Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/QCSc5ZxopZ8iF2kL-pMNsjpvPRM.roa
File: QCSc5ZxopZ8iF2kL-pMNsjpvPRM.roa (raw, json)
Hash identifier: MU4rTud7C3ssJuYj+do0XX35TV10Hv3kXIpf2R4tdtE=
Subject key identifier: 40:24:9C:E5:9C:68:A5:9F:22:17:69:0B:FA:93:0D:B2:3A:6F:3D:13
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 019F1D47F921CA1CA2BEC8FA11F5107B0ED9
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/QCSc5ZxopZ8iF2kL-pMNsjpvPRM.roa
Signing time: Wed 01 Jul 2026 10:44:43 +0000
ROA not before: Wed 01 Jul 2026 10:44:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209811
IP address blocks: 95.215.200.0/23 maxlen: 23
95.215.201.0/24 maxlen: 24
95.215.202.0/23 maxlen: 23
185.208.8.0/24 maxlen: 24
194.31.160.0/23 maxlen: 23
2a09:1680::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 07:01:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:47:f9:21:ca:1c:a2:be:c8:fa:11:f5:10:7b:0e:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Jul 1 10:44:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40249ce59c68a59f2217690bfa930db23a6f3d13
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:40:26:8d:6f:d2:01:37:4b:a0:71:ce:93:5e:
b6:da:10:e4:f9:1d:d8:76:96:7d:76:f4:ad:81:1c:
9b:29:a5:b1:ed:cb:1b:53:7e:cd:81:63:78:91:ea:
4e:67:0f:2e:b5:a4:6d:c5:4f:e3:24:0d:b6:bc:27:
b1:0b:37:d0:f7:d2:04:36:a7:cd:e0:a8:dc:74:3b:
3e:8c:4a:e8:e6:b4:03:80:ba:d4:47:25:31:75:fd:
38:d6:fe:10:34:62:37:80:3a:a3:5e:d2:f1:7a:11:
67:99:84:c9:ba:a5:2c:5e:40:b5:f4:41:bb:29:c0:
7e:fe:a2:fc:16:e4:08:e2:73:f3:10:bc:c1:ba:4e:
98:9f:b2:a2:16:79:eb:ea:19:1c:66:ae:0b:cd:21:
ab:a2:07:c7:37:c2:11:ae:5a:b6:44:5a:74:ac:f4:
60:7a:ea:2d:53:57:dc:c2:c1:d7:f7:57:91:be:07:
59:ca:ce:32:79:a4:7b:18:3e:d4:32:03:8d:58:af:
af:b9:9c:42:f3:6d:0d:4d:38:a9:e3:20:c7:bd:22:
5f:fa:3d:60:66:57:44:ff:f3:58:85:ae:35:71:3a:
0d:27:e5:40:f7:4c:e6:bf:b8:b2:cc:d3:db:f9:6c:
1e:56:73:0d:1f:34:21:eb:d0:49:eb:ff:11:07:71:
d3:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:24:9C:E5:9C:68:A5:9F:22:17:69:0B:FA:93:0D:B2:3A:6F:3D:13
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/QCSc5ZxopZ8iF2kL-pMNsjpvPRM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.200.0/22
185.208.8.0/24
194.31.160.0/23
IPv6:
2a09:1680::/48
Signature Algorithm: sha256WithRSAEncryption
4d:fe:f0:03:fb:0f:7e:4c:68:39:53:45:02:0d:d0:61:e5:0a:
7b:a6:a5:d9:c2:75:38:78:73:5a:0a:31:0a:86:5b:10:a1:68:
a5:f7:6c:9c:30:83:b8:98:91:6f:73:e2:a1:40:8a:b7:28:dc:
8b:81:7c:c9:38:25:dc:2f:f8:ca:b8:82:0e:a9:38:09:51:9e:
dd:08:70:38:d6:61:17:c9:35:df:f5:f1:b8:bb:e6:74:8a:fc:
f6:f5:2c:79:17:6f:d2:0f:81:5c:d6:43:95:b4:16:60:7e:8b:
ec:a3:12:66:e3:89:c5:6f:cf:98:73:b0:f0:44:3d:db:7f:89:
fe:a6:e2:d6:b8:91:14:36:87:49:10:62:60:8d:eb:ff:3d:e9:
12:28:ee:77:33:30:ae:af:83:a0:b8:84:ee:a1:9e:9c:53:d1:
d8:d6:cf:7e:0a:92:1f:4b:02:ef:45:d1:6d:cc:ee:c1:88:eb:
f8:18:ef:54:ae:0f:e2:9c:34:48:fc:c1:33:6d:5f:45:80:de:
09:d3:45:e2:a5:bb:65:3b:6a:7b:ab:f9:ca:b3:a1:b5:bc:75:
13:20:18:fb:83:81:a5:72:0d:78:6e:a1:d9:fb:a9:f9:f9:61:
73:8e:93:71:70:26:88:7b:2f:f8:f3:49:62:bf:56:cc:52:d5:
01:ed:77:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:33:12 2026 by rpki-client