Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/Q3Znim6qxleuhiANfuzqn0XQe7Y.roa
File: Q3Znim6qxleuhiANfuzqn0XQe7Y.roa (raw, json)
Hash identifier: xqiLzxwXQFjHq+9P4kBJ5oqn9VLWT6Mr5rM7CUckdIc=
Subject key identifier: 43:76:67:8A:6E:AA:C6:57:AE:86:20:0D:7E:EC:EA:9F:45:D0:7B:B6
Certificate issuer: /CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Certificate serial: 019E4F640A3B92FB618164C373054D67EB5B
Authority key identifier: 88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/Q3Znim6qxleuhiANfuzqn0XQe7Y.roa
Signing time: Fri 22 May 2026 11:13:36 +0000
ROA not before: Fri 22 May 2026 11:13:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211384
IP address blocks: 185.229.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 07 Jun 2026 11:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:64:0a:3b:92:fb:61:81:64:c3:73:05:4d:67:eb:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88fb410a3bfc7340b667b4f221c7cb806267896e
Validity
Not Before: May 22 11:13:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4376678a6eaac657ae86200d7eecea9f45d07bb6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:0e:f1:38:44:06:7a:bb:ee:ab:24:4e:6b:e7:
39:7b:27:61:2d:fc:8d:e7:ca:02:a2:81:e0:50:05:
13:a3:b4:dc:4a:da:40:31:e3:94:79:38:f1:ce:37:
7c:2b:71:2c:32:2e:be:33:4b:6c:ad:5e:fc:30:0e:
bc:a7:4a:41:7b:d6:f4:94:4c:28:88:c9:ce:d4:dc:
dd:9f:c6:9a:07:f5:c5:07:76:28:f2:f5:b2:f2:b1:
6a:4f:64:27:8f:11:16:16:c0:0f:9f:c2:0c:aa:b7:
aa:0c:26:e4:81:38:a3:fa:49:b9:3c:4f:49:33:b0:
c8:c5:e3:ea:9c:bf:2e:29:9c:34:c9:c0:65:55:83:
0d:f4:5b:21:e3:51:98:06:01:1a:7d:e5:aa:e4:46:
54:0f:50:0e:3e:81:11:55:98:bc:70:9c:65:e0:1f:
7e:b3:6f:85:e1:6e:b5:e7:b3:ac:55:f2:0d:8a:63:
05:6d:5b:4f:9c:30:50:fe:f6:82:3d:95:f9:a5:79:
9b:90:52:a1:d2:27:05:6d:62:32:29:77:63:36:ce:
ef:43:e3:24:65:c9:d2:f2:eb:cf:86:b7:4a:11:01:
f7:02:d7:82:40:2b:fa:4f:9a:6c:59:c1:a8:b1:83:
b3:84:c2:ea:c3:1b:85:b5:12:30:3f:bd:dc:ac:94:
08:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:76:67:8A:6E:AA:C6:57:AE:86:20:0D:7E:EC:EA:9F:45:D0:7B:B6
X509v3 Authority Key Identifier:
keyid:88:FB:41:0A:3B:FC:73:40:B6:67:B4:F2:21:C7:CB:80:62:67:89:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iPtBCjv8c0C2Z7TyIcfLgGJniW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/Q3Znim6qxleuhiANfuzqn0XQe7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/44624f-231d-466c-bb02-b38c80951981/1/iPtBCjv8c0C2Z7TyIcfLgGJniW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.229.14.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:1a:71:bd:a2:0c:02:9d:36:dd:8b:79:3f:ad:6e:e1:70:60:
af:2f:b8:32:13:27:f7:70:1b:ac:df:6e:30:25:90:f2:d7:fc:
8d:11:3d:b0:a8:fe:52:cf:31:a4:af:01:b8:c0:b3:4d:8d:11:
aa:15:bb:51:09:62:4b:4c:f0:46:54:04:61:db:92:8c:d4:61:
87:a8:35:9f:20:85:29:60:e5:50:f6:3a:ac:5e:79:95:c8:17:
7a:bd:a2:f1:d8:e2:7a:e5:29:51:75:08:e7:35:84:36:2c:c9:
8d:41:9b:3d:1a:32:06:e5:30:09:0d:52:dc:9e:a9:c6:ab:c3:
82:3a:84:0a:02:17:9b:5f:81:25:06:13:d8:e2:93:32:6f:da:
9b:82:87:c2:2c:a3:fc:90:df:7f:ec:91:8e:30:19:7b:4e:5a:
4b:ce:7a:6c:d9:95:62:4d:44:84:4d:53:f4:73:06:3f:38:6b:
1d:13:b8:fa:b1:33:a3:85:03:cd:0b:38:da:ce:e0:c2:1f:75:
4a:b4:d1:e2:c8:f2:e4:b2:da:48:ee:c8:8d:9d:b2:65:07:18:
c2:78:2e:9b:6b:6c:ca:59:4e:48:fa:a8:d9:a7:59:25:b8:5c:
ec:5a:60:36:ed:ca:3b:2d:6b:cb:6a:c2:25:35:70:77:55:9c:
bc:5c:9b:18
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 6 16:47:14 2026 by rpki-client