Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/QqWf4NRKHWRSKd4qA58hy0_YXaU.roa
File: QqWf4NRKHWRSKd4qA58hy0_YXaU.roa (raw, json)
Hash identifier: X3rPDn63FW/ELQigDzF2/hZR2l0F8yWCfS81F5WR3pw=
Subject key identifier: 42:A5:9F:E0:D4:4A:1D:64:52:29:DE:2A:03:9F:21:CB:4F:D8:5D:A5
Certificate issuer: /CN=b1267a51acb66f2991bea5243fe388068971a1f1
Certificate serial: 01A1638D9BA5630472F62CD9EB143D9022BB
Authority key identifier: B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/QqWf4NRKHWRSKd4qA58hy0_YXaU.roa
Signing time: Thu 22 Oct 2026 12:19:47 +0000
ROA not before: Thu 22 Oct 2026 12:19:47 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60863
IP address blocks: 185.6.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.mft
rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:63:8d:9b:a5:63:04:72:f6:2c:d9:eb:14:3d:90:22:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b1267a51acb66f2991bea5243fe388068971a1f1
Validity
Not Before: Oct 22 12:19:47 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42a59fe0d44a1d645229de2a039f21cb4fd85da5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:2c:f4:68:82:af:18:af:f0:d7:08:d0:23:ee:
42:aa:3e:c4:f1:47:7c:94:98:3b:f6:4b:a3:00:99:
f5:fa:09:6d:3f:5f:81:e1:96:2e:fa:57:1e:29:49:
12:24:e3:b9:d0:fd:cc:13:31:c5:b7:29:e3:3f:77:
23:78:ec:2f:ab:69:64:22:32:2f:95:ee:98:6a:bb:
c0:9c:7f:a7:53:c3:6d:f9:e4:ab:e8:dc:18:c3:2b:
7b:6b:49:b6:4f:b8:76:4f:52:f8:21:e0:b5:26:e7:
cb:aa:f6:60:a0:23:c0:e6:ba:92:cd:50:54:4d:80:
60:b2:df:61:36:0d:b4:37:be:24:0a:8b:c2:e3:c5:
33:fe:8b:4b:1a:8a:a8:23:88:a9:d8:2d:1b:b0:3a:
55:ca:91:78:19:ae:1e:c9:8b:6f:0f:f2:83:df:6c:
6c:2a:59:27:c1:fd:51:77:5b:51:1b:8e:87:0c:14:
93:32:f4:e8:c1:c6:9d:85:9c:15:d9:45:36:87:f2:
8c:63:63:41:e9:95:ee:5a:74:91:31:d6:62:fd:99:
63:04:bf:19:e2:51:27:9d:1a:02:ac:51:9a:7d:2a:
1c:26:8e:f4:ad:fb:1d:ab:d2:19:95:b8:33:ae:95:
43:ee:db:a5:26:4c:0d:58:4d:eb:54:df:46:5c:a0:
be:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A5:9F:E0:D4:4A:1D:64:52:29:DE:2A:03:9F:21:CB:4F:D8:5D:A5
X509v3 Authority Key Identifier:
keyid:B1:26:7A:51:AC:B6:6F:29:91:BE:A5:24:3F:E3:88:06:89:71:A1:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sSZ6Uay2bymRvqUkP-OIBolxofE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/QqWf4NRKHWRSKd4qA58hy0_YXaU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/d74ca2-3de6-4b69-a000-94d1b89f8cb2/1/sSZ6Uay2bymRvqUkP-OIBolxofE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.6.244.0/22
Signature Algorithm: sha256WithRSAEncryption
05:c7:87:33:92:0b:d3:30:21:4f:e2:aa:d7:a6:1c:b0:3f:f3:
89:26:a8:2f:45:ff:ea:25:be:84:63:6b:ed:60:53:3a:66:4a:
d6:6f:49:c9:86:58:a8:86:27:d7:45:f8:39:d6:e4:c9:e3:5a:
db:b1:0a:43:00:28:57:2e:52:80:7a:6b:36:83:9e:00:32:be:
46:2f:8f:3d:d9:2a:f1:37:95:6d:b3:ca:50:7c:6a:9d:4a:e0:
c0:2b:f6:5d:f7:51:2e:4e:b8:54:94:f9:fc:29:fb:94:24:7d:
75:23:e7:70:61:24:e1:10:ea:23:dd:5d:13:01:ae:e1:17:85:
fd:45:71:b6:e1:cd:c4:79:78:a6:98:dc:56:7c:b4:2c:7e:95:
03:97:18:74:a0:94:5e:e1:6f:aa:7a:01:c8:43:4b:0f:9d:c7:
c8:ae:3c:37:f6:04:a4:0a:87:80:a2:ad:2c:e3:00:9b:88:39:
cf:a2:95:69:fb:4d:14:7f:f3:ca:8f:cc:5d:a6:25:f0:be:0f:
36:8c:2b:0b:8f:f5:de:d1:1a:ca:c6:a4:3e:ff:eb:50:a9:ea:
79:a0:ee:87:94:4c:22:3a:40:bd:60:14:2a:65:62:44:64:c5:
c3:f9:ee:5c:63:a7:8b:5f:47:0f:a1:69:e0:72:29:bc:c9:c1:
b1:76:c5:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 20:01:38 2026 by rpki-client