Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/Qfx-jaThg5lJw_BA5vEvp8-i4UA.roa
File: Qfx-jaThg5lJw_BA5vEvp8-i4UA.roa (raw, json)
Hash identifier: 7d5dT1qeEI7X1IHYtq9uqPlU1kKEQC1iXYBhS9M/Vu8=
Subject key identifier: 41:FC:7E:8D:A4:E1:83:99:49:C3:F0:40:E6:F1:2F:A7:CF:A2:E1:40
Certificate issuer: /CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Certificate serial: 01A11A7830178A8D37B880B26C3A70C8E3DC
Authority key identifier: F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/Qfx-jaThg5lJw_BA5vEvp8-i4UA.roa
Signing time: Thu 08 Oct 2026 07:44:06 +0000
ROA not before: Thu 08 Oct 2026 07:44:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49332
IP address blocks: 5.57.64.0/21 maxlen: 22
80.243.144.0/20 maxlen: 21
86.111.64.0/20 maxlen: 21
86.111.84.0/23 maxlen: 24
91.212.203.0/24 maxlen: 24
176.32.0.0/21 maxlen: 22
176.39.64.0/19 maxlen: 20
176.39.64.0/20 maxlen: 21
176.39.128.0/20 maxlen: 21
188.190.32.0/19 maxlen: 20
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 16 Oct 2026 10:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1a:78:30:17:8a:8d:37:b8:80:b2:6c:3a:70:c8:e3:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f84128146b7bec8bd1185bbe0c3b9340aaf5b714
Validity
Not Before: Oct 8 07:44:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41fc7e8da4e1839949c3f040e6f12fa7cfa2e140
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b9:ae:13:f4:0f:04:a1:40:53:da:66:59:5a:
76:2a:43:ac:96:72:81:a8:62:cc:f7:eb:e9:40:56:
68:84:0f:5c:59:ad:6b:88:bf:79:a5:d2:12:d6:01:
a0:18:72:43:17:f7:d8:d8:2b:ea:b2:6d:27:94:90:
55:7d:aa:59:7b:f1:ae:1d:80:46:f5:af:be:a1:07:
90:0f:3a:f7:d0:4f:2e:c8:9c:c0:f1:a8:0b:16:e1:
ab:c1:ee:a5:f8:63:cf:df:05:b2:4c:10:10:a6:35:
72:34:4d:37:2e:81:4e:47:ed:7f:4b:b1:c7:63:0b:
b8:cd:91:b6:d2:bc:d4:6e:24:7c:7c:26:12:c1:5c:
af:17:9d:b6:1d:f7:3c:27:66:97:01:2c:cd:e6:db:
6b:9e:4f:14:7d:ad:68:80:a8:f1:d0:6c:ce:19:d2:
3a:56:57:12:ec:3f:f8:25:ae:97:1c:e4:a8:9e:9f:
0e:b2:53:63:75:44:72:37:d6:35:e3:1b:c1:3e:7b:
d0:90:82:c1:e2:b0:31:95:51:c9:a7:c2:20:96:4e:
b9:6f:f1:9f:51:e2:46:cf:38:ad:d3:9b:6d:13:79:
33:8e:ec:04:b8:7e:b5:f1:6b:83:14:a0:8a:60:53:
e0:c0:4c:49:dc:0e:fe:9c:ad:21:81:0d:8f:b6:a2:
fb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:FC:7E:8D:A4:E1:83:99:49:C3:F0:40:E6:F1:2F:A7:CF:A2:E1:40
X509v3 Authority Key Identifier:
keyid:F8:41:28:14:6B:7B:EC:8B:D1:18:5B:BE:0C:3B:93:40:AA:F5:B7:14
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-EEoFGt77IvRGFu-DDuTQKr1txQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/Qfx-jaThg5lJw_BA5vEvp8-i4UA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/fb2411-485b-4143-9241-13839640a604/1/1-EEoFGt77IvRGFu-DDuTQKr1txQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.57.64.0/21
80.243.144.0/20
86.111.64.0/20
86.111.84.0/23
91.212.203.0/24
176.32.0.0/21
176.39.64.0/19
176.39.128.0/20
188.190.32.0/19
Signature Algorithm: sha256WithRSAEncryption
83:60:da:78:07:90:03:ae:6a:81:18:b6:1a:9f:62:2c:a7:f2:
9f:6a:f8:52:ce:79:68:ed:f1:81:fa:85:b8:a2:f3:a1:5b:dc:
5c:74:e4:65:48:ca:0c:62:d1:d2:3f:ab:5f:33:9b:3c:8b:8d:
7c:b0:2b:a0:bc:6a:9a:f5:53:18:de:6a:09:7a:ff:2a:3f:48:
3b:5d:bc:d6:60:15:e4:5a:26:19:1a:15:f7:ae:82:9b:3f:35:
fe:59:5b:54:76:c4:1f:a4:01:a6:6d:61:c6:f3:b8:2f:4c:92:
8b:87:eb:bb:63:5a:af:99:e8:ca:43:b6:b3:c6:b9:80:49:a0:
2c:da:42:d7:45:a5:a0:c2:18:24:1e:79:c4:54:56:7d:86:01:
4f:41:ac:00:f3:7b:ee:b2:05:ec:94:68:cb:54:8f:72:06:d2:
54:48:ed:eb:ed:c5:73:a6:73:41:ca:a3:30:47:68:dc:d4:bf:
70:e5:b3:e8:77:25:15:04:cd:e1:ec:74:ea:3e:06:ff:45:3b:
d0:56:92:6e:73:3e:86:cb:94:12:66:68:58:79:dc:48:9d:83:
37:35:6a:a2:6f:a2:97:92:07:d4:6f:2e:7b:b9:21:f0:45:63:
76:4b:30:a0:4f:c6:4f:44:8f:70:33:59:29:e2:39:0f:da:81:
1a:81:88:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 19:48:52 2026 by rpki-client