Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/QK12BT5JU0njlnUjcvy2nll9ISw.roa
File: QK12BT5JU0njlnUjcvy2nll9ISw.roa (raw, json)
Hash identifier: ueRt97cwc8ElR5smVKqO5aokOBz+HYbbrwTAOsyMRGg=
Subject key identifier: 40:AD:76:05:3E:49:53:49:E3:96:75:23:72:FC:B6:9E:59:7D:21:2C
Certificate issuer: /CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Certificate serial: 01A0028C5A830FCB2473676C311A51D0165F
Authority key identifier: F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/QK12BT5JU0njlnUjcvy2nll9ISw.roa
Signing time: Fri 14 Aug 2026 23:12:27 +0000
ROA not before: Fri 14 Aug 2026 23:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3257
IP address blocks: 195.58.142.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:02:8c:5a:83:0f:cb:24:73:67:6c:31:1a:51:d0:16:5f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4d08a1e1cbc909254e9e6b9c939fd85a268b1e1
Validity
Not Before: Aug 14 23:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40ad76053e495349e396752372fcb69e597d212c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:53:d5:e3:ef:ab:92:70:6f:d6:7a:35:aa:26:
37:82:d4:aa:a2:d7:5e:67:ed:29:f7:9f:60:b6:ee:
b6:eb:fa:ce:e3:4f:74:46:9c:7d:fb:b2:f2:57:c4:
d4:4f:27:62:87:34:09:fc:ef:14:15:0b:23:83:4e:
0b:47:8d:d8:94:17:b0:d9:f3:9c:ed:23:9e:aa:33:
e0:3c:b8:b7:99:9e:78:96:e0:6d:d3:c3:bd:7f:0b:
d1:7a:95:64:41:36:45:0e:c2:93:04:4b:96:41:77:
aa:b0:35:80:99:3a:e4:78:32:75:0a:9f:89:01:69:
7b:9e:33:bb:3c:95:c8:c3:1e:40:c6:91:dc:fa:e0:
f9:98:49:c5:07:67:fa:23:e5:bd:30:4d:63:40:1b:
30:60:80:07:cd:5a:54:c7:6a:ee:53:67:ab:61:63:
ca:f0:94:91:f1:a8:2d:38:d2:cb:2a:38:d7:13:a2:
8d:13:7f:76:15:d8:d5:9a:f7:cc:3a:2a:1e:29:c1:
b8:21:ca:8a:73:5b:74:e2:e7:a2:4a:a0:ed:51:a9:
f9:54:27:5e:f4:e1:c0:83:76:47:09:fa:39:37:bf:
7d:f6:5d:6c:25:45:c9:d9:d7:ca:66:09:36:49:a3:
5b:b2:b8:63:a3:6b:8c:8f:92:9b:95:d7:36:59:74:
14:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:AD:76:05:3E:49:53:49:E3:96:75:23:72:FC:B6:9E:59:7D:21:2C
X509v3 Authority Key Identifier:
keyid:F4:D0:8A:1E:1C:BC:90:92:54:E9:E6:B9:C9:39:FD:85:A2:68:B1:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9NCKHhy8kJJU6ea5yTn9haJoseE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/QK12BT5JU0njlnUjcvy2nll9ISw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/649fdc-0d3a-41ec-a1ce-dce947e294b6/1/9NCKHhy8kJJU6ea5yTn9haJoseE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.142.0/23
Signature Algorithm: sha256WithRSAEncryption
1e:30:e2:f4:45:90:b4:3b:c8:a4:b3:3e:76:37:65:89:72:2a:
f3:9a:69:72:ed:18:13:41:3d:ef:61:8d:dc:59:40:97:8b:2c:
01:86:5e:37:0f:50:72:43:a6:56:d5:7c:14:b0:e3:a9:b9:d2:
2f:97:bc:01:f3:aa:bb:95:c6:6f:bd:d3:61:99:93:5f:e3:d8:
7a:4c:3f:df:2c:8c:52:1a:38:8f:d6:34:fb:63:4f:4e:25:ce:
ec:da:08:c1:7d:59:a0:0d:36:87:e8:28:6d:31:17:95:7f:9f:
0c:fd:a1:8f:7a:88:f2:7d:27:a5:86:fd:64:f5:03:8d:ca:21:
1d:ba:9c:10:b0:e5:5a:d3:0f:ea:84:3a:6c:6e:07:3e:1e:c1:
5c:3c:3c:cd:36:42:6a:88:73:64:fd:6c:c2:27:4f:05:aa:86:
ac:82:4e:7b:3e:08:18:bf:2f:b5:50:fc:01:05:a4:a8:a6:ba:
ca:98:e7:54:4a:b4:9c:7c:1d:5a:d3:88:5e:b7:94:8c:f3:7c:
65:a9:6a:03:fc:50:85:ad:d3:1b:e4:1b:fb:0b:7f:6c:44:e8:
fb:06:00:24:d9:8b:ca:71:da:46:b0:5d:48:91:72:fd:47:0f:
44:a0:42:25:01:f2:ef:25:3a:f7:54:e7:3a:53:be:22:65:05:
af:f3:50:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:47:53 2026 by rpki-client