Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/QOSsFP4pJdHyAdvhrxqntGTF7CM.roa
File: QOSsFP4pJdHyAdvhrxqntGTF7CM.roa (raw, json)
Hash identifier: ssD4wTN37iJatIhwr04F+twAvK3unQGE6FHRrwNf19Y=
Subject key identifier: 40:E4:AC:14:FE:29:25:D1:F2:01:DB:E1:AF:1A:A7:B4:64:C5:EC:23
Certificate issuer: /CN=3ad734cf90c773428806b968209515b914831a9d
Certificate serial: 01A06B9EBD5EAC450B4F54145DD3D8E519D6
Authority key identifier: 3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/QOSsFP4pJdHyAdvhrxqntGTF7CM.roa
Signing time: Fri 04 Sep 2026 08:52:40 +0000
ROA not before: Fri 04 Sep 2026 08:52:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 401362
IP address blocks: 91.217.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 21:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:6b:9e:bd:5e:ac:45:0b:4f:54:14:5d:d3:d8:e5:19:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3ad734cf90c773428806b968209515b914831a9d
Validity
Not Before: Sep 4 08:52:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40e4ac14fe2925d1f201dbe1af1aa7b464c5ec23
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:1d:bd:a5:17:c7:1f:82:82:c8:89:88:bd:4f:
c7:6a:a3:c4:26:08:7b:38:68:46:73:37:c5:5c:de:
44:c9:b6:c0:64:f9:75:23:49:24:a9:61:5d:f0:c3:
ed:dc:bc:05:64:68:c2:a3:4e:6b:d5:f4:74:f2:19:
ff:c0:c8:29:af:d3:4b:7c:4f:88:a7:52:7f:4b:21:
7f:21:47:66:30:97:d9:f7:29:2f:cd:20:53:ae:45:
07:5f:57:40:53:93:2b:3f:27:7d:92:ed:ac:9e:bf:
a8:b4:5c:61:2f:8c:20:e2:23:b1:66:ad:9a:8c:24:
61:00:89:3b:59:d0:60:ac:19:2c:84:c2:fd:82:7b:
d7:5b:a3:3e:15:57:05:3a:b7:1a:e2:e6:2d:7d:0f:
23:52:98:e9:0d:f8:de:34:e5:5a:8b:39:f3:17:e4:
b9:69:b6:5d:42:9c:a0:e0:44:aa:5a:16:09:0f:a0:
3f:17:bd:1c:ab:f3:5c:30:a0:b4:c3:f8:b0:0e:20:
ef:50:e8:8b:7f:c1:ba:b5:8b:0a:71:fb:88:68:73:
4c:c5:b6:be:38:b2:c1:3e:d5:4f:29:5a:7b:13:e5:
d7:6e:5a:2b:9b:64:30:3b:36:31:9e:91:b1:14:4e:
d7:38:e8:0b:fd:99:dd:bc:a9:9e:bf:87:a0:e8:16:
d2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E4:AC:14:FE:29:25:D1:F2:01:DB:E1:AF:1A:A7:B4:64:C5:EC:23
X509v3 Authority Key Identifier:
keyid:3A:D7:34:CF:90:C7:73:42:88:06:B9:68:20:95:15:B9:14:83:1A:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Otc0z5DHc0KIBrloIJUVuRSDGp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/QOSsFP4pJdHyAdvhrxqntGTF7CM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/41/ebf381-00c8-480d-a66c-76a1d4d83197/1/Otc0z5DHc0KIBrloIJUVuRSDGp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.217.223.0/24
Signature Algorithm: sha256WithRSAEncryption
10:20:92:ed:65:84:40:8f:85:8d:88:8b:1f:b4:01:50:8c:81:
12:46:e0:8d:5a:69:98:3a:c7:72:7f:2d:61:41:eb:73:5c:59:
f2:f9:c0:1b:d3:9d:5b:50:b1:58:2a:9f:04:f9:10:d2:87:4b:
3d:ab:16:ef:b2:3b:af:04:e6:69:d4:29:bc:2e:8f:a0:91:e0:
78:5a:73:d5:55:59:50:92:5f:68:7b:fd:c7:9c:e6:8a:c9:0f:
85:c0:06:41:a5:f3:a5:4f:27:fb:52:7c:02:fe:42:f6:e8:fc:
2c:d6:fb:90:21:b9:8a:32:b4:e3:4e:6a:16:9b:f7:6c:46:e3:
bc:74:ee:39:b1:9b:03:b0:c0:93:ec:93:6c:31:6e:af:fa:2c:
21:0a:25:a0:15:8a:1f:3e:53:b3:f5:2c:86:ba:f0:11:52:1a:
c3:08:95:bf:cf:6d:0e:dc:4c:da:35:14:50:33:b1:7d:72:0f:
7e:05:dd:66:5d:05:e3:63:52:0d:2a:61:16:bf:57:aa:46:c9:
9b:40:43:a5:a0:6a:60:4a:8d:56:4f:2c:c5:e8:74:1f:5d:69:
a0:49:57:88:93:d5:5a:03:8a:31:5b:3d:4d:24:bd:2f:4d:7d:
00:5a:b6:3a:5b:b2:76:cd:2a:d3:47:4e:f1:ff:b6:c2:6b:28:
7b:d9:b2:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 11 02:55:02 2026 by rpki-client