Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Qgn_2q_8pyRewzLG2johL37CYrU.roa
File: Qgn_2q_8pyRewzLG2johL37CYrU.roa (raw, json)
Hash identifier: tsT4zvqeV6f3PnRQrwLDhoxevnfrJA+ilTlu9c8sjiQ=
Subject key identifier: 42:09:FF:DA:AF:FC:A7:24:5E:C3:32:C6:DA:3A:21:2F:7E:C2:62:B5
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A03982358B75CFB6CB441B6DB949092B03
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Qgn_2q_8pyRewzLG2johL37CYrU.roa
Signing time: Tue 25 Aug 2026 15:20:29 +0000
ROA not before: Tue 25 Aug 2026 15:20:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 31715
IP address blocks: 213.139.226.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:35:8b:75:cf:b6:cb:44:1b:6d:b9:49:09:2b:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4209ffdaaffca7245ec332c6da3a212f7ec262b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:e1:3f:d6:d3:a2:92:6d:dc:c5:b8:e3:2b:bc:
b8:aa:23:80:38:4c:37:2c:2d:72:b2:2b:d2:86:bf:
26:3d:67:82:87:cd:38:46:e1:ef:ca:04:7f:bc:9b:
54:12:89:57:1e:f6:6a:30:9c:d4:46:97:9c:71:0e:
9c:c3:5e:e0:bf:66:1f:5b:e6:80:54:fe:ec:1d:58:
09:c5:82:76:02:2f:b5:ab:62:d9:7e:bd:ae:8d:a1:
08:a6:04:43:69:58:55:85:b6:47:fa:ad:e9:2b:7e:
c3:65:28:75:e1:e2:4e:aa:df:24:8e:88:ad:a7:c9:
26:a9:b8:7c:a4:e9:09:c6:3b:00:35:a8:4c:16:e0:
65:4f:1f:20:5d:a1:e3:4b:4f:2a:50:37:92:59:ca:
aa:8e:0c:fc:77:56:0b:d2:4c:81:b3:c0:6e:57:14:
22:d8:a2:19:3c:c5:73:93:fd:2a:c7:9c:cb:24:7c:
52:ed:df:05:77:2f:66:2d:cb:12:83:bf:3f:a4:82:
77:52:a4:47:bd:01:8d:53:fe:d9:0b:1e:9d:c6:5c:
86:62:b4:95:88:57:fe:0c:59:07:40:64:db:ef:98:
d9:99:c5:f4:e5:e9:ee:91:6c:82:74:81:32:87:92:
31:5d:34:46:30:21:1e:7d:47:49:c8:d4:03:af:01:
2c:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:09:FF:DA:AF:FC:A7:24:5E:C3:32:C6:DA:3A:21:2F:7E:C2:62:B5
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Qgn_2q_8pyRewzLG2johL37CYrU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.139.226.0/24
Signature Algorithm: sha256WithRSAEncryption
62:2f:a9:f2:46:4f:89:dc:76:8f:c8:f2:40:bc:94:a4:f4:b7:
40:a3:e4:c2:f6:13:5a:19:1e:e9:8a:4e:26:6d:81:84:a8:57:
da:8a:1a:56:47:a6:e4:c0:0c:5e:b0:4d:8d:34:c1:1c:2b:ec:
2a:d2:60:cc:51:e7:c2:e7:38:8f:47:87:50:75:b6:c0:7a:cf:
9e:4c:72:15:df:16:74:5f:f6:8b:6e:ee:6a:29:29:1c:c9:45:
34:e9:db:31:90:3d:cc:01:0c:8d:7e:9c:e8:0c:53:18:b1:3a:
d2:52:1e:05:6f:bd:9f:18:06:e7:6c:a6:42:ea:7e:ba:24:43:
bf:56:ae:bd:39:2d:c8:b9:f4:cf:46:30:7e:cf:1a:f6:e1:c6:
d6:ac:71:b1:cd:d6:f9:27:3c:e1:98:6f:40:0b:64:16:c8:4e:
3f:62:c4:2d:3c:dc:cd:7f:65:37:2d:b2:9d:1c:04:dc:ff:8c:
37:1d:47:49:18:2a:57:21:59:56:02:50:8e:6b:15:35:51:92:
1d:8d:b1:15:d9:f4:5e:7c:5c:b9:cd:fc:a5:25:d8:30:17:5d:
91:07:05:da:df:78:40:ab:31:7f:d4:74:72:70:e5:9c:4f:2e:
48:ff:ce:10:51:40:0f:e5:ad:25:9f:39:65:0c:76:e5:89:15:
ac:c4:75:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 27 02:04:31 2026 by rpki-client