Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/QGktEQobO8R34JAXHLBNJ6wxgMc.roa
File: QGktEQobO8R34JAXHLBNJ6wxgMc.roa (raw, json)
Hash identifier: mN+pmNvJaiH73cUaLVeD9GRCj9YIkBI+h4M12q+Q7vc=
Subject key identifier: 40:69:2D:11:0A:1B:3B:C4:77:E0:90:17:1C:B0:4D:27:AC:31:80:C7
Certificate issuer: /CN=f04a58047f37bbc057944bbf8cad8742879592da
Certificate serial: 019D6E7A47C1DE384699604F347E878117FF
Authority key identifier: F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/QGktEQobO8R34JAXHLBNJ6wxgMc.roa
Signing time: Wed 08 Apr 2026 19:03:20 +0000
ROA not before: Wed 08 Apr 2026 19:03:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 40352
IP address blocks: 147.90.28.0/24 maxlen: 24
147.90.208.0/24 maxlen: 24
158.173.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.mft
rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 11 Apr 2026 17:02:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:6e:7a:47:c1:de:38:46:99:60:4f:34:7e:87:81:17:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f04a58047f37bbc057944bbf8cad8742879592da
Validity
Not Before: Apr 8 19:03:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40692d110a1b3bc477e090171cb04d27ac3180c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:6a:bd:b5:f5:c0:78:66:5c:03:a4:29:e2:5f:
0f:ee:79:63:d6:ea:d0:3f:57:69:0d:1e:6a:40:e2:
28:81:b0:38:41:3f:84:2c:95:2f:da:7a:7f:24:50:
c1:99:20:57:c4:64:ea:84:26:c7:08:69:f4:23:8e:
6e:22:b2:b8:c2:93:89:83:e9:e0:86:7c:be:63:61:
88:ab:61:19:69:75:2a:f8:03:c8:b6:4c:86:d5:76:
b5:9b:ad:c2:34:15:db:5b:84:72:3d:c9:39:b6:96:
1a:26:fb:e8:c3:15:34:c1:fe:53:3d:59:85:c2:92:
41:70:91:b8:14:9a:20:c0:f8:55:c1:94:fd:e8:a3:
3d:17:35:0e:ee:52:26:95:4a:72:ce:07:f6:b3:88:
37:a0:89:5c:a3:31:19:16:bc:42:58:6b:24:f2:da:
67:16:dd:d0:84:b4:f6:c4:fb:19:53:d4:50:3c:49:
7f:e6:43:cc:71:66:74:ea:c1:1d:c3:fb:e2:df:4e:
16:c9:56:00:27:40:ec:c7:ea:6d:3d:d9:39:c1:fd:
8d:04:d8:13:4e:86:e5:ac:d5:93:0f:fe:ba:ac:10:
5b:ce:ec:33:fb:4c:8a:f2:df:35:2b:ff:9e:8b:cc:
d5:9d:c6:a2:78:25:11:4c:8d:9c:b8:c8:37:f0:fa:
9d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:69:2D:11:0A:1B:3B:C4:77:E0:90:17:1C:B0:4D:27:AC:31:80:C7
X509v3 Authority Key Identifier:
keyid:F0:4A:58:04:7F:37:BB:C0:57:94:4B:BF:8C:AD:87:42:87:95:92:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8EpYBH83u8BXlEu_jK2HQoeVkto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/QGktEQobO8R34JAXHLBNJ6wxgMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/2ba97e-598b-48dd-8d56-f5fb71b9a51f/1/8EpYBH83u8BXlEu_jK2HQoeVkto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.90.28.0/24
147.90.208.0/24
158.173.197.0/24
Signature Algorithm: sha256WithRSAEncryption
01:71:8d:3a:08:fc:3a:4b:26:b9:39:b3:9a:9e:a5:58:95:d4:
92:06:9a:fc:f6:83:10:84:c1:20:73:fc:eb:eb:37:4d:bf:8a:
95:5e:95:99:95:a9:1e:69:61:f0:4f:31:d4:96:08:24:78:9e:
a1:9f:24:c5:99:9c:bf:9b:2e:17:11:0c:48:a9:24:e8:ee:35:
8b:02:58:ee:96:e2:ad:e4:b7:c0:03:05:2b:f1:d5:1f:87:a5:
28:7f:7f:1c:a5:be:57:70:a4:42:5a:43:1d:03:89:95:a0:42:
e1:77:f6:ec:51:c9:2c:52:43:43:5e:96:7c:69:1e:df:10:88:
d0:7d:0f:e0:b4:42:8d:2d:76:62:6c:d9:e3:9c:ce:64:ef:5e:
11:51:8c:68:35:d9:fc:30:a6:c1:5c:23:72:6c:41:b3:21:40:
e2:c3:ec:16:1e:4b:95:44:fd:f9:dc:b6:e4:fd:3b:28:74:26:
69:3d:c5:7a:5e:fb:bd:a7:05:76:d4:92:07:98:7e:7e:0c:e1:
73:e1:16:06:60:b9:f8:74:f2:b5:b1:e1:db:ad:84:3c:fd:53:
01:cb:df:10:dd:02:68:ae:3c:98:0e:82:72:18:28:48:fd:8b:
f7:87:15:50:e3:41:89:4f:72:ab:df:61:47:d4:86:c8:63:4a:
88:b0:da:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 11 01:28:55 2026 by rpki-client