Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/Qy9KRB3QGK3zXMOw_VOH-jwp1cg.roa
File: Qy9KRB3QGK3zXMOw_VOH-jwp1cg.roa (raw, json)
Hash identifier: 8QsATaPXEcWA3tWk++uDPvHOlNGwIRxvnfoQCxEp5kA=
Subject key identifier: 43:2F:4A:44:1D:D0:18:AD:F3:5C:C3:B0:FD:53:87:FA:3C:29:D5:C8
Certificate issuer: /CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Certificate serial: 019FEB351111C476FFC899DEB786996FFA04
Authority key identifier: C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/Qy9KRB3QGK3zXMOw_VOH-jwp1cg.roa
Signing time: Mon 10 Aug 2026 10:25:51 +0000
ROA not before: Mon 10 Aug 2026 10:25:51 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 195.123.191.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.mft
rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 19:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:eb:35:11:11:c4:76:ff:c8:99:de:b7:86:99:6f:fa:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c105adc5c4262dff6b3f3e606830c7f971d766ce
Validity
Not Before: Aug 10 10:25:51 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=432f4a441dd018adf35cc3b0fd5387fa3c29d5c8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:f5:55:9d:4e:0e:3d:a2:e9:15:43:fe:fd:f4:
9b:03:44:de:12:47:49:87:2b:c7:25:d1:9d:a4:71:
a7:80:56:8e:e6:c6:97:84:25:5a:78:b5:eb:42:ca:
cc:11:d2:94:0c:05:36:f4:1d:7a:28:13:54:7a:ed:
ea:41:7f:e4:e4:2f:71:70:38:e8:44:b0:39:a9:c7:
4d:d3:94:1c:3c:21:9c:d7:7f:58:32:8f:12:5b:9f:
92:e5:3b:05:14:2a:7d:bb:49:24:66:11:35:05:75:
1f:b2:43:0c:9d:f7:b5:60:3a:f4:28:3a:63:7c:fa:
a3:96:54:c4:9b:cc:32:4b:87:22:6d:f4:99:a8:d1:
28:bc:a5:ab:9e:09:5b:fb:3a:16:65:db:cd:38:a5:
26:41:26:4f:e7:eb:4c:be:21:59:fd:05:d1:a0:b2:
c9:00:c7:39:ed:4b:f1:e3:d6:2d:d2:d6:32:18:16:
99:81:bb:da:f5:77:8d:e8:5e:91:ae:f2:90:b7:16:
eb:05:40:5b:bd:cd:4b:84:7d:57:95:95:d8:17:bc:
e4:92:bd:8b:f5:16:c0:bf:1e:ce:5d:7c:10:35:f7:
a3:6a:6f:e8:85:02:f0:65:75:c6:bd:bf:8c:30:56:
12:91:4c:37:ae:2d:fc:0c:b6:28:72:38:8f:a6:6d:
eb:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2F:4A:44:1D:D0:18:AD:F3:5C:C3:B0:FD:53:87:FA:3C:29:D5:C8
X509v3 Authority Key Identifier:
keyid:C1:05:AD:C5:C4:26:2D:FF:6B:3F:3E:60:68:30:C7:F9:71:D7:66:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/wQWtxcQmLf9rPz5gaDDH-XHXZs4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/Qy9KRB3QGK3zXMOw_VOH-jwp1cg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dc/c49172-f8da-4128-8689-515845e6c317/1/wQWtxcQmLf9rPz5gaDDH-XHXZs4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.123.191.0/24
Signature Algorithm: sha256WithRSAEncryption
26:79:d4:74:f3:82:ae:b5:38:61:fb:9c:4e:ea:4e:27:02:81:
35:6a:a3:76:74:88:ac:32:80:0a:41:0c:11:11:f2:7e:22:8c:
8d:99:b5:c5:5d:32:91:e8:65:79:ea:43:9b:ff:48:86:08:29:
bb:83:5a:0f:9d:67:90:45:8d:19:9e:eb:d8:07:01:0f:98:be:
ec:2c:7f:e5:09:5b:58:4f:1c:c6:6a:d0:74:d7:69:55:a2:ca:
bc:24:57:d9:d0:85:9f:0a:13:50:ed:16:55:4e:58:ed:69:45:
d9:4f:98:92:1d:90:3f:61:53:0b:16:7a:5b:e7:fd:14:63:76:
ec:70:83:e5:00:5d:f6:92:c8:5e:50:14:b2:ab:58:3f:bb:4c:
ed:e3:5c:5b:25:a4:59:75:5d:ad:23:ae:c5:c0:dc:bd:3c:12:
af:d4:35:ec:25:1b:e8:c2:04:37:3b:18:e1:8f:f9:f7:0a:93:
86:22:25:59:80:fe:8f:dc:3b:45:22:cc:92:41:da:22:61:b3:
90:0c:4c:32:a0:8d:fa:1f:6f:ac:48:32:c9:5e:dd:ce:09:5d:
d0:0d:a6:c7:37:fc:0e:37:d7:c1:c1:58:2e:87:4e:91:da:78:
6b:27:19:69:29:17:f7:c6:6b:f9:20:8a:63:0c:c6:63:22:9c:
35:c9:f1:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Aug 24 03:36:27 2026 by rpki-client