Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Qs_IuzPNXXaDrogbt4YH6rt1nog.roa
File: Qs_IuzPNXXaDrogbt4YH6rt1nog.roa (raw, json)
Hash identifier: 3vuWgbw49KgGEd5iwN3/OKf52DnJHYNfjI5mXXrp9k0=
Subject key identifier: 42:CF:C8:BB:33:CD:5D:76:83:AE:88:1B:B7:86:07:EA:BB:75:9E:88
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 019FFB533F2DE0E64C0E3DDE8C4DF169FFE6
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Qs_IuzPNXXaDrogbt4YH6rt1nog.roa
Signing time: Thu 13 Aug 2026 13:32:44 +0000
ROA not before: Thu 13 Aug 2026 13:32:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 60119
IP address blocks: 31.148.96.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 19:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:53:3f:2d:e0:e6:4c:0e:3d:de:8c:4d:f1:69:ff:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Aug 13 13:32:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42cfc8bb33cd5d7683ae881bb78607eabb759e88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f6:6c:f3:0c:19:c5:68:d7:32:65:6d:a2:57:
23:ef:b3:ff:d7:cc:f0:e5:74:b3:03:14:c0:17:cc:
62:66:f9:a7:0b:20:38:6b:a8:ed:b0:1f:f8:b1:f3:
48:ef:17:c3:d2:6c:3c:48:ef:87:4a:70:74:a5:4c:
93:a1:a6:11:a5:ec:74:7a:94:b1:31:d6:c8:2a:e6:
88:c2:f0:30:15:c4:cd:18:ae:13:b4:54:3d:4b:62:
1a:5c:24:38:6e:6d:b5:3e:bf:1c:3f:28:39:b4:6a:
97:29:6d:ea:59:27:88:02:98:39:74:8d:9b:ba:a9:
62:6b:01:9a:0f:ff:39:1b:e7:4c:62:82:be:c8:96:
74:20:aa:8d:6d:53:2e:ed:23:0e:7c:98:0a:74:e6:
58:d5:63:f6:a0:b6:d7:09:7b:51:f5:f4:2b:e2:85:
52:86:8f:d6:b0:26:69:e0:49:26:a7:8c:34:9e:86:
92:22:14:37:14:1f:cc:29:72:fe:3c:b6:57:0d:37:
ee:8a:db:90:40:f9:7f:51:57:c2:17:8e:70:de:08:
c2:6f:db:f2:8e:a9:f6:2d:5c:02:29:a2:d9:a5:62:
de:34:77:b4:d3:f9:d9:09:83:d6:c7:e6:8c:a9:a2:
b8:2b:48:db:91:29:f1:ae:93:76:bc:a8:d1:e4:42:
bb:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CF:C8:BB:33:CD:5D:76:83:AE:88:1B:B7:86:07:EA:BB:75:9E:88
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/Qs_IuzPNXXaDrogbt4YH6rt1nog.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.148.96.0/23
Signature Algorithm: sha256WithRSAEncryption
5b:40:47:26:18:f9:4f:a2:f0:34:bc:e9:39:75:47:8f:27:90:
73:ee:c0:96:a5:79:27:2e:36:2e:f2:b1:ab:9b:5e:88:bb:af:
e5:f8:b5:6e:0c:f9:57:1f:f4:32:13:92:b0:5a:4d:1a:9d:40:
23:b2:57:02:c4:59:4f:53:bb:01:92:93:27:97:d6:02:6e:c1:
c8:44:5c:05:17:9d:c5:65:21:f9:f4:9f:56:a2:f7:55:dc:d3:
36:4a:62:57:52:c2:11:3e:b2:a9:5b:fe:c4:7e:42:5f:d5:6e:
f0:1d:3a:b8:79:17:ba:d0:02:65:2e:b4:59:ee:98:67:97:f9:
9d:b8:d7:2c:0e:3b:e7:74:7f:72:d5:c1:7b:c4:65:9a:b2:1c:
54:a1:13:12:86:84:73:b9:3d:89:0f:c7:32:f1:fd:60:0c:81:
58:3c:54:dd:84:bd:17:e7:44:d1:f0:a8:24:09:7e:88:82:d5:
da:0e:7c:cf:8a:e0:de:f3:bf:6f:c3:d6:a6:c7:4e:af:02:d7:
71:80:bb:5d:47:5d:57:3c:63:c9:d5:cb:c2:cc:f8:2f:09:e7:
74:1c:d2:2e:18:bf:69:93:14:7f:b8:61:9f:54:26:72:4b:4e:
93:34:27:58:6f:65:74:46:cf:ba:c1:90:e3:cb:ee:50:46:7e:
ff:77:bc:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 06:20:26 2026 by rpki-client