Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/QnFaI3ow-cffiwBxqkoWt4mkYpU.roa
File: QnFaI3ow-cffiwBxqkoWt4mkYpU.roa (raw, json)
Hash identifier: L9K99lMlOY7dnsS5zhvNr+thiKNEY4zaYl8mxhYaaJE=
Subject key identifier: 42:71:5A:23:7A:30:F9:C7:DF:8B:00:71:AA:4A:16:B7:89:A4:62:95
Certificate issuer: /CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Certificate serial: 019CFC92DE87218AEE7E68F0C41296864B30
Authority key identifier: 7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/QnFaI3ow-cffiwBxqkoWt4mkYpU.roa
Signing time: Tue 17 Mar 2026 16:13:29 +0000
ROA not before: Tue 17 Mar 2026 16:13:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5089
IP address blocks: 83.175.165.0/24 maxlen: 24
185.167.219.0/24 maxlen: 24
193.239.178.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.mft
rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:fc:92:de:87:21:8a:ee:7e:68:f0:c4:12:96:86:4b:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ab15fcee6c04589eb2cb350a747c3006f4a17dc
Validity
Not Before: Mar 17 16:13:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42715a237a30f9c7df8b0071aa4a16b789a46295
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:a7:92:1a:1d:62:eb:6d:4e:1b:27:b6:e6:1c:
a0:fa:43:9e:23:6f:53:ba:53:9c:35:09:e7:22:84:
b1:15:f4:68:ac:8a:8c:3f:7a:5c:f8:8d:0a:0e:9a:
3c:b4:d8:5b:d1:02:7c:a8:1c:0b:7e:c8:e4:b4:3c:
ba:27:eb:9a:05:e6:48:34:fa:e9:ec:4e:75:75:82:
8e:35:43:ee:57:51:d3:5e:2d:3e:6b:85:61:33:3f:
ee:06:e3:b6:83:9c:68:3f:05:86:db:b3:07:b5:bb:
de:f7:95:90:37:a8:20:31:63:20:79:e2:28:10:c3:
e2:cb:a7:98:95:6e:10:e0:74:ac:36:02:59:86:ed:
4e:ef:01:07:65:0b:16:ce:c2:90:6f:48:07:11:ee:
c3:2e:04:e6:70:ab:55:64:83:73:47:c5:d7:c9:de:
c3:96:4a:3f:62:50:93:4a:93:0c:aa:09:29:79:29:
c9:31:ec:1d:64:e9:e0:c4:83:bb:8e:dc:16:58:2c:
59:8a:fa:d7:75:ee:45:08:cd:7f:39:fe:cc:a1:9a:
2b:02:ea:24:19:96:bb:0d:4a:c0:46:68:94:f7:27:
da:10:d6:fd:53:20:ba:bc:a0:0a:c4:6a:0c:8f:80:
42:d9:67:b9:4f:7c:32:66:d4:cd:03:ae:31:09:55:
65:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:71:5A:23:7A:30:F9:C7:DF:8B:00:71:AA:4A:16:B7:89:A4:62:95
X509v3 Authority Key Identifier:
keyid:7A:B1:5F:CE:E6:C0:45:89:EB:2C:B3:50:A7:47:C3:00:6F:4A:17:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/erFfzubARYnrLLNQp0fDAG9KF9w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/QnFaI3ow-cffiwBxqkoWt4mkYpU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/a5932e-4607-44ad-abf2-5b5b8485f749/1/erFfzubARYnrLLNQp0fDAG9KF9w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.175.165.0/24
185.167.219.0/24
193.239.178.0/24
Signature Algorithm: sha256WithRSAEncryption
42:61:e6:90:2f:80:a7:ae:cb:e3:99:a2:81:63:ba:b8:e5:9d:
1c:6c:c3:9d:b0:92:35:e2:82:c5:01:79:21:98:99:e4:31:05:
32:b4:07:b9:8a:80:7b:6a:ba:a1:90:ee:04:3b:ea:88:8c:a9:
e5:6e:d0:f9:68:90:41:0c:31:7e:73:94:c9:e4:d3:6a:9b:03:
0f:c2:c4:69:81:a3:df:50:f6:c5:c3:60:22:6f:aa:d0:93:40:
cf:21:28:20:13:4b:8e:dc:60:ad:6c:62:46:b9:c5:d0:78:0a:
61:51:98:a5:77:07:f0:5c:63:bb:25:c0:f4:f1:8c:4d:07:d5:
e8:c1:8f:8b:6a:8e:e2:e2:70:2f:ab:a8:9c:ce:d9:71:3c:05:
aa:77:ba:47:f8:c5:7e:82:fa:76:40:bb:68:17:bf:7e:20:95:
f1:1f:9c:9d:79:c3:b7:dc:34:10:62:ed:38:05:95:c2:30:36:
ea:a6:d5:da:3c:7c:70:6c:8c:77:6c:ee:72:82:66:96:27:6f:
0c:13:f3:d7:57:e5:0f:aa:69:10:8d:f1:06:0a:22:4d:73:13:
96:2a:11:56:14:54:5f:e4:7e:c3:d3:d5:71:d7:58:8e:2c:2c:
6f:60:23:c9:64:ef:48:ff:bf:b3:b9:9b:bd:70:c7:f5:55:15:
bd:5a:4d:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 25 08:29:18 2026 by rpki-client