Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/QYnWj_d8shkQxrpe1U0FHs4x6Ew.roa
File: QYnWj_d8shkQxrpe1U0FHs4x6Ew.roa (raw, json)
Hash identifier: x8/Ml97hlxK7/4EuxhpyQvSYLPDJStRFoau67odkvEQ=
Subject key identifier: 41:89:D6:8F:F7:7C:B2:19:10:C6:BA:5E:D5:4D:05:1E:CE:31:E8:4C
Certificate issuer: /CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Certificate serial: 01A15EF4CBE2B41DC49F7E779EFE695F09ED
Authority key identifier: 58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/QYnWj_d8shkQxrpe1U0FHs4x6Ew.roa
Signing time: Wed 21 Oct 2026 14:54:23 +0000
ROA not before: Wed 21 Oct 2026 14:54:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218342
IP address blocks: 37.230.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5e:f4:cb:e2:b4:1d:c4:9f:7e:77:9e:fe:69:5f:09:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5885e884c2fc7a75d12dd1dea49ce2349c47067e
Validity
Not Before: Oct 21 14:54:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4189d68ff77cb21910c6ba5ed54d051ece31e84c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:44:dc:78:d1:4e:fc:67:d8:bc:89:37:c7:df:
b9:57:31:7b:a4:9f:31:d5:6e:2d:f5:40:0a:78:9a:
5e:17:b6:08:75:26:a6:c5:56:fd:bf:71:24:a3:96:
80:83:a0:34:c2:2f:3d:1a:56:e1:dc:01:93:90:87:
ce:0c:52:2d:5d:4c:b8:f4:e5:1b:a6:83:7c:ea:72:
9a:33:c2:46:37:ce:c9:e7:24:04:85:cf:6d:71:48:
e9:01:91:45:93:6b:f4:ce:32:5c:46:04:ba:44:70:
01:63:d6:91:e8:ce:a1:b0:24:c2:f9:92:06:08:f7:
ff:8d:3c:08:54:b6:2d:7a:56:f8:5e:4c:5e:2f:ad:
aa:a6:c0:3c:22:80:c3:f0:2b:d9:7f:53:da:de:2f:
4f:36:ec:d7:a0:c7:f8:8b:41:85:e2:56:ea:dd:80:
35:be:9f:4a:44:f7:da:d2:a3:d4:b6:7e:f1:45:e2:
43:98:0a:87:0f:0e:4c:4b:49:31:14:45:fb:d1:08:
03:92:3e:d3:70:5c:35:c1:2a:a7:bf:10:90:53:eb:
19:08:19:52:ed:f0:81:b6:75:d8:28:0e:ea:da:0a:
72:99:d2:6d:54:e9:4a:db:66:46:5d:dc:f1:ad:cc:
2f:0f:c1:e8:6f:50:31:6d:d6:e7:12:7d:20:59:26:
93:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:89:D6:8F:F7:7C:B2:19:10:C6:BA:5E:D5:4D:05:1E:CE:31:E8:4C
X509v3 Authority Key Identifier:
keyid:58:85:E8:84:C2:FC:7A:75:D1:2D:D1:DE:A4:9C:E2:34:9C:47:06:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WIXohML8enXRLdHepJziNJxHBn4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/QYnWj_d8shkQxrpe1U0FHs4x6Ew.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/6c0bf7-5f13-44a2-9989-8c9581d96d8f/1/WIXohML8enXRLdHepJziNJxHBn4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.230.253.0/24
Signature Algorithm: sha256WithRSAEncryption
11:a1:57:eb:04:e2:2a:69:09:4e:f1:93:0d:db:d6:ed:43:36:
be:d2:32:e8:37:42:da:b3:4c:2f:41:58:b8:74:47:91:21:64:
06:ec:db:8a:97:4f:e4:73:57:9a:1c:ad:ba:55:1d:24:3d:7b:
cb:70:9e:f6:c9:a1:84:28:8d:2f:97:3b:ca:e8:5f:9d:e3:ba:
3a:cc:66:d1:aa:24:93:f8:5c:a4:68:60:ef:eb:39:13:a7:ee:
ac:3c:a4:76:39:ba:ab:07:f9:ee:bd:04:c2:c1:05:ed:36:b6:
46:fd:c9:61:1a:36:27:f5:d7:a4:37:16:de:f5:5d:f5:cb:3e:
00:35:f4:24:f9:4f:d3:95:ad:6b:6b:e9:6c:c4:a6:78:b1:d5:
3e:dd:3e:72:1c:9c:ff:25:0e:31:c2:78:af:62:1b:9a:f6:98:
d4:d3:c4:f9:9f:f9:71:89:6a:b2:e8:77:e3:ba:2d:6e:fe:45:
1f:f6:90:d2:0d:91:97:c8:e4:56:bf:84:69:69:b5:9a:fd:13:
c6:67:5f:c3:f7:c7:16:c6:ef:ab:9e:20:3b:dd:09:c4:35:44:
5b:0a:a1:ab:53:78:3a:65:f0:d2:00:be:61:c0:a3:e6:3d:e6:
e5:75:5b:b7:b7:dc:52:cc:f3:95:b9:31:18:1f:cc:c3:c0:7f:
0b:67:b4:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 17:51:32 2026 by rpki-client