Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/QUK2L5AWU_9w_3kxaWGjbhLyJrc.roa
File: QUK2L5AWU_9w_3kxaWGjbhLyJrc.roa (raw, json)
Hash identifier: F4/pU/PhPopekuJRq7HJcZzChwkEwoZXn8wnY5Dq3Ok=
Subject key identifier: 41:42:B6:2F:90:16:53:FF:70:FF:79:31:69:61:A3:6E:12:F2:26:B7
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019FC9580363B940E3673FC768856BEFBECE
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/QUK2L5AWU_9w_3kxaWGjbhLyJrc.roa
Signing time: Mon 03 Aug 2026 20:36:56 +0000
ROA not before: Mon 03 Aug 2026 20:36:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214159
IP address blocks: 195.21.132.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 16 Aug 2026 01:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:c9:58:03:63:b9:40:e3:67:3f:c7:68:85:6b:ef:be:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Aug 3 20:36:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4142b62f901653ff70ff79316961a36e12f226b7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:81:1f:20:ba:de:8e:d4:58:2e:ac:df:e6:47:
2d:cc:b1:3c:97:ca:f1:ff:7f:6c:b4:1f:80:0f:68:
72:81:7c:ed:68:77:fd:b6:78:85:2e:27:f0:eb:18:
a7:36:1d:72:4d:56:62:1b:51:2f:4b:fb:c9:a8:26:
a4:d7:78:fd:c3:6d:fa:cf:07:cc:67:a3:56:a6:70:
58:47:fb:88:0c:bb:6e:1f:75:c8:ca:3b:5b:05:77:
81:4f:26:8f:33:4c:02:44:39:b5:6c:df:11:bf:ea:
4a:34:ab:01:6c:07:83:42:3a:06:9c:05:ec:b5:27:
10:d5:c5:95:bc:fb:62:4b:af:8b:ba:ee:f2:78:2e:
38:44:f2:d5:97:5a:55:a3:8e:06:66:4c:ca:81:9c:
f1:c7:63:f0:ea:1f:c7:2f:e0:77:47:7e:7a:d4:6c:
65:aa:5a:1b:bf:13:3d:3f:17:00:21:95:b0:5f:6d:
51:22:07:8c:00:74:9d:f6:cd:fc:28:4f:d9:0d:ac:
43:66:00:af:ab:79:26:9a:94:7f:66:2a:c8:f5:99:
08:39:d1:34:f5:f7:54:80:a2:22:32:13:02:c5:5d:
f3:b3:a9:54:d3:0d:95:75:96:d5:da:39:ff:2d:99:
75:1a:6c:93:73:27:f0:92:6f:88:85:e4:32:11:b9:
42:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:42:B6:2F:90:16:53:FF:70:FF:79:31:69:61:A3:6E:12:F2:26:B7
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/QUK2L5AWU_9w_3kxaWGjbhLyJrc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.21.132.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:5e:32:25:e4:5d:15:9a:d5:2d:76:39:12:d0:07:43:a5:46:
c8:27:14:ab:a9:2b:1f:a5:95:92:86:e7:6a:72:9c:d3:c1:d5:
d3:17:94:0d:9a:26:c3:30:cb:4c:12:af:bb:a3:22:29:eb:5e:
f5:68:a9:7e:e9:4d:65:5f:9a:46:5e:65:d0:48:1f:5f:30:a4:
ee:13:d1:82:95:4a:1a:7a:5a:01:67:6c:4c:56:6c:7f:59:63:
40:02:45:46:42:77:0e:b3:be:03:d6:87:7d:00:3a:51:f8:6c:
57:7e:8d:45:ab:9f:9d:9d:4b:05:52:57:d9:ef:7a:36:c5:8a:
5a:bb:66:2a:a5:eb:a2:4e:f2:b1:bb:ae:8a:90:6a:5b:31:a9:
68:04:28:47:2e:1e:50:8d:2a:18:f2:cd:b5:d1:00:79:bb:48:
21:cb:53:24:3f:4f:0a:65:ac:8b:2b:6f:da:ad:e4:6b:18:10:
a5:ad:98:9c:70:e1:53:74:31:7e:d9:d6:09:6c:bb:03:c2:62:
17:86:1f:9a:19:5a:4c:a1:31:3a:4d:fe:99:81:d8:58:f2:27:
d6:e4:80:54:c0:97:8c:86:32:47:9e:6e:02:8e:23:42:d5:45:
43:c5:05:a4:a4:02:64:13:4d:04:2f:4c:53:4a:d2:8e:a0:cb:
84:5d:fb:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 10:26:37 2026 by rpki-client