Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/QSCGwSsoRSbt1W2PmX3ch0nQTSY.roa
File: QSCGwSsoRSbt1W2PmX3ch0nQTSY.roa (raw, json)
Hash identifier: R4X1zIr5apakhLTxXprIGVOA1Cqy//r8dlHgHlvik2c=
Subject key identifier: 41:20:86:C1:2B:28:45:26:ED:D5:6D:8F:99:7D:DC:87:49:D0:4D:26
Certificate issuer: /CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Certificate serial: 019F2368A6597DFE61EE4904CB5F3AEA38E9
Authority key identifier: 33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/QSCGwSsoRSbt1W2PmX3ch0nQTSY.roa
Signing time: Thu 02 Jul 2026 15:18:08 +0000
ROA not before: Thu 02 Jul 2026 15:18:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219307
IP address blocks: 185.122.93.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.mft
rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:18:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:a6:59:7d:fe:61:ee:49:04:cb:5f:3a:ea:38:e9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=339af1753cb5827b7b433753b57c478d4aad6eeb
Validity
Not Before: Jul 2 15:18:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=412086c12b284526edd56d8f997ddc8749d04d26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:7b:e9:89:da:20:1c:d4:82:85:29:ba:f0:aa:
fb:c9:18:ad:f9:bc:a3:3d:5c:ab:21:46:37:8f:9e:
70:66:90:fe:88:e5:68:87:a0:71:60:cd:b3:6f:da:
cf:c4:c7:40:5f:ad:84:9e:cc:8f:b5:dd:21:1f:32:
98:ce:7e:8f:bd:ae:78:a1:3f:11:a5:22:57:fd:72:
ba:bb:44:33:82:6c:e8:dc:23:50:c6:c6:89:3c:82:
26:4e:18:d1:90:9f:50:a9:78:00:ce:f9:55:5b:dd:
c2:2e:0c:94:c9:65:34:4c:f2:b7:e7:cb:1d:82:77:
0e:59:9f:fe:31:70:b6:11:1f:d5:06:47:18:b3:d2:
b6:66:3a:56:2f:4a:44:11:d6:15:cb:c1:5e:8f:8b:
dc:43:ea:10:58:4d:c7:07:47:64:a5:61:cd:5d:17:
67:d7:74:94:5f:a3:ca:a6:b2:16:1c:13:90:f0:12:
8d:47:3a:cc:77:1b:14:f5:04:b2:3d:90:35:93:80:
c5:55:70:02:fe:fb:23:26:72:26:9c:7e:37:94:88:
cc:38:73:b8:b0:98:75:07:59:73:5d:33:71:dc:91:
71:0d:fc:08:7a:65:46:10:91:ab:6e:39:bb:fc:4b:
82:90:14:1d:e1:48:d7:d0:32:cf:4f:0a:65:72:da:
c5:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:20:86:C1:2B:28:45:26:ED:D5:6D:8F:99:7D:DC:87:49:D0:4D:26
X509v3 Authority Key Identifier:
keyid:33:9A:F1:75:3C:B5:82:7B:7B:43:37:53:B5:7C:47:8D:4A:AD:6E:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M5rxdTy1gnt7QzdTtXxHjUqtbus.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/QSCGwSsoRSbt1W2PmX3ch0nQTSY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/28a8f3-889e-4549-a44e-ce225187fc38/1/M5rxdTy1gnt7QzdTtXxHjUqtbus.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.122.93.0/24
Signature Algorithm: sha256WithRSAEncryption
30:03:b4:64:90:e4:1a:ee:62:89:9b:89:af:30:8c:16:89:26:
86:5a:21:2f:6d:00:30:98:a8:95:b6:4b:85:cb:b1:ca:39:e7:
9b:1f:6c:97:f0:88:b9:f5:8c:6c:ce:19:1f:e5:6e:75:a4:8b:
d4:d5:19:c4:ee:46:e3:57:15:91:62:8d:d3:b5:f2:78:87:7a:
df:07:a3:b7:d1:9d:ae:83:ac:4f:f7:53:1b:2c:7e:02:ff:0f:
7a:a5:20:2c:ce:d1:15:d2:f2:80:3a:96:68:8a:b1:3e:27:58:
e4:35:16:5a:85:7b:7f:8e:70:53:7f:5c:7b:f2:a5:f0:3a:0e:
e6:e2:4b:91:80:20:e8:93:65:55:63:d5:1b:81:5a:7a:6f:65:
37:32:23:a7:b3:8a:07:e2:16:63:54:f8:f6:2c:0c:29:21:46:
87:f6:ab:10:e5:b0:55:ef:bb:18:ea:3b:15:3f:5b:8d:ab:16:
77:ba:ca:6f:35:d6:71:16:55:e4:6f:e9:97:2b:20:3d:28:d8:
b7:8c:da:20:f0:72:e8:15:c0:72:a4:01:cb:42:00:1e:5a:a2:
ac:32:fb:f9:bb:cd:83:cd:26:6f:52:84:f7:a4:ba:be:47:96:
82:c1:c0:e9:3a:07:a3:49:6e:ba:06:c4:31:f7:39:c0:9c:87:
91:00:78:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 21:57:40 2026 by rpki-client