Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/Qd0QU2IncFPsjVCskf3um5QV14Y.roa
File: Qd0QU2IncFPsjVCskf3um5QV14Y.roa (raw, json)
Hash identifier: tYPrbjqZzNEuofSUn5IUkl+i1pTB4fAA+xmGJsosBpU=
Subject key identifier: 41:DD:10:53:62:27:70:53:EC:8D:50:AC:91:FD:EE:9B:94:15:D7:86
Certificate issuer: /CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Certificate serial: 019FFF90CD48BED0DC07331AE1E990A61106
Authority key identifier: D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/Qd0QU2IncFPsjVCskf3um5QV14Y.roa
Signing time: Fri 14 Aug 2026 09:18:27 +0000
ROA not before: Fri 14 Aug 2026 09:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47944
IP address blocks: 94.125.200.0/21 maxlen: 21
2a03:2ba0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 15 Aug 2026 15:11:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ff:90:cd:48:be:d0:dc:07:33:1a:e1:e9:90:a6:11:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1f7cd0ec4c3bc54c59431307eec36ef03827733
Validity
Not Before: Aug 14 09:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41dd105362277053ec8d50ac91fdee9b9415d786
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:07:f2:5d:e3:3b:5c:a4:ea:c5:a3:84:f9:13:
ca:b5:af:0e:86:d0:ce:39:ed:59:d6:47:e5:a8:03:
e8:6b:d0:54:c1:9e:0c:1e:94:72:85:11:52:a5:c6:
6e:78:e8:f9:e5:36:65:60:b3:aa:7a:ec:c2:6c:7d:
89:5b:e9:81:a3:75:53:da:a1:6e:cd:e4:9a:98:8f:
e1:fa:24:dd:09:08:a6:05:3f:68:60:13:df:17:81:
01:c5:69:d4:24:41:0f:85:07:22:3a:bb:85:17:9d:
ce:a8:08:5e:ac:4d:14:3e:dc:f0:f8:2b:53:a9:8b:
54:36:8b:14:4a:8a:a7:db:46:0d:26:23:e8:8c:96:
a1:0e:40:fd:1b:4e:fb:07:86:03:94:47:79:c1:f0:
bf:7f:6a:6a:41:88:12:1e:5b:84:96:2c:e8:8a:3e:
12:12:0d:c1:d6:f9:4f:f5:0c:81:7e:4a:e4:8a:92:
f7:2b:4a:9d:fd:aa:87:64:36:d8:01:84:9e:b4:f9:
b4:aa:14:68:d4:80:14:ca:a1:6d:de:98:fc:95:f1:
c2:6f:bd:b4:5d:03:8a:b8:8a:87:b4:8d:4d:f4:41:
aa:ca:7b:24:3a:83:7e:8f:d9:ff:13:93:f9:9f:79:
97:54:3e:e9:1b:05:6c:75:51:62:f7:e3:77:61:57:
d4:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DD:10:53:62:27:70:53:EC:8D:50:AC:91:FD:EE:9B:94:15:D7:86
X509v3 Authority Key Identifier:
keyid:D1:F7:CD:0E:C4:C3:BC:54:C5:94:31:30:7E:EC:36:EF:03:82:77:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0ffNDsTDvFTFlDEwfuw27wOCdzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/Qd0QU2IncFPsjVCskf3um5QV14Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/024d47-47b2-40b5-a2b8-9cb5d88fdd39/1/0ffNDsTDvFTFlDEwfuw27wOCdzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.125.200.0/21
IPv6:
2a03:2ba0::/32
Signature Algorithm: sha256WithRSAEncryption
cc:17:67:57:88:6c:59:1e:23:e6:57:34:33:20:94:7a:cb:73:
2c:91:45:bf:89:41:e7:11:ff:7e:69:cf:1b:72:80:7c:0b:82:
ef:0a:2d:b2:a6:9f:d8:25:33:df:46:a5:82:e6:e8:10:a5:bd:
c5:52:2a:d3:4a:c7:be:e3:09:ec:58:bd:03:e4:64:71:a8:65:
ed:42:59:cb:d5:8e:f4:b3:6b:91:c1:d0:e2:c1:07:69:19:1d:
ca:af:f2:5d:93:03:01:96:f0:12:a9:f3:f3:9c:13:d4:27:a6:
da:f7:ab:90:e7:aa:7e:60:fa:91:56:cd:28:fd:e7:36:93:77:
13:93:6d:9e:e6:9b:76:52:b0:3e:01:67:43:1e:d8:8d:19:39:
80:1e:4e:ee:4f:5e:f1:87:f2:23:42:4c:1c:6e:81:a8:0d:4c:
30:07:8c:fe:98:e6:43:e2:d5:bc:51:74:e5:e7:6e:06:76:80:
0c:f0:68:7a:36:f7:48:6a:d0:dd:b9:ff:26:3a:45:11:0c:a7:
8b:98:c6:2f:d3:86:ac:11:4f:f1:8c:2f:30:1b:74:eb:37:81:
8c:09:0f:17:e4:0d:83:d4:ef:f9:fd:bc:65:2d:bf:a9:c9:de:
ab:59:a9:2d:69:43:b9:7a:1c:f6:46:7f:4e:ad:c3:75:96:cf:
94:c7:b7:a3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 15 00:25:50 2026 by rpki-client