Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qz-ZpOf_8Q60gHWAmhVpAL8hhCg.roa
File: qz-ZpOf_8Q60gHWAmhVpAL8hhCg.roa (raw, json)
Hash identifier: aO2SfCU4FdDJ9oJbss94V9tP0UGx+5G03LOrhBhaH0o=
Subject key identifier: AB:3F:99:A4:E7:FF:F1:0E:B4:80:75:80:9A:15:69:00:BF:21:84:28
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019EA6AC002DE64EC9170194AB20362BDFC8
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qz-ZpOf_8Q60gHWAmhVpAL8hhCg.roa
Signing time: Mon 08 Jun 2026 09:59:10 +0000
ROA not before: Mon 08 Jun 2026 09:59:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215224
IP address blocks: 94.249.206.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a6:ac:00:2d:e6:4e:c9:17:01:94:ab:20:36:2b:df:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jun 8 09:59:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab3f99a4e7fff10eb48075809a156900bf218428
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:59:11:1c:43:70:38:d7:2e:fa:52:25:be:d1:
26:ec:39:28:62:5b:de:17:31:35:d4:78:ac:5e:64:
6e:95:de:11:5e:23:ff:ef:ed:03:4f:02:20:de:e9:
89:57:58:ef:a0:69:9c:90:35:4a:cc:19:ad:fd:0b:
57:f1:8b:a3:0e:e0:a4:b9:09:f1:93:6d:7d:84:f0:
e8:eb:dc:0f:b6:de:5e:ef:86:b6:0d:82:0b:af:71:
f4:1d:6c:46:ab:9f:9a:a3:12:eb:ec:c2:f9:01:9b:
f1:4f:5f:b3:4b:ee:d8:b1:db:ae:05:62:93:37:17:
fe:5f:70:d0:a5:77:99:38:1d:d4:68:2d:89:39:ee:
4d:88:ae:fe:46:58:9c:f5:22:13:5a:92:96:ca:44:
e7:e5:08:4d:fa:4c:84:c2:02:9c:25:cf:11:9a:9e:
b1:2e:b5:eb:7e:3d:7f:5e:10:04:1b:12:26:15:76:
8d:1d:37:8d:91:d8:6e:cb:24:00:1e:8b:93:ec:49:
44:4b:7e:c9:92:84:d3:b2:c1:e9:b0:8f:2d:6f:97:
28:a6:07:66:20:b6:68:1c:7d:d8:2f:f9:e6:25:10:
c1:e0:e6:7e:aa:07:ab:cf:b4:fb:ef:9e:2d:e1:1c:
74:bd:a0:ce:4d:52:e6:cc:36:d0:bb:ce:73:da:bb:
af:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3F:99:A4:E7:FF:F1:0E:B4:80:75:80:9A:15:69:00:BF:21:84:28
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qz-ZpOf_8Q60gHWAmhVpAL8hhCg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.249.206.0/24
Signature Algorithm: sha256WithRSAEncryption
59:bf:4e:10:4d:f7:f3:7a:90:f2:19:93:88:e9:e0:0a:b4:91:
72:d9:ad:3f:a6:4e:73:92:a3:9f:09:9c:7e:f1:51:f0:32:7f:
5b:c5:2b:d1:24:c7:21:4b:89:59:2a:be:b1:9e:f5:e5:85:bd:
51:8a:6a:ad:b0:4a:6b:6a:22:cb:8d:68:09:1d:68:8e:02:58:
3d:71:1a:4a:8e:65:72:e8:da:e0:8d:76:ad:1a:28:b6:e8:3b:
42:5a:d9:2e:d7:0b:02:47:78:63:8f:20:9a:30:6d:a3:3e:a2:
64:4c:e9:0a:23:af:d8:1c:53:6a:d8:1a:41:89:6d:b2:9d:fa:
9d:44:ef:d4:a4:6e:09:d7:fc:9b:70:1b:8e:8b:7a:d9:fa:70:
e8:26:51:5a:6d:2a:16:b2:d2:b1:5a:e3:da:2c:92:42:b1:be:
ee:16:02:07:53:9d:99:1b:b6:27:f1:b4:63:f0:59:82:5b:95:
ec:63:cb:75:92:b3:40:21:11:c0:1d:7c:69:32:9a:70:d3:d7:
90:e3:b9:34:d8:b8:37:43:6c:2a:0c:52:2d:4a:3d:46:e9:dd:
f9:7d:e3:8d:23:bd:42:46:4b:01:1f:08:a0:b7:ae:7e:13:1d:
b7:cc:b1:b7:a2:cd:0c:f6:a2:43:2f:13:68:e7:4e:73:66:fe:
ea:07:45:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 09:08:03 2026 by rpki-client