8e:42:be:03:
b7:22:67:37:56:1b:1d:c6:99:a4:39:d9:db:a0:80:b2:a3:6e:
7d:8b:62:95:41:14:24:5e:32:1c:e4:46:cc:0e:d1:c0:ee:65:
0e:40:d2:f5:21:e9:fb:ea:50:c1:c2:86:56:a1:48:24:18:71:
65:34:df:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 29 02:28:41 2026 by rpki-client