Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/QBFOO2tn9pUMXEP3B8Y6yrN0cbs.roa
File: QBFOO2tn9pUMXEP3B8Y6yrN0cbs.roa (raw, json)
Hash identifier: iD5VMKrDQqntsgGwuHDr3ykwaCt5FhHGjmfd2aJeHi0=
Subject key identifier: 40:11:4E:3B:6B:67:F6:95:0C:5C:43:F7:07:C6:3A:CA:B3:74:71:BB
Certificate issuer: /CN=0b934c36b773008865b9c9fb0fd48669395ac730
Certificate serial: 019EDA0963005112783060377AA3DE57F0D3
Authority key identifier: 0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/QBFOO2tn9pUMXEP3B8Y6yrN0cbs.roa
Signing time: Thu 18 Jun 2026 09:21:48 +0000
ROA not before: Thu 18 Jun 2026 09:21:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396253
IP address blocks: 2a00:86c0:400::/43 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 14:31:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:da:09:63:00:51:12:78:30:60:37:7a:a3:de:57:f0:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b934c36b773008865b9c9fb0fd48669395ac730
Validity
Not Before: Jun 18 09:21:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40114e3b6b67f6950c5c43f707c63acab37471bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:61:97:1d:74:1a:ce:2e:7e:47:56:2b:ea:47:
45:de:7e:fd:61:de:aa:89:9d:c0:5a:99:0d:2b:c8:
0a:d7:9f:63:0c:26:17:e1:3b:0a:35:c0:2e:f4:e5:
6e:0f:a4:a9:4a:d9:5a:e9:ae:79:a0:ea:bc:1d:6b:
9f:68:1b:11:1b:15:2b:da:1f:72:15:45:4f:92:2d:
02:78:e2:ee:65:5c:21:96:42:6a:89:84:d2:10:27:
de:19:bf:7e:d2:96:0f:ca:4b:a2:1f:88:9d:d8:67:
4c:f0:0c:2e:fe:be:d8:ba:7e:fc:f5:2c:f6:a5:45:
e3:11:ba:ff:10:30:6e:be:e8:43:f9:28:55:d0:59:
51:4d:f3:fc:5b:77:b1:a7:ec:58:d3:fe:9a:05:ee:
74:04:15:c0:5e:d5:81:d9:fb:62:bb:2b:28:1d:16:
70:bf:f1:fb:3b:ba:f9:9f:71:8b:0d:de:9f:aa:7c:
f2:77:76:5d:71:17:b8:d0:be:c2:d1:81:2e:aa:b8:
87:6b:bf:f3:92:aa:89:79:3d:21:29:8c:0f:6e:e0:
9d:f8:6e:16:b7:b9:4a:fc:6e:25:16:a4:19:55:29:
95:93:fd:6f:2e:3d:89:11:20:5a:fb:db:df:62:d1:
1c:a3:a4:5d:72:a7:3d:28:a1:a2:7a:17:d9:1f:63:
ca:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:11:4E:3B:6B:67:F6:95:0C:5C:43:F7:07:C6:3A:CA:B3:74:71:BB
X509v3 Authority Key Identifier:
keyid:0B:93:4C:36:B7:73:00:88:65:B9:C9:FB:0F:D4:86:69:39:5A:C7:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C5NMNrdzAIhlucn7D9SGaTlaxzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/QBFOO2tn9pUMXEP3B8Y6yrN0cbs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e4/decb7d-0388-4e3c-8db4-a302f51d382c/1/C5NMNrdzAIhlucn7D9SGaTlaxzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:86c0:400::/43
Signature Algorithm: sha256WithRSAEncryption
0f:c8:7a:2f:5b:cd:1d:51:df:a8:ef:44:e6:d2:5e:43:04:94:
ab:ef:f5:52:61:9d:b2:2c:aa:5b:0b:9f:e7:45:5c:d3:b0:8f:
bc:08:8b:e6:9f:4c:3b:b3:33:0e:19:ac:7b:15:10:5c:29:29:
96:79:70:f9:2e:31:d6:3b:2a:97:b8:79:9f:2c:10:c3:6d:a8:
c1:b2:a1:23:b9:b7:19:58:7d:57:43:ba:21:41:66:ce:23:b0:
a7:bc:ac:d5:a4:32:06:fd:f5:97:5e:db:c5:4e:6a:6c:01:1d:
96:7e:51:a9:d3:40:05:fa:51:43:de:6d:78:8c:17:6d:3d:92:
21:99:ff:2c:cc:9d:ab:e9:e3:53:16:04:b4:06:f6:2a:41:74:
82:bc:a1:e1:69:f3:64:c3:ea:3d:ce:c0:af:f2:78:2a:7d:f3:
8f:c6:2e:aa:63:f0:e4:7c:15:0a:7e:4c:7f:a7:13:3a:52:4d:
dc:85:0a:4e:be:bb:5c:40:b0:c8:f0:40:e3:92:fc:51:db:98:
8d:ce:7d:a2:bd:fb:42:87:37:70:fc:8c:85:e2:88:24:95:89:
ff:94:91:b3:88:e1:83:64:f4:4d:df:5d:7c:c8:4a:2c:d7:16:
ce:82:b8:2c:79:da:a9:c4:5a:1b:82:6c:f3:b1:af:ee:dc:d4:
6a:7c:4d:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 21:12:41 2026 by rpki-client