Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/QpyzK4A53JlVZWVV1v2jN1WPoAY.roa
File: QpyzK4A53JlVZWVV1v2jN1WPoAY.roa (raw, json)
Hash identifier: 16PfeuBy1FMSFoHFqQhe2PdhxV2dzUiD7Xy/ykQCYkY=
Subject key identifier: 42:9C:B3:2B:80:39:DC:99:55:65:65:55:D6:FD:A3:37:55:8F:A0:06
Certificate issuer: /CN=f19c5b8bec5701c1fdfd29d825b1e9b9e0d51b01
Certificate serial: 019FAE127AA9BA7394CB43B74328868A6017
Authority key identifier: F1:9C:5B:8B:EC:57:01:C1:FD:FD:29:D8:25:B1:E9:B9:E0:D5:1B:01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8Zxbi-xXAcH9_SnYJbHpueDVGwE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/QpyzK4A53JlVZWVV1v2jN1WPoAY.roa
Signing time: Wed 29 Jul 2026 13:31:14 +0000
ROA not before: Wed 29 Jul 2026 13:31:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50666
IP address blocks: 185.142.131.0/24 maxlen: 24
2a13:580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8Zxbi-xXAcH9_SnYJbHpueDVGwE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:ae:12:7a:a9:ba:73:94:cb:43:b7:43:28:86:8a:60:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19c5b8bec5701c1fdfd29d825b1e9b9e0d51b01
Validity
Not Before: Jul 29 13:31:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=429cb32b8039dc9955656555d6fda337558fa006
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d1:64:d8:70:10:ea:5b:ea:2a:36:ea:6c:3e:
45:aa:c4:07:aa:d3:43:e1:95:9b:24:4c:8e:38:eb:
10:98:56:28:18:30:87:11:85:fa:fc:42:d9:ad:49:
ab:77:bb:36:d9:8e:9e:e6:54:e2:36:f3:b5:ea:0a:
83:5d:63:a4:fb:4b:82:7a:06:21:14:c3:bc:70:9a:
35:e9:f1:0c:b4:10:51:0b:fc:57:12:b9:3e:01:0f:
dc:fa:e1:71:26:7c:48:e4:0b:bf:00:10:eb:a6:4f:
4f:ff:4e:fa:36:c1:2d:c8:71:29:2d:b4:3d:f4:32:
43:cb:2c:d5:8f:6b:96:25:ba:82:de:a7:f1:27:fa:
c9:5b:c3:f5:e7:ab:d1:db:25:7e:d4:63:5b:48:e8:
72:b0:d8:73:70:04:fb:2a:4d:59:85:60:ba:f6:10:
01:77:c6:89:93:ec:d5:c3:9a:3c:d9:3f:71:84:9c:
f7:63:01:4a:16:42:4f:d7:85:f1:e1:dd:37:e6:1d:
b2:0c:53:ed:3c:70:24:af:5e:93:8e:eb:6b:72:64:
a9:4c:41:1f:0f:28:5f:5b:41:47:33:f6:5a:e4:d7:
b1:5c:5f:3d:10:34:c7:33:df:cf:cf:e9:11:e8:05:
14:31:cf:a3:c5:5f:a0:b2:b7:22:e5:c1:44:dc:08:
e9:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:9C:B3:2B:80:39:DC:99:55:65:65:55:D6:FD:A3:37:55:8F:A0:06
X509v3 Authority Key Identifier:
keyid:F1:9C:5B:8B:EC:57:01:C1:FD:FD:29:D8:25:B1:E9:B9:E0:D5:1B:01
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8Zxbi-xXAcH9_SnYJbHpueDVGwE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/QpyzK4A53JlVZWVV1v2jN1WPoAY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/cacd4c-757a-444c-9c38-a4e33e1882c2/1/8Zxbi-xXAcH9_SnYJbHpueDVGwE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.142.131.0/24
IPv6:
2a13:580::/29
Signature Algorithm: sha256WithRSAEncryption
9b:76:b9:be:0f:3f:85:06:cc:31:7a:b2:a7:c5:4d:76:58:7c:
e4:57:0c:cb:41:47:ba:6d:67:3c:3b:24:2d:7c:00:4f:0a:82:
24:8d:74:f3:89:39:06:ca:69:92:f2:76:29:97:1a:8e:2c:69:
ae:44:6a:0a:e8:93:7f:b2:08:fd:40:39:c7:ee:eb:c0:76:46:
55:4d:1a:a6:0f:f1:79:da:f8:32:fe:25:2d:af:40:09:77:1d:
97:2d:c2:f2:96:83:70:ca:9d:7f:5f:13:4a:43:af:f2:a1:fd:
58:8e:1e:05:e6:43:57:3c:66:9a:83:8e:ab:92:61:ef:89:1c:
c0:0a:aa:5a:71:78:28:51:d6:a2:6c:a6:f5:23:5b:d3:83:10:
02:5c:36:83:ab:75:df:5b:2e:82:16:b1:ba:94:83:ea:14:e6:
34:66:d6:4b:23:af:05:b0:d8:bb:c3:04:3c:8c:3a:df:a1:fe:
b3:eb:01:7e:e9:41:a7:85:cb:d2:91:00:ed:4f:a5:af:5b:2d:
7c:ea:b0:bd:02:4c:c5:53:a5:0c:7a:aa:30:53:e2:c5:47:37:
ef:ae:55:f6:db:07:08:d1:99:49:7f:2b:50:e6:a9:84:20:e5:
1a:45:15:2d:4c:58:3e:e6:0b:85:11:1e:08:fd:c9:06:45:51:
7b:ad:f4:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Aug 13 08:46:15 2026 by rpki-client