Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/QOM15JeN0LuoBWCIcbxrvBihxTo.roa
File: QOM15JeN0LuoBWCIcbxrvBihxTo.roa (raw, json)
Hash identifier: RgmDFHjBWCEG8nuyIsqAeoRJCFfCkfWjGGmoJpZMo70=
Subject key identifier: 40:E3:35:E4:97:8D:D0:BB:A8:05:60:88:71:BC:6B:BC:18:A1:C5:3A
Certificate issuer: /CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Certificate serial: 019F236920EDA5227535B9613B4FA20398E1
Authority key identifier: A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/QOM15JeN0LuoBWCIcbxrvBihxTo.roa
Signing time: Thu 02 Jul 2026 15:18:40 +0000
ROA not before: Thu 02 Jul 2026 15:18:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56458
IP address blocks: 89.40.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.mft
rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 07 Jul 2026 18:02:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:20:ed:a5:22:75:35:b9:61:3b:4f:a2:03:98:e1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7130e7d3a76097d02a958b3f0395dfd187d17e2
Validity
Not Before: Jul 2 15:18:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40e335e4978dd0bba805608871bc6bbc18a1c53a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:a0:60:7a:91:3d:5f:11:d2:21:9c:0a:20:c6:
d9:6c:6e:a0:ba:d8:2f:82:43:b4:83:b3:89:3e:ee:
84:f2:9a:0c:29:5a:31:53:9e:af:a8:4c:47:f8:33:
bc:f5:43:f0:b2:ff:37:82:69:95:78:5c:a6:b7:44:
7d:16:4d:a5:dd:ed:06:72:ee:af:29:70:e7:2e:be:
8c:f3:75:3d:5b:cb:2a:35:5f:b0:f7:98:0c:8b:80:
5d:79:d2:25:97:69:21:10:56:da:fb:7b:b5:cd:56:
f5:24:21:d1:2b:3d:14:cc:a4:ec:e0:35:9e:48:1a:
b5:8e:71:62:cc:68:5b:5a:4f:1e:38:0a:9c:2a:3b:
6f:09:92:1a:67:2a:c0:be:4e:58:82:58:90:a1:7f:
a3:cb:8d:6d:8c:d1:52:90:b6:e9:2b:cf:bc:2b:49:
33:44:0b:3d:71:7d:9a:db:3e:16:4b:99:c9:13:ad:
29:bb:b5:51:b7:1f:3e:47:7b:a9:f8:a3:58:f5:ca:
f8:e2:12:d9:8d:1f:c6:bb:4a:c4:3d:4b:a7:55:a2:
62:08:2d:4d:31:b3:57:4c:d8:ae:12:8a:ce:fa:68:
81:9d:c6:6c:99:b9:77:34:40:c4:a3:f4:3f:f9:36:
08:ca:3a:de:81:12:d1:db:2e:2e:15:df:e6:b4:d4:
91:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E3:35:E4:97:8D:D0:BB:A8:05:60:88:71:BC:6B:BC:18:A1:C5:3A
X509v3 Authority Key Identifier:
keyid:A7:13:0E:7D:3A:76:09:7D:02:A9:58:B3:F0:39:5D:FD:18:7D:17:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pxMOfTp2CX0CqViz8Dld_Rh9F-I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/QOM15JeN0LuoBWCIcbxrvBihxTo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/aa/ea4455-7836-44c4-b2a3-2ece04e185c2/1/pxMOfTp2CX0CqViz8Dld_Rh9F-I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.40.224.0/24
Signature Algorithm: sha256WithRSAEncryption
62:3a:29:41:55:3f:c1:83:bb:3a:24:76:82:ab:eb:37:26:7a:
c5:c3:04:43:04:75:cb:64:5f:9b:c4:dc:be:e9:0c:e2:5e:d6:
be:a6:81:d6:19:ee:fb:7a:01:47:30:78:3f:46:c2:ec:17:a2:
21:57:4c:bb:87:f6:ce:b1:9a:f2:ef:3c:29:6a:c0:e0:b7:aa:
cd:85:12:1e:47:ff:ed:83:b4:e4:03:57:f5:80:3c:24:ba:59:
15:70:39:eb:38:20:32:04:f6:64:5f:79:5e:3a:55:ad:5e:93:
65:46:a1:f3:09:fc:08:4d:b2:26:c8:f1:db:f4:31:1d:3f:75:
f7:67:71:0d:32:6f:9f:6c:95:4b:d3:23:5b:59:7e:37:9c:a9:
7b:63:3e:22:3a:5f:36:43:01:c0:62:13:9a:2b:0d:69:6f:f9:
1c:35:5d:b9:31:6d:09:60:ef:01:e4:4a:74:73:73:5c:0c:f7:
80:94:27:6d:89:0a:63:1f:9f:61:cd:1a:ba:5e:24:55:04:96:
7b:c0:2d:64:c5:38:42:84:6c:01:bb:4d:59:38:dc:bc:db:e0:
cf:0e:f1:46:22:40:e4:0c:3c:a7:96:c9:5e:f3:d7:5e:55:41:
49:ea:43:3c:af:f7:c1:c5:40:12:56:1b:d0:be:41:4a:dd:31:
22:b6:14:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 7 00:16:48 2026 by rpki-client