Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/QpJITU9l6bMr8oGaX825ze1UlB0.roa
File: QpJITU9l6bMr8oGaX825ze1UlB0.roa (raw, json)
Hash identifier: e6fSmdbsZJflihklvHaG4cTIHvwJBCCE1qauoGxZ/7c=
Subject key identifier: 42:92:48:4D:4F:65:E9:B3:2B:F2:81:9A:5F:CD:B9:CD:ED:54:94:1D
Certificate issuer: /CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Certificate serial: 019E3898780F98D66CE3D97B5709153AF1B6
Authority key identifier: 3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/QpJITU9l6bMr8oGaX825ze1UlB0.roa
Signing time: Mon 18 May 2026 00:59:36 +0000
ROA not before: Mon 18 May 2026 00:59:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64013
IP address blocks: 209.33.128.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 22 May 2026 08:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:38:98:78:0f:98:d6:6c:e3:d9:7b:57:09:15:3a:f1:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b0bf18d6bbdb33da82fe61a28624ba72e235040
Validity
Not Before: May 18 00:59:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4292484d4f65e9b32bf2819a5fcdb9cded54941d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:bd:ee:3b:ae:6e:bc:a2:dc:6d:cb:c8:03:ea:
c5:3e:63:06:83:bd:31:9e:0a:0d:67:37:bd:d9:c6:
80:7c:bf:13:8d:c5:84:c8:43:2a:eb:33:59:1e:14:
fa:6d:07:51:4a:9f:4c:e0:db:e6:83:58:e3:3c:14:
1c:d8:18:82:d0:c0:21:bb:03:60:3e:0b:ea:f3:91:
40:48:3d:7f:e3:1b:4c:cb:51:0c:d0:d2:be:af:b4:
36:49:78:0b:ca:1d:30:ec:24:74:15:02:e5:8b:7a:
d4:c3:76:2a:79:49:63:a7:97:62:ff:2e:b3:8a:29:
e0:a1:6f:e9:8e:68:9a:5d:d6:3a:4b:d7:eb:8e:0e:
8a:af:71:8f:4d:6a:36:00:e2:e7:59:3f:fd:0f:8a:
5d:a6:05:e4:d7:7a:ad:d7:42:e4:86:a3:b0:da:c3:
2b:c8:5b:86:7a:c2:65:eb:ba:d8:5c:4e:de:71:67:
83:26:d9:4b:f4:d6:ca:ae:ef:93:12:02:19:7f:c6:
cf:de:2b:b4:9d:92:10:1d:c1:df:1d:0b:f3:2a:9b:
cc:23:0b:6d:6e:b6:4f:7f:0b:b5:ba:f1:9b:de:7b:
1e:43:ef:09:56:7a:7e:4c:75:43:37:a2:e7:e9:08:
0d:4e:4f:19:35:1a:19:02:64:90:8a:06:6e:69:a4:
19:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:92:48:4D:4F:65:E9:B3:2B:F2:81:9A:5F:CD:B9:CD:ED:54:94:1D
X509v3 Authority Key Identifier:
keyid:3B:0B:F1:8D:6B:BD:B3:3D:A8:2F:E6:1A:28:62:4B:A7:2E:23:50:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwvxjWu9sz2oL-YaKGJLpy4jUEA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/QpJITU9l6bMr8oGaX825ze1UlB0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/5ddee9-c1c4-4b57-b6b8-d49916b5f2b4/1/OwvxjWu9sz2oL-YaKGJLpy4jUEA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
209.33.128.0/24
Signature Algorithm: sha256WithRSAEncryption
a7:8d:9e:6d:73:56:b8:a2:46:c1:43:fd:b7:f1:10:a0:12:15:
e8:e8:b1:b8:71:7b:56:88:a7:7e:60:d5:e8:ca:1e:63:89:7c:
ce:aa:07:7f:ea:2c:f1:07:37:de:9c:7c:7d:8b:66:6c:18:08:
81:83:87:c6:0e:1f:30:d4:0e:3a:8d:ec:89:29:fc:0c:41:fe:
63:c1:57:fa:21:d2:47:95:27:95:3a:da:b6:2f:4a:aa:c8:70:
e1:cf:61:73:d8:d4:09:b4:c3:da:91:b5:e1:05:aa:7d:bf:e8:
e1:39:3c:13:60:f1:3b:e8:5c:ac:cb:fc:c0:35:2c:12:e0:15:
22:2b:68:f2:19:37:0b:ea:c7:65:d7:1d:16:0b:41:13:70:40:
31:b2:15:58:18:15:a6:96:79:b0:9d:65:17:7a:4f:8a:e7:83:
59:1d:82:d0:69:7e:55:9f:40:1d:4c:c9:10:41:3c:c4:7f:7a:
bd:ee:f9:cb:0d:de:af:82:53:78:df:cd:ae:e7:0c:09:81:d2:
85:a0:95:c2:d1:3e:24:24:97:a0:dd:56:48:b1:bb:8c:93:a5:
dc:c1:3e:ad:31:6c:ee:96:03:56:ba:b6:33:ef:65:6a:52:27:
b6:b6:ea:85:aa:8f:73:b3:a7:50:5a:02:88:c1:7e:07:b4:f6:
7e:62:ef:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu May 21 14:59:27 2026 by rpki-client