Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QkJqtJSbCEQF-3Y4zFeTtFupGmY.roa
File: QkJqtJSbCEQF-3Y4zFeTtFupGmY.roa (raw, json)
Hash identifier: kQ9AvoJAE0Wb5X9L8zKWBPdlXwewTVXDfy4zqkDgpG4=
Subject key identifier: 42:42:6A:B4:94:9B:08:44:05:FB:76:38:CC:57:93:B4:5B:A9:1A:66
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A05661ED31D96F9A4A9734DD71DC4B3C1E
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QkJqtJSbCEQF-3Y4zFeTtFupGmY.roa
Signing time: Mon 31 Aug 2026 05:54:13 +0000
ROA not before: Mon 31 Aug 2026 05:54:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199707
IP address blocks: 82.108.125.0/24 maxlen: 24
82.110.226.0/24 maxlen: 24
87.82.193.0/24 maxlen: 24
87.83.220.0/24 maxlen: 24
194.242.129.0/24 maxlen: 24
217.79.125.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 12:15:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:61:ed:31:d9:6f:9a:4a:97:34:dd:71:dc:4b:3c:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Aug 31 05:54:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42426ab4949b084405fb7638cc5793b45ba91a66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:33:19:4b:03:c3:0b:90:8b:3c:aa:f8:10:93:
d2:99:41:51:f4:c4:69:ed:a0:8a:b3:d3:c3:c7:be:
ed:7b:67:9d:3e:02:d3:e0:02:cd:1f:70:ff:58:dc:
f6:08:cd:76:d7:7a:90:5d:4e:0a:80:69:4b:1e:65:
e9:88:fc:2c:1b:f6:39:0d:4b:d2:4f:eb:cd:79:03:
24:59:0c:ba:73:d2:9c:91:82:f9:a6:de:c7:0f:09:
24:c7:d5:1e:05:9c:d2:a8:87:ec:ff:c8:c7:05:89:
df:db:d9:15:92:9f:cb:e7:e2:3d:bb:e5:d2:05:11:
9d:fe:a9:87:48:e4:56:96:76:b6:f3:2f:f7:6f:14:
8d:3c:f8:1d:08:5a:6d:b8:2e:e7:9a:68:cc:91:62:
e1:42:da:86:d1:9e:84:fe:92:2a:fa:b8:59:54:ac:
23:79:f8:48:22:7f:a3:9f:25:31:6c:9d:94:e8:3d:
45:a7:87:87:31:0b:b5:97:01:11:d9:49:72:ff:9d:
90:2e:44:3a:6d:bc:9c:d0:75:07:4a:f7:82:bf:e1:
77:27:61:67:ff:0f:d4:5a:91:2a:f0:e3:b9:e3:23:
f5:6c:a4:17:22:14:56:d6:66:1f:4d:d4:f3:86:8c:
3d:e0:75:38:3b:72:79:6d:ec:41:ff:a2:c5:0e:b4:
12:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:42:6A:B4:94:9B:08:44:05:FB:76:38:CC:57:93:B4:5B:A9:1A:66
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/QkJqtJSbCEQF-3Y4zFeTtFupGmY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.108.125.0/24
82.110.226.0/24
87.82.193.0/24
87.83.220.0/24
194.242.129.0/24
217.79.125.0/24
Signature Algorithm: sha256WithRSAEncryption
b7:72:a6:dd:fb:5f:ce:01:c3:3c:35:7c:ed:c6:ea:05:8c:6b:
e9:36:5d:25:db:38:f0:b9:55:de:f3:55:32:4c:b9:c7:fd:fd:
14:c9:be:9d:8d:5f:ea:24:c2:d9:c6:66:12:55:2a:e3:99:09:
b9:3c:cd:e9:ed:b6:21:15:a1:00:1d:75:67:34:80:bd:9d:2b:
85:95:b2:9b:4f:09:ec:77:48:46:49:8b:73:1a:99:da:a3:53:
59:62:e7:77:0d:c6:eb:ff:4d:d8:b0:72:ca:b2:04:44:d6:c4:
e0:3c:db:a7:4c:9c:90:72:79:0a:1c:4f:00:fa:c9:a2:67:44:
40:70:90:97:14:9d:72:58:4c:3d:df:5a:76:73:8e:c0:3d:81:
8e:83:e2:dc:14:34:37:16:5f:d4:ab:46:27:d6:51:4e:09:3a:
39:5e:e4:ea:ba:b1:77:14:38:9a:42:d1:30:83:e7:9c:54:dc:
d1:f2:04:52:9a:ae:ff:87:56:8a:fa:57:c4:8f:67:8a:f9:f6:
39:63:ec:c7:81:75:2f:6b:0c:81:d9:a5:e6:47:26:d3:cd:1f:
17:ed:7e:ec:4d:d8:1b:55:2c:dc:bc:8b:3d:10:19:78:75:26:
0b:93:72:d3:45:72:db:1d:2e:cf:1d:ed:4f:ee:dd:6b:ef:be:
b0:60:4d:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 17:37:16 2026 by rpki-client