Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/QVECRN6Cu-PQMkswIWsyeNRGRsk.roa
File: QVECRN6Cu-PQMkswIWsyeNRGRsk.roa (raw, json)
Hash identifier: I3dyEmnPgNfFY/xj5tBg5DyiNrUQHcH1FfzcjyJ6IT0=
Subject key identifier: 41:51:02:44:DE:82:BB:E3:D0:32:4B:30:21:6B:32:78:D4:46:46:C9
Certificate issuer: /CN=58ad60da52671e9083cf39864eca2aa23241be9e
Certificate serial: 019F750D4F53414FFB9C13AA9676CBA64CF8
Authority key identifier: 58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/QVECRN6Cu-PQMkswIWsyeNRGRsk.roa
Signing time: Sat 18 Jul 2026 11:47:14 +0000
ROA not before: Sat 18 Jul 2026 11:47:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a0e:d300::/29 maxlen: 29
2a0f:89c0::/29 maxlen: 29
2a0f:e3c0::/29 maxlen: 29
2a10:7ac0::/29 maxlen: 29
2a13:b740::/29 maxlen: 29
2a13:bd40::/29 maxlen: 29
2a13:bec0::/29 maxlen: 29
2a13:d1c0::/29 maxlen: 29
2a13:dfc0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:75:0d:4f:53:41:4f:fb:9c:13:aa:96:76:cb:a6:4c:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=58ad60da52671e9083cf39864eca2aa23241be9e
Validity
Not Before: Jul 18 11:47:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41510244de82bbe3d0324b30216b3278d44646c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:cc:ca:34:ca:c2:fd:97:ec:d3:d2:9a:16:ba:
84:dd:44:bc:85:e6:55:3c:d7:af:23:fc:b9:ca:b4:
5a:e9:9d:a4:4e:b0:f8:b6:ce:03:1e:37:fc:53:ac:
51:c2:e2:b1:9e:33:85:28:58:e7:78:45:bf:85:95:
dc:78:52:9d:49:47:bb:0e:c6:d9:23:97:c0:d6:b0:
31:d5:b1:3e:47:ce:0c:7c:73:4e:d1:15:64:9a:4c:
59:07:96:01:26:24:ee:9b:7c:41:f9:db:87:08:7c:
9e:43:bb:4e:ce:49:1b:b8:e0:9b:c4:5e:e8:51:eb:
aa:f6:a0:19:56:49:b4:24:7e:5d:43:61:c7:77:57:
d3:66:e7:96:7c:09:e1:7d:a2:3e:3b:84:82:6d:e6:
ae:53:d0:4b:10:d9:cd:fc:f0:58:50:15:49:16:35:
0e:81:62:95:39:47:aa:2c:6c:e3:fa:14:f3:32:6a:
f3:b7:f2:f3:16:1f:b9:d5:b6:77:2c:8e:fd:fc:3b:
84:77:28:f8:8d:b8:01:b4:84:c6:5c:d7:97:9e:9e:
db:91:15:cf:89:f4:ba:c1:5c:07:2a:8d:c7:3e:cf:
02:f9:4d:42:c0:17:b7:87:93:19:e5:21:39:a1:2f:
67:cc:62:93:84:8f:b5:67:d1:b0:e5:36:5c:30:8c:
d9:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:51:02:44:DE:82:BB:E3:D0:32:4B:30:21:6B:32:78:D4:46:46:C9
X509v3 Authority Key Identifier:
keyid:58:AD:60:DA:52:67:1E:90:83:CF:39:86:4E:CA:2A:A2:32:41:BE:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WK1g2lJnHpCDzzmGTsoqojJBvp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/QVECRN6Cu-PQMkswIWsyeNRGRsk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/7a1988-2736-49dc-a907-11b3cf3fd4e1/1/WK1g2lJnHpCDzzmGTsoqojJBvp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0e:d300::/29
2a0f:89c0::/29
2a0f:e3c0::/29
2a10:7ac0::/29
2a13:b740::/29
2a13:bd40::/29
2a13:bec0::/29
2a13:d1c0::/29
2a13:dfc0::/29
Signature Algorithm: sha256WithRSAEncryption
72:d0:d0:6e:0a:c5:fc:eb:71:e4:44:27:30:5b:1d:10:67:fd:
16:c9:7c:60:78:09:1c:e8:0f:9b:ba:3d:fc:c5:c9:fd:96:02:
f3:18:b5:0b:54:ac:2b:db:90:c8:2c:e3:e2:fc:da:06:1b:66:
2c:68:8f:0b:a2:16:98:3f:c3:61:1d:9b:a9:af:1d:f6:da:cc:
dc:45:30:8c:9d:cd:d5:cc:2a:3f:a7:f3:29:3c:13:6c:4a:23:
4a:5e:4b:bf:39:5c:66:0e:f2:82:92:20:92:dc:f1:7e:86:b4:
af:06:ec:5b:f7:df:cf:a5:13:8a:6b:68:15:74:c3:8f:8e:33:
66:02:6d:6d:b5:ad:c6:ad:f8:79:fd:72:f4:8d:34:9e:ca:04:
92:13:e4:b4:38:15:92:f5:aa:93:45:5a:eb:e7:00:c7:53:d4:
32:7c:c0:b1:61:8e:24:64:49:7b:68:fd:0f:18:ed:48:fa:45:
0c:bb:9d:d8:a7:b5:ab:07:92:fa:02:61:cf:54:10:4b:81:57:
80:9e:37:48:cd:5f:43:9d:07:f9:f1:eb:1f:b1:61:56:34:c4:
d2:dc:d1:83:09:10:4a:c5:9b:20:b6:c0:c2:e7:24:e8:4d:06:
e1:2c:6c:75:ca:3c:3c:48:f6:1d:81:a6:1a:f5:6b:30:36:0f:
aa:12:c2:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 13:52:18 2026 by rpki-client