Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa
File: QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa (raw, json)
Hash identifier: Rll5oOTs7j8UzHs/imFhP7b3Ziq5FCxfwcEt7Ya0/xU=
Subject key identifier: 40:44:15:DD:65:59:EE:1E:3E:C3:A9:82:1C:54:0C:0E:E8:66:18:E8
Certificate issuer: /CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Certificate serial: 019ED61FCAA039CE0A080E783D9E98DFC6F4
Authority key identifier: B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa
Signing time: Wed 17 Jun 2026 15:07:48 +0000
ROA not before: Wed 17 Jun 2026 15:07:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44821
IP address blocks: 185.240.157.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 20 Jun 2026 12:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d6:1f:ca:a0:39:ce:0a:08:0e:78:3d:9e:98:df:c6:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b3d5ec1516ee6dc19d1e5c3998cb7e7a646f715a
Validity
Not Before: Jun 17 15:07:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=404415dd6559ee1e3ec3a9821c540c0ee86618e8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:96:b7:bd:6e:7c:69:3f:44:fe:8e:0c:1c:4b:
15:72:51:1a:4a:f6:a2:2c:0a:ac:5f:ad:f8:83:d1:
02:4a:57:f9:fd:4e:e3:12:b7:0d:0b:d9:dd:dd:45:
1f:6f:92:39:d8:ba:92:2a:34:ba:0b:9f:fc:d2:3f:
8d:b7:72:36:fe:08:f5:a7:35:fb:c8:bb:98:f5:41:
5d:40:e4:1f:34:18:1f:cd:cb:cf:0f:ec:3e:7b:55:
0c:14:67:ff:c9:eb:81:13:5c:4f:58:16:bc:5c:36:
d3:44:ad:64:1a:51:3c:cf:90:d9:2a:e6:40:8c:0b:
2e:c4:d7:3f:76:ab:dc:1a:10:26:e3:ca:43:ef:93:
40:3b:e8:cf:ca:86:21:2c:a9:28:1e:41:ad:67:f9:
bb:e5:61:fa:6f:47:05:24:75:fe:b4:5c:86:49:d1:
a0:76:42:fb:07:68:bc:60:93:2b:e5:3c:9b:8a:f3:
93:02:cd:be:8a:cf:08:25:74:28:bb:68:37:33:fc:
b2:99:0f:90:4b:7c:af:76:53:12:b8:fe:26:9f:71:
b7:1e:42:cf:c1:88:bd:39:b3:9f:0c:c8:63:d3:35:
9b:4f:40:da:37:9a:67:43:2e:0d:e1:4f:b4:5c:de:
3a:e2:35:f2:4c:32:82:81:4a:cc:d3:88:a4:b5:18:
95:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:44:15:DD:65:59:EE:1E:3E:C3:A9:82:1C:54:0C:0E:E8:66:18:E8
X509v3 Authority Key Identifier:
keyid:B3:D5:EC:15:16:EE:6D:C1:9D:1E:5C:39:98:CB:7E:7A:64:6F:71:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s9XsFRbubcGdHlw5mMt-emRvcVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/QEQV3WVZ7h4-w6mCHFQMDuhmGOg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/3ad7cc-3c08-4b72-870a-6c305a6dbab9/1/s9XsFRbubcGdHlw5mMt-emRvcVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.240.157.0/24
Signature Algorithm: sha256WithRSAEncryption
67:77:a6:32:cb:92:30:ea:43:6b:0f:7a:f0:61:45:3d:f3:2b:
e6:42:cd:6a:76:a4:fd:3e:3d:8f:d6:ad:f7:28:f0:b2:17:07:
84:42:59:52:76:b7:b2:42:5f:e7:ee:88:a2:bc:7b:34:97:78:
db:61:93:7f:45:92:f7:54:43:5d:fc:8e:34:4f:4c:9e:de:8b:
59:01:87:b3:89:d8:6e:b7:c9:ef:c9:56:84:da:ae:25:6a:4b:
fb:f2:c2:0b:68:62:d5:23:84:96:7e:ad:a4:08:ed:5a:d5:3a:
65:92:69:b9:ef:53:b5:20:55:45:b4:d8:f4:0d:d8:14:1e:fa:
d6:f9:f5:93:fd:cc:99:be:de:35:0d:03:0d:ff:06:10:a1:ca:
17:16:74:dc:1e:a0:9d:a3:2d:2a:4e:96:b1:1d:99:28:73:c5:
09:01:fd:22:20:8c:77:b8:17:e8:b2:99:b3:34:85:0d:59:88:
78:1f:37:f8:0f:7d:37:91:60:d0:0b:ed:48:6a:84:92:7c:8e:
0e:fa:0b:68:40:c2:5e:ce:59:a2:1b:11:0b:3b:bb:88:6e:54:
ed:51:e0:34:2f:36:89:f5:0d:e8:4a:7f:eb:e1:b2:b8:7b:ee:
b3:e2:bd:b9:dd:f7:12:a8:ae:4d:cc:cd:f2:ca:d9:13:b0:7a:
63:81:d6:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 19 21:52:48 2026 by rpki-client