Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/QDhw1KkZDodWyomQctcobtYcy9A.roa
File: QDhw1KkZDodWyomQctcobtYcy9A.roa (raw, json)
Hash identifier: p/g8pPVwtED0FI0sAd8n1CJll9/ftPYUFtCBHNsi29c=
Subject key identifier: 40:38:70:D4:A9:19:0E:87:56:CA:89:90:72:D7:28:6E:D6:1C:CB:D0
Certificate issuer: /CN=13440366007eb56f10e9f99e95204d330508b9b0
Certificate serial: 019DAF9DBC3FCA7666154EEE1969F255D1F1
Authority key identifier: 13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/QDhw1KkZDodWyomQctcobtYcy9A.roa
Signing time: Tue 21 Apr 2026 10:37:23 +0000
ROA not before: Tue 21 Apr 2026 10:37:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 4755
IP address blocks: 89.31.192.0/21 maxlen: 21
89.31.192.0/24 maxlen: 24
89.31.193.0/24 maxlen: 24
89.31.194.0/24 maxlen: 24
89.31.195.0/24 maxlen: 24
89.31.196.0/24 maxlen: 24
89.31.197.0/24 maxlen: 24
89.31.198.0/24 maxlen: 24
89.31.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.mft
rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 19:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:9d:bc:3f:ca:76:66:15:4e:ee:19:69:f2:55:d1:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13440366007eb56f10e9f99e95204d330508b9b0
Validity
Not Before: Apr 21 10:37:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=403870d4a9190e8756ca899072d7286ed61ccbd0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c4:d5:af:54:2d:b4:df:c3:6c:5f:09:a9:9e:
12:79:f3:9a:fe:0e:74:a6:df:3b:84:72:8d:2d:84:
c1:2d:44:be:d6:fe:b9:d9:d8:b1:f2:89:0a:81:03:
ec:3b:29:bd:73:30:09:5e:94:82:a5:46:7d:d8:c0:
2f:ab:2d:da:9c:b8:9f:cb:81:63:1c:5b:5b:d9:d4:
1c:d6:cb:4c:07:36:ee:e8:5b:59:25:2e:4c:3c:ba:
a8:51:c4:68:a7:d2:a5:97:c6:47:91:aa:47:67:04:
93:86:b6:f8:71:9e:0e:06:14:8e:b5:8a:fc:0b:f6:
80:67:b9:73:ad:16:66:df:89:8b:68:07:dc:0c:f8:
0d:b4:51:0b:2a:57:f5:76:9f:d5:7a:66:d3:f0:10:
be:3f:74:eb:8e:84:35:08:fa:48:e4:0a:90:fa:3b:
3f:2f:e2:38:17:74:22:67:81:27:e9:f1:8a:bd:88:
a7:d2:d2:3c:1d:ee:c0:aa:02:eb:47:c1:fe:3b:3e:
f0:6e:be:ce:71:a1:e0:fa:e9:fb:88:58:91:6c:ee:
af:a9:ed:f5:36:b9:c2:9d:a8:57:57:f3:51:cd:a8:
1e:c9:d6:cd:00:37:0d:bd:56:49:9a:ee:80:00:c3:
bf:7d:a6:18:83:8c:d5:19:8e:c8:14:aa:d6:cc:e5:
24:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:38:70:D4:A9:19:0E:87:56:CA:89:90:72:D7:28:6E:D6:1C:CB:D0
X509v3 Authority Key Identifier:
keyid:13:44:03:66:00:7E:B5:6F:10:E9:F9:9E:95:20:4D:33:05:08:B9:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E0QDZgB-tW8Q6fmelSBNMwUIubA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/QDhw1KkZDodWyomQctcobtYcy9A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/0b0280-9623-44ba-8ddf-44c1a4eb969c/1/E0QDZgB-tW8Q6fmelSBNMwUIubA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.31.192.0/21
Signature Algorithm: sha256WithRSAEncryption
1f:b1:d4:63:cb:3c:b8:18:5a:23:33:9e:3b:b3:0c:c7:03:eb:
a3:79:49:ae:48:e5:ae:42:59:7b:7a:22:6f:2c:0e:f0:54:3d:
fc:db:c5:0e:20:cd:f8:1e:14:87:d4:61:02:56:1c:ef:c4:c2:
a1:64:1d:7a:43:92:d6:7e:b0:55:3b:cd:30:65:1b:c8:3c:77:
2c:25:7e:9d:28:5f:92:9f:ac:15:e7:e8:75:69:ee:4f:40:fe:
e9:1f:5d:85:18:75:7c:52:da:d4:34:75:36:cd:5f:49:36:71:
7c:2a:10:58:97:d6:12:da:1a:1d:06:f7:2b:a8:a0:f1:04:19:
04:cd:05:8a:cb:05:9c:76:0b:90:ad:b9:f9:f8:c1:fb:11:c3:
3d:27:2d:f5:0e:6d:f3:cf:92:7e:7f:5c:cd:d0:f0:02:da:75:
b2:b1:03:fc:df:b9:c6:5c:9e:38:e6:8d:ee:1a:7f:e9:06:b5:
68:9c:81:22:99:17:d5:31:95:32:98:c9:c4:fd:ec:fd:6e:7a:
57:dc:b6:da:57:eb:0b:7a:43:22:99:4b:ae:de:1c:c8:ee:24:
87:43:a3:59:6b:2f:fb:25:9e:3c:a1:25:9a:47:84:5f:23:c4:
80:0b:fa:b9:48:f4:05:b3:cf:ca:55:04:75:47:90:b2:07:2a:
23:c3:1b:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Apr 22 02:53:55 2026 by rpki-client