Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QPnh7imGvzGc113GA8Np9brVBe4.roa
File: QPnh7imGvzGc113GA8Np9brVBe4.roa (raw, json)
Hash identifier: oLFESpUcGiiel+OWQufCnZAdA/9C/USUL5IPZmkL2DM=
Subject key identifier: 40:F9:E1:EE:29:86:BF:31:9C:D7:5D:C6:03:C3:69:F5:BA:D5:05:EE
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A09A075DE0A1712A2A1E986886AB71ABC0
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QPnh7imGvzGc113GA8Np9brVBe4.roa
Signing time: Sun 13 Sep 2026 09:09:29 +0000
ROA not before: Sun 13 Sep 2026 09:09:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214430
IP address blocks: 2a06:de02:2d::/48 maxlen: 48
2a06:de02:2e::/48 maxlen: 48
2a06:de02:2f::/48 maxlen: 48
2a10:2f00:12c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 09:14:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9a:07:5d:e0:a1:71:2a:2a:1e:98:68:86:ab:71:ab:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 13 09:09:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40f9e1ee2986bf319cd75dc603c369f5bad505ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:55:c6:1d:45:11:b4:43:d3:15:30:5a:bc:a6:
bd:99:fc:2f:30:ee:f7:7e:54:57:31:3e:78:09:8e:
ee:98:3b:9f:09:b9:cf:f3:d3:ab:b2:68:1d:59:03:
ca:d8:23:a7:ff:9b:58:83:99:44:2a:bc:94:16:7c:
ef:dd:5b:bf:2b:06:f1:f0:df:c9:33:cf:6e:ed:63:
85:46:6b:2e:15:f3:c4:5d:de:a2:d5:72:4d:fe:15:
7e:e6:f8:4c:3f:73:33:73:94:21:89:ba:86:63:0e:
5e:64:0d:3a:e1:ab:17:54:b8:e6:0d:2d:2b:a0:5e:
e3:f0:d1:ad:f6:0c:85:23:71:7f:b2:02:de:60:85:
9d:da:8e:4a:e3:02:3e:ad:a9:c3:9b:c4:9e:a3:c7:
4f:3d:96:e0:bf:c9:2b:44:0c:9d:80:1f:81:84:15:
d5:85:28:f6:09:76:63:4c:b8:9d:c7:b3:60:e9:67:
39:6d:98:19:ea:51:f4:e5:1c:85:b2:fe:75:2e:63:
52:2d:ff:85:0d:a7:97:88:aa:c4:20:d9:27:45:bc:
0a:d1:46:a2:eb:8f:d6:51:3e:fb:4f:4a:ff:29:79:
0b:9b:ab:9e:0b:74:ca:91:90:38:bd:db:a2:0c:7a:
a0:f5:cf:e5:42:80:1f:0d:6a:b4:01:bc:33:cc:0c:
d9:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F9:E1:EE:29:86:BF:31:9C:D7:5D:C6:03:C3:69:F5:BA:D5:05:EE
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QPnh7imGvzGc113GA8Np9brVBe4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:de02:2d::-2a06:de02:2f:ffff:ffff:ffff:ffff:ffff
2a10:2f00:12c::/48
Signature Algorithm: sha256WithRSAEncryption
98:6d:ba:0e:2d:f4:d5:26:fa:a1:eb:fb:65:cb:a4:08:af:b5:
ad:85:21:c5:5c:dc:c1:4a:1e:4e:98:eb:52:15:3f:26:83:fc:
7e:35:6a:d8:90:9b:60:6b:8e:70:24:e6:08:11:15:13:e6:28:
fc:67:b2:e4:e2:43:a9:2e:77:ec:c9:13:29:f2:9d:08:8f:02:
8b:a9:56:87:0d:04:63:5f:82:e5:a0:cb:18:6d:35:08:48:23:
e0:0b:4f:33:d1:80:76:37:b3:e1:33:a0:1f:e1:d1:00:b9:01:
cd:21:57:a8:9b:29:2f:95:b5:22:f3:38:f2:75:0c:93:74:b0:
cc:c1:14:91:da:1a:69:d3:a4:e8:d0:00:66:a8:eb:2b:3b:9f:
9b:3c:d3:e3:c3:54:94:f6:18:6c:6e:f9:1f:11:06:93:fd:7c:
9a:20:97:3f:4e:08:93:cf:95:b4:29:8f:0d:04:4f:c2:65:ae:
b6:80:1c:e0:06:f9:f6:27:15:81:df:eb:fc:ad:83:75:34:04:
14:35:3c:61:d8:ac:1e:96:21:e3:6a:84:72:f6:b0:63:9a:fc:
be:76:a0:ac:da:18:fe:9f:26:bd:01:25:a8:10:ae:1f:16:0a:
9e:19:a3:c0:ef:22:f0:95:8f:b6:5b:cb:ba:0d:2b:39:ad:63:
fa:cc:bd:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 20:30:41 2026 by rpki-client