Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/QsmDC0xumyz5MRI0VCdCEwmFohI.roa
File: QsmDC0xumyz5MRI0VCdCEwmFohI.roa (raw, json)
Hash identifier: h8GNRtwjDCB9bY1Ozw+rHXsw0nChaonJyo4obxp9+nE=
Subject key identifier: 42:C9:83:0B:4C:6E:9B:2C:F9:31:12:34:54:27:42:13:09:85:A2:12
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 019F2368443284E07CB69B77CB4529899FC2
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/QsmDC0xumyz5MRI0VCdCEwmFohI.roa
Signing time: Thu 02 Jul 2026 15:17:43 +0000
ROA not before: Thu 02 Jul 2026 15:17:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210926
IP address blocks: 2a10:4646:110::/44 maxlen: 44
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 12 Jul 2026 11:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:44:32:84:e0:7c:b6:9b:77:cb:45:29:89:9f:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Jul 2 15:17:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42c9830b4c6e9b2cf9311234542742130985a212
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:1a:5f:00:0e:2a:8f:8e:44:11:ea:cb:85:c4:
8e:7e:eb:02:64:32:43:11:36:a5:dd:cb:c7:55:b3:
84:d6:94:5e:9c:e1:e4:99:7f:45:f7:f5:4d:4b:3d:
4e:ff:8e:00:36:87:d7:dc:62:cd:1e:80:c9:21:ff:
e7:8c:f2:2a:5e:8e:1b:31:89:0d:f3:3b:81:7a:99:
15:6e:eb:ce:32:bc:3c:9e:44:49:00:25:3c:77:a7:
48:fc:98:d7:25:a1:e6:ad:d3:41:47:70:80:8c:e4:
ef:8e:b0:3d:a6:c0:78:a2:64:50:39:50:2a:64:29:
8c:e2:1d:67:0e:8b:eb:20:5e:a5:e2:cd:9e:24:aa:
39:a6:21:ae:e4:c8:78:d2:87:d8:df:22:fa:85:4b:
ff:fc:60:57:05:22:3b:69:bc:70:e7:7d:bd:49:92:
d4:f3:62:10:23:e3:6d:e0:69:1d:82:0c:fd:15:ca:
32:3e:ee:4b:97:ac:6c:93:5a:91:d8:b1:5a:8f:12:
42:84:c8:86:a6:e6:b2:5c:2a:e4:66:38:80:9b:55:
ec:d0:67:c5:f4:64:87:a9:2a:87:a2:3b:67:1f:f7:
36:6e:83:c3:ca:11:54:13:7a:2e:99:26:27:ca:ea:
4b:43:9b:0f:e6:4c:1a:e1:fa:30:ea:6d:c6:fd:58:
0d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C9:83:0B:4C:6E:9B:2C:F9:31:12:34:54:27:42:13:09:85:A2:12
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/QsmDC0xumyz5MRI0VCdCEwmFohI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:110::/44
Signature Algorithm: sha256WithRSAEncryption
61:26:d0:69:3b:c9:57:26:e2:a1:cb:c3:78:9b:72:ce:90:bd:
70:e6:52:d7:10:2e:d4:e6:74:e3:cd:67:d7:a2:70:c2:44:3f:
d1:4a:0b:d5:54:40:32:8e:bb:fe:68:63:c2:ed:67:d4:1c:58:
63:33:17:96:42:a3:9c:de:a1:9c:93:f0:bd:20:74:46:0f:5f:
d8:52:74:14:52:8e:27:ae:23:ed:e5:bf:0c:b2:89:3f:f2:04:
0b:c3:3f:25:a6:98:10:d3:2c:b9:93:af:b7:c2:86:ab:ea:d4:
df:08:2e:21:99:ab:d4:aa:a6:26:ad:d3:c5:82:f6:e9:72:c6:
f4:7f:e9:1d:99:e1:40:4c:4a:45:6f:59:00:d8:73:24:d0:84:
c9:7f:d9:c6:ae:4f:89:b5:6b:57:e3:33:a1:b1:cf:25:60:bf:
1a:9c:5d:8b:bb:66:0a:9b:3f:e5:fe:46:b6:ee:2a:41:33:c0:
4a:67:39:7f:70:58:49:54:8a:40:d6:eb:7d:e6:7c:72:5b:b9:
fd:e8:29:dc:83:ab:b7:4b:b3:37:7c:2c:5d:eb:b9:05:34:2b:
ad:eb:4a:91:9a:35:3b:ec:03:8d:aa:57:54:20:22:11:cd:98:
2e:55:53:a8:ae:6e:90:3a:ee:a6:23:d9:37:e8:2c:99:7a:e8:
a3:85:93:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 11 15:57:31 2026 by rpki-client