Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/QJl8lvaSHlNGb8JURIYsNYcYovY.roa
File: QJl8lvaSHlNGb8JURIYsNYcYovY.roa (raw, json)
Hash identifier: I+JKQFtr91vMxuc0AW8KZkalXspCXo94jd5tcty9xks=
Subject key identifier: 40:99:7C:96:F6:92:1E:53:46:6F:C2:54:44:86:2C:35:87:18:A2:F6
Certificate issuer: /CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Certificate serial: 01A11D9FADF1231734BC92AEFEC3D32489E8
Authority key identifier: 5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/QJl8lvaSHlNGb8JURIYsNYcYovY.roa
Signing time: Thu 08 Oct 2026 22:26:06 +0000
ROA not before: Thu 08 Oct 2026 22:26:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218911
IP address blocks: 206.245.213.0/24 maxlen: 24
206.245.214.0/24 maxlen: 24
206.245.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.mft
rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 15:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1d:9f:ad:f1:23:17:34:bc:92:ae:fe:c3:d3:24:89:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c32a925c55f1d4e6e40c10f4e8e019b483c1d50
Validity
Not Before: Oct 8 22:26:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40997c96f6921e53466fc25444862c358718a2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:16:96:a2:46:d8:94:d7:27:e5:14:31:5e:fd:
60:87:41:fa:36:94:8f:ed:87:d2:62:72:7c:21:d1:
da:bb:94:01:21:eb:ba:2a:b9:c0:c4:67:cd:61:05:
20:30:be:0f:7d:5a:da:02:ce:81:0a:f1:19:0b:18:
0a:8f:11:07:08:4b:7a:ad:20:19:f5:fb:a2:96:43:
f3:91:d1:9d:5e:69:69:4b:fd:65:57:e3:56:49:2a:
34:ce:be:8c:3b:90:cb:64:ab:c3:14:d5:b3:ba:4d:
12:c7:df:60:32:75:b9:5d:6c:c0:9a:9e:97:5d:27:
6c:01:7e:77:91:84:79:8f:57:86:9e:fc:11:61:c9:
c8:fe:d3:65:01:d8:10:80:bf:45:1a:38:e5:dc:19:
59:22:b3:85:31:41:e8:96:de:19:d2:cf:cf:d7:da:
84:04:a6:dd:f5:ef:74:02:f1:09:b1:d7:36:bb:8d:
65:a7:12:48:9a:fd:5f:8b:00:64:4e:78:52:5f:1d:
dd:e4:3c:94:68:f1:91:97:b6:a3:16:d6:68:38:f2:
10:28:5c:2c:61:27:9e:0a:4e:01:b2:ce:ce:8e:3b:
fe:11:c8:40:81:17:ff:2a:6b:d2:29:7c:04:df:77:
61:48:5f:70:3b:51:c9:03:55:e6:d1:7a:6a:c0:0e:
af:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:99:7C:96:F6:92:1E:53:46:6F:C2:54:44:86:2C:35:87:18:A2:F6
X509v3 Authority Key Identifier:
keyid:5C:32:A9:25:C5:5F:1D:4E:6E:40:C1:0F:4E:8E:01:9B:48:3C:1D:50
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/QJl8lvaSHlNGb8JURIYsNYcYovY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/d3c8f7-ff8d-42b8-a762-45377418fbb2/1/XDKpJcVfHU5uQMEPTo4Bm0g8HVA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
206.245.213.0-206.245.215.255
Signature Algorithm: sha256WithRSAEncryption
66:6c:84:c4:7c:b1:fc:25:11:16:a6:d1:62:5f:56:a9:46:75:
73:30:03:db:86:b3:a2:10:17:fd:8b:99:85:7e:ce:8b:07:a1:
c5:86:4c:44:3e:cd:22:0a:98:0f:ee:3c:56:4d:fc:2d:df:78:
be:a8:00:d1:76:83:ee:9a:33:11:00:96:61:9e:fa:47:28:d8:
29:28:94:f9:f4:d4:38:c6:c1:db:2a:33:2e:f2:fa:4b:fb:86:
d7:1b:86:02:3d:94:e3:44:8f:7e:5d:68:e2:41:5e:39:d8:f8:
66:8c:b1:d2:f6:c8:8e:6c:0f:b7:12:95:b9:76:64:ed:12:cc:
1c:d3:05:2b:2b:3b:f2:59:b2:ac:01:2d:57:16:bc:cb:ef:65:
93:47:67:0b:56:84:9a:00:d6:06:b2:ce:9a:7f:b3:be:18:91:
a2:d2:64:3a:9f:93:08:ad:d4:56:aa:5a:1c:4c:c8:ba:f5:af:
c7:14:0f:f3:0f:9d:c5:a1:5e:50:c8:41:f1:9c:e0:71:27:85:
8c:1f:98:3e:ef:8a:1f:e4:11:9e:79:cf:2f:ab:4c:45:6a:bf:
8f:21:23:6a:93:1f:54:d7:cd:74:e2:fd:cc:78:64:30:57:63:
31:2d:87:55:2d:95:ce:e3:49:16:bb:db:3e:08:65:bc:be:0f:
7b:2e:d6:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 00:31:31 2026 by rpki-client