Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QVMMe1PadDx24Vt2DduZ7b0w4IE.roa
File: QVMMe1PadDx24Vt2DduZ7b0w4IE.roa (raw, json)
Hash identifier: lCrzRgVUjEmfxGeZq+yjctfunPBS8nMb0k/iyPYs0m4=
Subject key identifier: 41:53:0C:7B:53:DA:74:3C:76:E1:5B:76:0D:DB:99:ED:BD:30:E0:81
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 019ED5C7E7F82B5DD52A2CEA88FFB01B62EE
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QVMMe1PadDx24Vt2DduZ7b0w4IE.roa
Signing time: Wed 17 Jun 2026 13:31:48 +0000
ROA not before: Wed 17 Jun 2026 13:31:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199741
IP address blocks: 217.79.122.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 14:18:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:c7:e7:f8:2b:5d:d5:2a:2c:ea:88:ff:b0:1b:62:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Jun 17 13:31:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41530c7b53da743c76e15b760ddb99edbd30e081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:20:2e:53:d0:1d:21:7b:53:d7:28:7d:67:0e:
2c:7a:65:92:9e:4f:e2:34:74:0e:bf:b8:44:b5:ad:
fd:fe:74:8e:f6:72:40:6c:7f:87:4a:e6:d6:29:d8:
51:a5:93:18:e4:46:49:22:72:26:cc:3e:a8:de:e9:
98:3b:9a:90:e7:4b:13:67:98:27:63:9f:11:b9:07:
ff:93:22:de:d7:e3:0b:d5:47:2d:94:70:e7:0d:aa:
b5:86:c3:c3:d8:94:09:dc:63:35:fb:06:12:d0:06:
71:e8:c7:5e:9b:29:a2:cc:fc:b4:c4:1e:76:88:00:
27:f6:4d:a1:13:7f:3c:f9:ff:ee:0a:83:25:00:2b:
9f:99:0d:49:84:05:10:7f:c2:9c:dd:aa:5e:13:a8:
b1:13:82:ca:fb:dd:93:2e:f6:ca:3a:bb:1c:99:6e:
b5:4f:3a:56:d9:08:e8:a0:7d:4a:55:08:93:f3:ee:
23:66:7d:86:13:1e:93:63:00:06:3f:6d:34:82:20:
42:49:f3:23:00:66:e4:ac:78:c4:bb:7e:e3:15:a2:
3c:d9:18:14:e5:ec:f2:bf:5a:a3:56:8e:ec:02:0b:
6a:cf:e6:b2:ed:fe:56:c0:8c:62:08:d5:63:f8:5e:
c0:86:02:58:c9:0a:57:e5:4c:ac:c4:58:24:b7:a5:
a2:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:53:0C:7B:53:DA:74:3C:76:E1:5B:76:0D:DB:99:ED:BD:30:E0:81
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QVMMe1PadDx24Vt2DduZ7b0w4IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.79.122.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:2d:db:21:9a:c6:cd:4c:7c:cb:42:08:03:42:86:5c:ba:d1:
e5:30:07:25:2a:ca:34:03:51:6a:42:8e:f8:68:05:5c:3f:b2:
6a:2c:0c:64:4f:d0:a2:ac:76:7b:f8:78:ae:6d:62:ed:44:dd:
27:23:27:07:23:9e:34:49:b8:61:d7:5e:21:26:56:ec:bf:b3:
8f:b1:9a:88:2f:0a:14:09:9e:cb:59:c0:c7:b5:6e:2e:2b:45:
58:a1:5d:aa:cd:37:d5:fc:0b:8e:c0:31:97:90:3a:fb:e0:da:
53:e4:7d:22:5a:a0:54:5e:a5:5e:63:2b:4c:f6:25:f9:30:c2:
8d:69:9a:78:77:f4:cb:e3:a1:b2:91:33:b6:44:c3:6d:68:0f:
0f:2b:7a:71:d7:71:17:33:03:9d:2d:31:48:c2:6e:a1:35:e4:
59:20:9d:e5:8e:5d:f9:25:2e:83:4d:48:4d:1d:f3:f4:1c:35:
51:86:d7:18:54:07:c5:bc:26:a2:b5:4d:42:fd:b2:67:18:7b:
e6:61:8a:ce:88:16:c9:df:85:5f:fc:3e:68:41:e1:96:59:49:
ab:ca:28:9e:4f:7c:e8:a0:16:01:25:03:44:da:99:53:74:e7:
7e:96:88:48:02:e6:35:fa:36:d5:63:d1:62:97:8e:67:dd:5c:
45:45:f7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Jul 20 23:57:45 2026 by rpki-client