Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9e/aad186-39ca-43db-b3a1-d0d1a09749c6/1/QJsrhdEdCtOQLblmVVhHloYH8sQ.roa
File: QJsrhdEdCtOQLblmVVhHloYH8sQ.roa (raw, json)
Hash identifier: 71BiScIybvNz476ZffLbUDCMqcdQXVBvY7rGsjkQlBE=
Subject key identifier: 40:9B:2B:85:D1:1D:0A:D3:90:2D:B9:66:55:58:47:96:86:07:F2:C4
Certificate issuer: /CN=a641485f383014fbcfae4bab8281c083f31f7adf
Certificate serial: 019D961DFB4CC1A8F13A2D50723A7B6BA9A4
Authority key identifier: A6:41:48:5F:38:30:14:FB:CF:AE:4B:AB:82:81:C0:83:F3:1F:7A:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pkFIXzgwFPvPrkurgoHAg_Mfet8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/aad186-39ca-43db-b3a1-d0d1a09749c6/1/QJsrhdEdCtOQLblmVVhHloYH8sQ.roa
Signing time: Thu 16 Apr 2026 11:47:20 +0000
ROA not before: Thu 16 Apr 2026 11:47:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199044
IP address blocks: 131.222.254.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/aad186-39ca-43db-b3a1-d0d1a09749c6/1/pkFIXzgwFPvPrkurgoHAg_Mfet8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/aad186-39ca-43db-b3a1-d0d1a09749c6/1/pkFIXzgwFPvPrkurgoHAg_Mfet8.mft
rsync://rpki.ripe.net/repository/DEFAULT/pkFIXzgwFPvPrkurgoHAg_Mfet8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 18 Sep 2026 22:53:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:96:1d:fb:4c:c1:a8:f1:3a:2d:50:72:3a:7b:6b:a9:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a641485f383014fbcfae4bab8281c083f31f7adf
Validity
Not Before: Apr 16 11:47:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=409b2b85d11d0ad3902db966555847968607f2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:b3:e5:9c:00:18:99:b0:0d:48:43:37:05:1c:
fb:00:04:ff:db:d5:fa:42:7a:cd:fe:b3:f5:de:3d:
06:94:d5:ec:fa:57:10:3a:53:81:6f:68:27:ea:e5:
9c:7f:f0:b8:af:cd:0c:00:fc:77:bb:cf:e0:67:c9:
04:77:e1:80:c3:46:7d:e8:c6:c0:2b:d8:ca:76:53:
03:2b:02:ba:a3:e6:e1:0d:05:94:ad:a2:f4:d1:11:
52:34:74:a7:3d:ca:cc:c3:e0:72:b7:27:02:c1:5f:
9a:30:e1:67:b0:7a:42:31:8e:be:88:9c:b4:ab:a5:
a6:fd:b8:a8:b9:44:02:d6:a2:f9:eb:4f:af:41:e3:
45:44:30:6e:0b:ff:16:96:e5:13:db:19:35:95:8e:
24:57:5c:f0:46:20:48:40:44:a8:27:0b:20:a5:8e:
53:3d:ff:9e:51:c4:db:f7:8b:e1:10:d0:a2:3a:ae:
6e:6b:5f:a8:b8:50:e8:50:3a:79:f3:cb:b5:69:4c:
ec:ec:bb:95:ae:7a:ee:b4:3c:e4:0b:69:e9:4d:49:
9b:4a:b7:70:24:37:c6:71:30:44:28:d5:ca:7e:41:
9d:04:65:48:0b:a1:d3:84:38:64:6f:ce:d1:ce:03:
cd:40:90:e0:05:82:2e:b2:5d:8e:dc:77:a5:bf:a7:
32:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:9B:2B:85:D1:1D:0A:D3:90:2D:B9:66:55:58:47:96:86:07:F2:C4
X509v3 Authority Key Identifier:
keyid:A6:41:48:5F:38:30:14:FB:CF:AE:4B:AB:82:81:C0:83:F3:1F:7A:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pkFIXzgwFPvPrkurgoHAg_Mfet8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aad186-39ca-43db-b3a1-d0d1a09749c6/1/QJsrhdEdCtOQLblmVVhHloYH8sQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/aad186-39ca-43db-b3a1-d0d1a09749c6/1/pkFIXzgwFPvPrkurgoHAg_Mfet8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.254.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:40:01:a2:b8:5f:ff:09:1a:e7:bc:f7:da:48:24:62:1a:8f:
73:33:9f:f1:96:19:3f:bc:87:e8:6b:d6:f5:5d:a3:21:07:c3:
16:b1:f5:82:e7:a2:95:26:91:75:a5:8d:37:d0:4f:7d:19:f2:
df:c1:0f:b8:75:9b:a0:d1:77:f1:eb:a2:1f:c4:b3:92:05:26:
c0:68:c5:0c:27:af:ce:0d:cc:fd:9c:42:7c:68:a3:96:9d:de:
9b:b6:17:37:12:ab:04:cd:be:b0:c1:a7:95:1c:c5:2e:f5:d9:
43:1b:c7:85:82:5c:f4:6e:bc:a9:32:1e:4a:81:5e:36:aa:30:
d3:fe:8d:69:e4:12:de:4a:c0:1e:1d:bb:25:93:1e:a7:8f:99:
55:15:9f:e5:be:bd:35:84:00:3f:bf:27:57:53:4e:53:fc:ee:
64:96:a5:ac:33:d1:2b:82:65:09:21:43:37:e5:bc:07:31:3a:
8b:6e:68:b9:46:76:57:a8:69:73:bb:c7:cf:0b:14:89:7f:1a:
58:35:c2:cf:ac:7f:36:a7:01:84:ed:17:ba:5a:01:c0:58:7d:
7c:9d:2b:cb:24:55:3b:1b:f4:c7:06:05:db:b2:07:34:1e:27:
cb:a7:28:dd:02:74:0f:94:d3:7a:27:83:ea:d2:7f:c7:97:54:
03:db:22:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 18 02:25:18 2026 by rpki-client