Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QVEXHpDuGPSRwku7Jia79A86FTc.roa
File: QVEXHpDuGPSRwku7Jia79A86FTc.roa (raw, json)
Hash identifier: D1XPrW7ya4H8JAY5iiTK1ovpy+tV1fB48ny7z6/iRfI=
Subject key identifier: 41:51:17:1E:90:EE:18:F4:91:C2:4B:BB:26:26:BB:F4:0F:3A:15:37
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019DB50D678363682677DF17F262484FD79E
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QVEXHpDuGPSRwku7Jia79A86FTc.roa
Signing time: Wed 22 Apr 2026 11:57:27 +0000
ROA not before: Wed 22 Apr 2026 11:57:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 153671
IP address blocks: 81.5.186.0/24 maxlen: 24
81.168.62.0/24 maxlen: 24
81.168.76.0/24 maxlen: 24
213.210.54.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b5:0d:67:83:63:68:26:77:df:17:f2:62:48:4f:d7:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 22 11:57:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4151171e90ee18f491c24bbb2626bbf40f3a1537
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:68:14:ea:d6:14:96:48:2d:99:54:12:33:e2:
65:4c:0b:8f:5c:5e:42:3f:87:c0:65:02:36:3f:90:
07:ff:b4:3e:e9:ec:e2:93:e5:41:d9:27:f2:97:e0:
a1:28:a4:2d:4c:e9:f1:b3:bf:d1:19:fe:a1:93:c8:
e9:80:71:98:a1:fc:15:3c:4f:49:68:98:ec:fa:32:
0b:3a:9d:a1:43:c7:f5:0b:a0:7b:2c:13:e4:42:1c:
10:07:41:74:dd:38:d7:0f:d1:9a:c2:d3:ae:77:66:
e9:43:e9:36:4c:30:b2:19:01:be:35:df:cc:dd:5e:
67:30:5c:bc:77:fe:21:0e:b9:99:48:14:49:6e:72:
2b:a8:22:c5:09:ad:cf:dd:67:0b:2b:71:6a:1e:03:
d8:1b:a8:91:d8:c3:3d:7b:f2:65:1e:a0:45:07:77:
c7:9a:ed:33:35:96:aa:8a:f2:9f:93:40:17:c7:d9:
b6:41:14:ee:4a:d9:a6:ca:ad:ed:cd:10:1c:15:95:
8d:39:80:b9:ca:1d:f1:35:a1:9b:02:c4:f3:0a:52:
c2:75:82:86:9b:c0:da:93:a4:dc:a0:42:6b:32:fa:
73:7e:0d:bb:a6:86:be:03:8e:fe:87:59:ae:d5:13:
39:e8:96:d5:8d:0c:e0:4d:54:88:f0:d1:b5:d2:3d:
91:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:51:17:1E:90:EE:18:F4:91:C2:4B:BB:26:26:BB:F4:0F:3A:15:37
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QVEXHpDuGPSRwku7Jia79A86FTc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.5.186.0/24
81.168.62.0/24
81.168.76.0/24
213.210.54.0/24
Signature Algorithm: sha256WithRSAEncryption
11:7d:77:10:f8:83:4d:fa:94:69:da:7d:e8:24:57:e8:61:87:
37:dd:96:c9:ce:c4:51:a4:e3:81:e0:1a:c8:5f:fe:b4:7f:e9:
e0:97:21:09:d9:16:2b:35:a0:5c:85:7f:83:8a:9b:24:df:06:
ee:9e:96:8b:c9:ba:e0:55:44:1e:08:a6:b9:cc:1d:7f:fc:ee:
b8:cd:29:09:76:82:67:34:1f:11:c0:b8:c8:1b:79:de:6d:fa:
fe:0e:02:b6:e6:c1:a8:8d:d5:0f:d8:27:7b:0c:57:de:5f:62:
df:dc:25:74:45:96:7e:d8:dd:a3:17:8c:86:e8:42:6b:53:36:
03:33:ff:36:86:b9:1a:8e:78:c1:2b:0d:3d:9e:f2:9e:74:ee:
7a:1f:c8:41:9d:72:8b:3e:da:53:b0:3f:db:f7:16:8b:b5:e0:
5a:37:4e:77:e0:fd:cc:ec:cb:fc:1f:89:1a:a0:69:4f:a3:61:
75:bb:d7:aa:7c:05:ba:9b:d5:07:65:7d:ac:9c:af:f3:7c:64:
80:ca:24:8e:61:88:7f:be:fc:eb:c7:a1:90:7c:a3:da:ac:34:
4e:4a:e2:f3:cb:54:98:b6:b8:f9:b5:9e:e6:e1:b1:c7:f5:ea:
f9:c3:2d:3c:4c:38:8f:3a:86:17:c4:7b:eb:0f:d9:70:a8:ec:
c3:1d:8e:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 27 11:15:52 2026 by rpki-client