Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/QjLsiIKkiJBGR37gz60we39bkgs.roa
File: QjLsiIKkiJBGR37gz60we39bkgs.roa (raw, json)
Hash identifier: 0RhSf3h7qeydwq03VtlR65uCUJ4lQzZ/r3w+u6PUY+0=
Subject key identifier: 42:32:EC:88:82:A4:88:90:46:47:7E:E0:CF:AD:30:7B:7F:5B:92:0B
Certificate issuer: /CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Certificate serial: 019FFFADDDED9336D78148383E9595392792
Authority key identifier: EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/QjLsiIKkiJBGR37gz60we39bkgs.roa
Signing time: Fri 14 Aug 2026 09:50:12 +0000
ROA not before: Fri 14 Aug 2026 09:50:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58330
IP address blocks: 194.213.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.mft
rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:ad:dd:ed:93:36:d7:81:48:38:3e:95:95:39:27:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=eebbf317e5faf5ef02c9cce79527d5e74b8abcc5
Validity
Not Before: Aug 14 09:50:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4232ec8882a4889046477ee0cfad307b7f5b920b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:4b:5e:05:b5:f4:e2:44:62:ed:09:10:70:e2:
ae:6b:ae:7d:0a:cc:6a:0e:9b:a4:c6:f4:be:da:3b:
74:9a:ee:fb:bb:7d:12:81:5c:89:8b:43:bb:a8:e0:
82:6f:08:68:4d:2f:b6:82:2e:dd:9c:66:f9:45:51:
49:6d:69:67:64:f5:67:86:52:3b:b2:a1:37:b8:3d:
6d:3c:b5:f3:1d:c2:42:a6:d4:b3:3f:34:64:f4:93:
7b:c3:f7:25:4c:f9:fd:63:fa:4a:46:f7:8c:85:ad:
c3:26:5c:b6:75:6e:d6:c2:dd:cf:92:aa:94:9e:91:
dc:e7:4a:3c:0b:33:2f:4c:15:fb:cc:32:06:88:8e:
33:4e:2e:9d:f4:51:a4:87:1f:89:da:d2:27:d1:47:
07:42:c8:4e:36:d8:18:db:29:89:5a:6b:1b:cf:cb:
6f:2e:28:9f:63:eb:b6:51:40:4e:93:ba:3e:27:14:
bc:3a:09:12:77:46:03:12:8d:09:71:e4:7f:42:10:
50:fa:a7:1a:9c:98:b0:39:60:ea:4d:a6:85:fb:78:
0a:85:c4:78:c2:4f:7b:4c:7e:bc:b8:0c:95:9f:f3:
1e:dc:86:37:42:ea:d3:a1:7c:3a:cf:d1:7f:94:23:
29:7d:d1:b0:8c:a2:6c:2b:7f:5b:36:2a:ca:f4:c8:
ac:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:32:EC:88:82:A4:88:90:46:47:7E:E0:CF:AD:30:7B:7F:5B:92:0B
X509v3 Authority Key Identifier:
keyid:EE:BB:F3:17:E5:FA:F5:EF:02:C9:CC:E7:95:27:D5:E7:4B:8A:BC:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7rvzF-X69e8CycznlSfV50uKvMU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/QjLsiIKkiJBGR37gz60we39bkgs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/6dec63-b9d9-480b-aeb3-6fe9bf60561c/1/7rvzF-X69e8CycznlSfV50uKvMU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.213.16.0/24
Signature Algorithm: sha256WithRSAEncryption
01:70:15:24:b3:a2:36:93:c5:64:60:99:05:51:7b:5e:46:72:
0f:51:96:e3:d6:d7:54:9d:3e:43:ed:c8:b6:c0:95:32:02:6e:
89:2e:6c:12:c3:ae:4b:60:0f:19:82:8b:49:db:02:1b:68:b2:
27:4a:c1:92:ea:5f:c9:ac:8b:5c:cf:e3:0d:20:40:42:f1:c6:
54:30:7a:39:d3:a0:83:5c:91:a8:54:5f:b5:6c:4e:62:c0:be:
b3:b4:0c:11:c7:f6:ea:a6:57:e3:27:e7:8f:58:61:0a:7b:88:
c2:3e:ce:d7:2d:86:a1:89:7d:11:ca:fb:dd:24:58:fc:42:bd:
7d:e0:86:6d:96:17:2b:67:65:4b:f8:e1:84:1a:37:b9:7d:d7:
9f:e1:70:00:61:85:84:e6:21:15:d6:d6:23:b0:23:12:a9:9d:
5f:2d:12:2d:d1:89:d9:c6:3f:d6:61:9a:30:4f:5a:e8:58:ff:
6a:be:66:e7:1a:66:c4:a5:18:4e:50:89:75:e3:ee:2f:a3:ea:
20:a2:4e:4d:ca:27:63:df:c2:1b:36:4d:f4:c5:bc:8b:37:29:
aa:89:52:af:3d:2e:c1:b6:2a:3b:37:5c:5b:17:5d:55:74:ed:
44:94:d0:7e:c6:0c:60:0a:dc:21:6d:cf:ef:15:9b:89:68:ed:
8d:3c:49:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 5 00:24:43 2026 by rpki-client