Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/qzh_iKj0t2WOf3zVqzKCrKeqtDM.roa
File: qzh_iKj0t2WOf3zVqzKCrKeqtDM.roa (raw, json)
Hash identifier: 077TMwwKON/71XOUtoiDWGgj1D5SliYKyCLEgwuoF58=
Subject key identifier: AB:38:7F:88:A8:F4:B7:65:8E:7F:7C:D5:AB:32:82:AC:A7:AA:B4:33
Certificate issuer: /CN=404aabbfab9de7126b7d119db524da4111f04afe
Certificate serial: 019D98559C6FEA153DE63A6008FE9A5BE4C0
Authority key identifier: 40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/qzh_iKj0t2WOf3zVqzKCrKeqtDM.roa
Signing time: Thu 16 Apr 2026 22:07:20 +0000
ROA not before: Thu 16 Apr 2026 22:07:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211071
IP address blocks: 137.83.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:98:55:9c:6f:ea:15:3d:e6:3a:60:08:fe:9a:5b:e4:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=404aabbfab9de7126b7d119db524da4111f04afe
Validity
Not Before: Apr 16 22:07:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab387f88a8f4b7658e7f7cd5ab3282aca7aab433
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:d8:9d:1a:96:72:4b:bc:59:c9:2c:08:93:33:
c9:56:b5:91:80:c3:72:a0:ab:02:f9:28:34:ad:bd:
68:e8:ba:8d:7b:55:40:02:11:91:9f:ff:82:9d:29:
ce:f5:7b:2a:b8:e4:2d:de:fb:db:2a:c9:6d:09:c8:
8c:b4:5b:fe:a3:4b:d4:d9:4e:c3:da:30:f9:a4:b6:
1d:e3:a6:ec:a6:9d:5c:95:69:d1:0b:59:f0:82:52:
e9:ac:b8:d2:10:d7:83:c1:a5:00:04:fe:25:f7:99:
69:b7:fa:4c:d5:2f:78:bf:f9:d9:d9:df:3c:bb:e0:
58:4e:33:6f:bf:80:7e:15:12:6f:46:15:62:50:27:
53:ce:a3:24:7b:ed:ba:7f:96:e6:15:4c:b0:84:8a:
fb:10:71:f8:c4:4a:5e:65:6b:ff:ba:ca:79:45:00:
c8:18:1d:85:a0:5b:30:d2:ce:e6:a6:11:74:99:7b:
e3:e1:52:0b:d3:e1:c2:80:13:eb:1a:ab:aa:22:10:
6b:e5:d1:9e:19:10:17:c8:3b:5e:20:46:05:d9:de:
67:75:ed:ea:b4:8c:d5:e6:e9:8e:fc:04:7f:b4:db:
12:f9:ef:46:10:88:0f:f3:59:b7:7b:47:c7:37:f5:
28:ee:b5:20:9b:e3:02:3a:98:6e:c2:e3:f9:2b:06:
a9:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:38:7F:88:A8:F4:B7:65:8E:7F:7C:D5:AB:32:82:AC:A7:AA:B4:33
X509v3 Authority Key Identifier:
keyid:40:4A:AB:BF:AB:9D:E7:12:6B:7D:11:9D:B5:24:DA:41:11:F0:4A:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QEqrv6ud5xJrfRGdtSTaQRHwSv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/qzh_iKj0t2WOf3zVqzKCrKeqtDM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/d4c8b9-e08a-4a29-91af-71a27ef81786/1/QEqrv6ud5xJrfRGdtSTaQRHwSv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
137.83.86.0/24
Signature Algorithm: sha256WithRSAEncryption
2e:e9:6b:36:7e:94:9e:f1:3e:76:e5:42:49:50:98:ce:8f:e5:
9e:9c:e7:32:d9:91:4e:fa:00:d6:7a:09:d6:23:6a:ab:ed:79:
67:81:ef:fe:f0:61:c8:f3:d2:e8:24:87:01:32:42:38:f3:f4:
02:59:0c:b0:80:8d:c2:7b:af:cc:6f:4c:af:ba:04:a2:99:d2:
88:9c:9a:7c:66:56:d5:97:2b:62:2c:11:6c:e0:04:de:59:1e:
76:44:21:85:f3:a4:23:18:e6:ea:26:ad:b3:f1:10:ce:d7:3c:
d1:a9:e1:3d:08:bb:8e:78:41:e0:36:0a:8f:a7:10:7c:cd:34:
dd:7b:5c:3b:a9:85:23:29:90:69:73:5b:e0:16:a7:c2:8f:af:
35:ed:82:02:67:21:13:fc:de:e9:33:0b:94:bd:42:09:14:4a:
a3:2e:76:e8:1a:21:75:ae:3e:5a:5c:3c:a3:af:3c:a7:72:5f:
e3:bb:51:f6:c2:79:0a:f3:df:71:d1:93:b5:f9:80:0a:10:0a:
c9:1e:e4:ee:3f:7b:bf:2b:42:6e:e5:1e:d0:ac:8d:6e:8c:ed:
f8:d2:94:c9:36:42:10:cd:a8:6d:43:8b:fe:93:85:4b:cb:a1:
e1:c8:e2:14:70:e4:11:8b:15:1e:2a:da:32:32:2d:86:53:62:
45:e8:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:54:37 2026 by rpki-client