Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/QeRbL9rsfHRMvQOdtIY4PUx2rHI.roa
File: QeRbL9rsfHRMvQOdtIY4PUx2rHI.roa (raw, json)
Hash identifier: 3AgSk7sC4SGEYRNyCRgYwYc28dLOyCDoTnPmYij2k2c=
Subject key identifier: 41:E4:5B:2F:DA:EC:7C:74:4C:BD:03:9D:B4:86:38:3D:4C:76:AC:72
Certificate issuer: /CN=07bca0482d605587eb0e0c851c38e807755f9017
Certificate serial: 01A13BC11B868DD39BC22C83C9E877B0D28A
Authority key identifier: 07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/QeRbL9rsfHRMvQOdtIY4PUx2rHI.roa
Signing time: Wed 14 Oct 2026 18:51:13 +0000
ROA not before: Wed 14 Oct 2026 18:51:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219100
IP address blocks: 2a14:1740::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.mft
rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 15 Oct 2026 23:00:13 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:3b:c1:1b:86:8d:d3:9b:c2:2c:83:c9:e8:77:b0:d2:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07bca0482d605587eb0e0c851c38e807755f9017
Validity
Not Before: Oct 14 18:51:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41e45b2fdaec7c744cbd039db486383d4c76ac72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:31:60:2e:85:a1:80:49:18:69:b3:36:14:b6:
da:46:fe:58:27:8c:dc:68:14:1d:b2:22:8b:31:7f:
c8:c3:da:e1:90:8f:e5:d7:74:16:96:0b:d6:94:5e:
e9:a7:4a:4d:f3:30:1c:f5:e0:6c:2a:ea:05:e8:9a:
d9:6a:df:02:92:84:70:87:69:51:13:1f:da:d9:82:
19:49:83:4f:1e:33:c8:37:93:55:e2:3d:62:fd:21:
90:ff:03:f1:a9:75:6c:2c:31:a4:06:a4:3a:c2:83:
cc:88:36:e8:5c:b8:80:20:6e:ba:8b:90:89:69:83:
5a:bd:23:6e:73:59:a8:2f:33:e7:d3:b5:83:47:58:
7d:6b:f9:7c:30:a8:e0:1a:5b:78:34:d2:a9:54:d5:
f6:a6:4f:45:bd:d8:dd:79:25:a9:89:91:88:ec:f9:
d2:9c:de:83:13:de:dd:fe:4b:4d:f0:e7:8c:bf:63:
00:a7:51:f2:7c:72:3e:1d:39:78:20:4a:01:18:20:
36:96:a3:fc:e0:97:52:3d:9d:f0:98:cb:2f:7a:d2:
cd:42:69:d5:3b:8b:1b:47:e8:f5:49:c2:f9:68:d7:
d4:d2:07:68:99:46:86:7b:0a:47:f5:61:9b:d2:df:
c8:f0:1a:cb:0c:53:b2:35:71:5b:e6:28:46:b7:cb:
d7:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E4:5B:2F:DA:EC:7C:74:4C:BD:03:9D:B4:86:38:3D:4C:76:AC:72
X509v3 Authority Key Identifier:
keyid:07:BC:A0:48:2D:60:55:87:EB:0E:0C:85:1C:38:E8:07:75:5F:90:17
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B7ygSC1gVYfrDgyFHDjoB3VfkBc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/QeRbL9rsfHRMvQOdtIY4PUx2rHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/94/766311-caa4-4399-8b35-fc79af1f6fb3/1/B7ygSC1gVYfrDgyFHDjoB3VfkBc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:1740::/29
Signature Algorithm: sha256WithRSAEncryption
51:39:87:e4:a9:25:37:93:68:ed:f6:ea:da:4c:eb:5a:f7:9d:
ea:ba:57:89:56:40:1f:50:84:4c:8c:e7:a6:95:1c:d4:b1:e0:
03:a3:ff:83:1d:5a:40:42:65:1c:2b:ff:fc:fb:3f:37:cc:6f:
27:f8:9c:c7:8d:f8:ec:84:0c:2b:96:35:4a:26:ff:76:82:8e:
19:ed:f1:05:10:27:d2:c2:1a:cc:c1:79:ae:eb:5b:53:ff:d5:
5a:77:47:78:d1:73:09:28:70:53:2d:ae:40:9c:f8:73:08:2a:
05:9b:a7:62:f8:8f:f9:d4:13:ec:bf:15:f9:e2:a1:9f:6b:18:
4b:8e:80:a0:61:8c:18:9d:e7:9f:7d:73:13:34:24:b9:0f:3d:
c3:40:f1:e3:1e:91:0a:26:ad:8e:17:57:e3:6e:ab:e9:df:73:
64:56:83:3d:62:cc:c1:58:0e:da:3c:83:b0:82:e1:2a:ba:56:
ff:91:cc:9e:a7:82:08:69:64:9b:d5:7f:c5:41:1a:a4:24:c7:
3b:04:24:30:f5:5d:67:78:fa:29:a9:73:20:d4:62:6a:21:2a:
da:3c:4e:4b:a0:dc:6e:69:a1:c2:c1:4f:a4:ea:af:77:78:84:
d9:f0:ac:54:29:73:b1:89:71:58:43:d5:fc:ed:aa:45:22:54:
de:13:e0:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 15 06:58:50 2026 by rpki-client