Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/QKTnFh-j9Kt54vDdO25fBIfTHXc.roa
File: QKTnFh-j9Kt54vDdO25fBIfTHXc.roa (raw, json)
Hash identifier: kHMRh3Ora7LSmFbr2Gskd+YLyis5Ti6psW4x/iQWOq8=
Subject key identifier: 40:A4:E7:16:1F:A3:F4:AB:79:E2:F0:DD:3B:6E:5F:04:87:D3:1D:77
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019F04C8805C0CB08332C51F0DC1F6C81076
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/QKTnFh-j9Kt54vDdO25fBIfTHXc.roa
Signing time: Fri 26 Jun 2026 16:34:36 +0000
ROA not before: Fri 26 Jun 2026 16:34:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 139528
IP address blocks: 189.73.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 10:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:04:c8:80:5c:0c:b0:83:32:c5:1f:0d:c1:f6:c8:10:76
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Jun 26 16:34:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40a4e7161fa3f4ab79e2f0dd3b6e5f0487d31d77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:06:a2:fa:09:0a:d7:8f:46:15:05:44:0c:1a:
8e:4b:ab:19:8f:5a:f8:ec:aa:87:de:42:67:a7:de:
11:f0:95:f9:84:b1:e3:95:3c:a7:5b:24:5a:62:6c:
b8:3a:63:77:22:6f:15:4b:98:20:8e:73:e4:71:c5:
0a:29:c0:55:c8:b1:68:11:6c:21:7b:aa:87:ad:44:
ad:41:f7:da:44:f8:ec:a2:66:4a:8c:df:8b:d6:81:
7e:c4:85:7f:fc:c9:22:c5:52:6c:c3:05:53:e2:ac:
7e:61:90:30:b9:30:0a:d3:d9:12:a0:49:bb:41:05:
07:24:21:bd:16:07:2b:5b:b7:0e:75:00:98:f9:8f:
c9:86:ce:cb:03:81:21:29:07:60:39:bd:5a:19:bf:
d9:ce:f3:17:2b:b4:d4:02:b4:4a:12:97:87:71:79:
b6:51:e3:93:72:d2:86:91:c5:3a:1b:7c:1d:be:4b:
f4:78:bc:33:e0:1b:aa:56:e3:35:9d:0d:19:24:69:
e5:98:79:4a:40:45:c5:1b:1a:0c:1b:ff:01:21:c9:
3d:c3:94:65:f7:38:cc:b7:0f:fa:5f:5d:b4:3d:11:
a3:b0:a1:1b:5d:b9:10:47:37:04:02:cb:64:dd:3e:
b9:ac:cb:88:9c:55:ed:57:e4:e1:f1:1b:e9:29:de:
4e:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A4:E7:16:1F:A3:F4:AB:79:E2:F0:DD:3B:6E:5F:04:87:D3:1D:77
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/QKTnFh-j9Kt54vDdO25fBIfTHXc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.73.22.0/24
Signature Algorithm: sha256WithRSAEncryption
d7:3a:83:d6:da:1a:02:5e:ac:6d:1f:00:ba:3e:e4:41:c0:6a:
0c:f7:eb:d1:0b:48:73:13:ed:4a:4d:1c:da:6f:7f:4c:2d:4e:
0f:3b:08:f8:7b:57:a3:77:83:33:68:be:7c:ab:c6:ff:79:3f:
06:95:12:f7:f5:a6:12:51:56:57:94:94:ac:28:a0:4b:d7:8d:
ba:02:1c:02:a2:5f:1f:61:f7:ec:b7:57:3f:cd:2b:cb:eb:03:
ea:21:18:91:d8:06:1f:05:74:38:d3:c5:e5:89:c8:fa:dd:bd:
24:a4:87:96:2c:08:49:c1:23:2c:28:c7:7d:f3:12:c7:22:d8:
9a:70:f8:8f:e7:3f:3d:a7:a2:12:aa:d5:2e:8a:4d:06:69:65:
b5:29:6e:26:a3:a1:88:20:eb:d2:9c:1b:29:6b:82:7d:17:da:
6e:09:fe:77:43:93:25:8f:d2:30:52:3d:6c:ab:7c:3b:99:be:
e4:b9:bd:02:cd:3b:e8:ad:2b:9f:1d:c3:59:38:57:82:5a:77:
32:d3:0e:99:7f:84:54:5f:9b:b3:0c:b1:65:e3:48:ec:7f:87:
fe:68:dd:64:8e:9e:17:13:0f:8e:35:58:c0:1c:4d:6d:03:d6:
3f:d8:c7:04:f9:db:8b:24:dd:c9:fb:cd:e3:2f:82:4c:a3:78:
43:46:b1:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 18:14:19 2026 by rpki-client