Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/QKTTHBUOIQK4LDlW3m8kPnrJJjE.roa
File: QKTTHBUOIQK4LDlW3m8kPnrJJjE.roa (raw, json)
Hash identifier: z/2iCGTl8WNXCyn9RpBKeiKNxsPENY7FPqESDLjDvJc=
Subject key identifier: 40:A4:D3:1C:15:0E:21:02:B8:2C:39:56:DE:6F:24:3E:7A:C9:26:31
Certificate issuer: /CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Certificate serial: 01A0E7E846518CB1B54578653755FDCFFD81
Authority key identifier: DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/QKTTHBUOIQK4LDlW3m8kPnrJJjE.roa
Signing time: Mon 28 Sep 2026 12:05:54 +0000
ROA not before: Mon 28 Sep 2026 12:05:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6260
IP address blocks: 212.124.68.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.mft
rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 14:13:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:e8:46:51:8c:b1:b5:45:78:65:37:55:fd:cf:fd:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfee2bf43f21a81c492c6e6a9fc6f074d2f0a217
Validity
Not Before: Sep 28 12:05:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40a4d31c150e2102b82c3956de6f243e7ac92631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:73:26:11:90:43:8b:5f:31:e2:cc:05:b2:02:
7d:e7:cf:2b:56:34:ca:4d:aa:12:8b:04:73:d1:6e:
8a:5e:bd:2b:61:a3:92:92:83:a4:f3:58:d9:90:89:
95:03:66:6d:ca:cc:f5:d7:5d:c9:b5:bc:77:ef:ab:
1d:05:aa:e8:bc:a5:ea:1e:5c:09:78:49:a3:4a:ca:
49:e8:5b:b8:c4:9c:f6:26:f7:03:9a:1f:2b:79:ca:
f7:39:f3:e3:d1:7f:4e:d2:d8:b9:2d:11:ec:14:82:
2c:b0:b6:ac:35:63:dc:0d:8a:64:b3:2e:a6:f9:45:
a6:c3:89:9b:fa:01:8b:a9:4b:28:7a:19:1b:d0:30:
35:24:d3:f2:2c:5b:67:b6:fa:d2:df:db:96:27:2e:
dc:38:84:d1:a4:ea:ae:fa:01:9a:0b:83:9a:aa:5a:
ae:76:58:12:8d:63:ca:07:e2:77:1c:85:cc:fe:f2:
1c:db:23:70:bc:4f:43:5f:5b:36:fb:e2:f8:b1:a0:
f3:08:ba:01:86:06:f7:4b:d1:c7:1d:93:44:d6:b0:
f2:79:68:fe:01:1a:01:d8:3a:4a:83:83:8d:29:31:
5f:67:82:9a:2c:77:71:1a:9e:97:a8:b2:60:f4:08:
1c:41:75:2c:6b:8e:4c:ec:f5:e9:f3:b4:96:c6:7f:
ca:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A4:D3:1C:15:0E:21:02:B8:2C:39:56:DE:6F:24:3E:7A:C9:26:31
X509v3 Authority Key Identifier:
keyid:DF:EE:2B:F4:3F:21:A8:1C:49:2C:6E:6A:9F:C6:F0:74:D2:F0:A2:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3-4r9D8hqBxJLG5qn8bwdNLwohc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/QKTTHBUOIQK4LDlW3m8kPnrJJjE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/3b3be0-54a7-410f-9d12-28d78eb9f2dc/1/3-4r9D8hqBxJLG5qn8bwdNLwohc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.124.68.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:cf:29:c2:f7:3f:78:72:9a:47:b2:ad:3d:14:c2:11:b2:52:
2d:92:d8:87:9a:9f:1c:99:93:17:a9:30:28:84:19:39:e9:b9:
97:3c:99:ff:66:3d:78:4d:e5:a1:3a:c0:d1:ae:93:6e:28:e6:
c4:1e:8c:a9:ba:d3:fe:40:bf:5c:4c:69:15:7c:ee:5c:54:9e:
38:2f:08:44:29:77:f6:4b:cc:b1:ee:3c:a0:eb:dd:94:39:bc:
f2:b3:a3:4b:c6:ce:30:6b:39:b3:cc:04:5c:e9:01:9f:25:28:
71:89:57:4b:ca:c2:64:12:cf:5d:fa:e8:69:f4:ea:14:b3:56:
99:f7:1f:c3:f5:ed:f4:94:f5:b5:f6:3f:d7:db:ad:f0:df:53:
97:5b:4a:0e:92:81:01:f5:37:88:d8:22:14:d8:3b:a5:a5:86:
05:43:e5:ae:7f:b1:03:10:a3:92:9f:45:42:8c:c9:11:00:26:
8c:ae:16:17:79:e9:6e:84:59:47:1d:75:1c:07:78:78:71:5d:
7c:97:76:4e:f9:58:ea:47:e5:6a:92:99:2e:79:7f:74:db:9d:
87:77:d8:5a:ea:06:0f:97:54:38:d8:7e:07:7f:6f:7b:d6:fc:
67:d9:03:60:a0:db:0b:c9:c6:bc:5a:bc:3f:0b:c5:d6:9b:32:
2d:c9:92:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 21 19:43:47 2026 by rpki-client