Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/Qxxba2Z0l_Oo3VLzB9UPPLzLHh0.roa
File: Qxxba2Z0l_Oo3VLzB9UPPLzLHh0.roa (raw, json)
Hash identifier: XhyQFSQAtoaUlYwvcU/d0bS+hKuIarz0HhNEQgTiZRY=
Subject key identifier: 43:1C:5B:6B:66:74:97:F3:A8:DD:52:F3:07:D5:0F:3C:BC:CB:1E:1D
Certificate issuer: /CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Certificate serial: 019C778F67C46ADF3299E375F2EE13120FA7
Authority key identifier: 4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/Qxxba2Z0l_Oo3VLzB9UPPLzLHh0.roa
Signing time: Thu 19 Feb 2026 20:20:12 +0000
ROA not before: Thu 19 Feb 2026 20:20:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 20676
IP address blocks: 212.84.192.0/20 maxlen: 32
212.99.160.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.mft
rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:77:8f:67:c4:6a:df:32:99:e3:75:f2:ee:13:12:0f:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ca13bdea54f76b8a85712afdb615186b33838c1
Validity
Not Before: Feb 19 20:20:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=431c5b6b667497f3a8dd52f307d50f3cbccb1e1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:81:1b:7b:59:0a:43:82:90:eb:f7:42:f3:3c:
25:34:74:78:63:f5:81:e0:7e:65:5c:44:18:6a:fc:
7d:e4:a1:f2:70:72:09:81:ba:e1:0b:7b:93:3e:1f:
36:b3:48:a6:2b:98:78:2b:55:8e:5b:e3:96:f3:79:
a6:f9:21:df:c6:c7:dd:88:5e:58:e4:e8:81:9e:d4:
e2:9c:77:2a:3e:f5:84:7d:10:3a:66:e9:d4:2f:f6:
9a:7e:f5:73:08:0b:88:57:06:26:21:4f:1b:4e:45:
b3:cc:0f:8c:3f:40:4d:58:c6:da:4f:a9:10:33:16:
72:bc:e4:39:48:6a:07:9f:6c:86:a0:27:aa:a5:c9:
6b:81:e1:52:44:db:12:fc:7b:7b:57:a5:ab:06:59:
cc:0f:bc:fd:08:4a:3d:4f:56:d3:5d:27:b9:ef:b4:
3f:23:52:f8:09:a1:b6:bc:de:84:4a:05:ff:66:dd:
7f:fd:05:cd:d5:7d:eb:96:f8:8f:c9:2f:3c:3f:a5:
88:46:43:da:48:9f:aa:b8:6a:a3:50:9f:29:78:15:
34:ab:a5:05:30:5c:b9:44:92:1e:3c:01:6d:73:e4:
a4:c0:68:2f:92:64:5a:8a:95:0e:6d:1a:cd:1e:87:
79:f8:db:06:c6:8a:82:82:21:12:ac:2f:5b:01:57:
19:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:1C:5B:6B:66:74:97:F3:A8:DD:52:F3:07:D5:0F:3C:BC:CB:1E:1D
X509v3 Authority Key Identifier:
keyid:4C:A1:3B:DE:A5:4F:76:B8:A8:57:12:AF:DB:61:51:86:B3:38:38:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TKE73qVPdrioVxKv22FRhrM4OME.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/Qxxba2Z0l_Oo3VLzB9UPPLzLHh0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c62d13-7f03-4d19-8b46-fc91433d367d/1/TKE73qVPdrioVxKv22FRhrM4OME.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.84.192.0/20
212.99.160.0/19
Signature Algorithm: sha256WithRSAEncryption
1e:9b:a3:49:33:b1:6a:4d:56:e0:7a:18:ed:9b:ef:d7:34:08:
09:d4:18:23:93:e3:b7:79:fb:14:73:9e:4c:ac:f7:88:52:a9:
86:4a:6a:df:f5:5c:09:1f:3f:48:e8:7d:6a:90:be:9c:87:c8:
19:5d:97:e7:20:ca:f2:46:d8:58:af:d4:96:e7:80:05:77:9f:
b9:90:40:5b:41:08:a9:67:01:db:b6:de:03:28:67:91:24:17:
10:83:6b:a2:a4:4e:52:96:2e:ce:a6:92:84:3b:89:8e:7c:2c:
bf:87:8a:21:8f:58:30:8e:cd:97:78:a3:50:32:b2:42:02:6d:
a7:ea:a3:19:5f:f7:b1:23:39:7a:c7:ab:c0:0d:b9:bb:73:08:
4d:09:d4:d1:13:52:7f:cd:a0:46:c1:4a:7e:c9:5c:b9:86:67:
17:2e:ea:34:77:5b:a3:d9:2f:12:2c:fb:e7:c6:6c:86:00:81:
85:fa:a6:ff:56:02:0f:53:17:a3:23:90:af:81:98:f5:2b:b5:
cb:08:fa:a7:a4:ba:56:12:a5:9f:7f:e6:80:f9:e2:3b:dd:e5:
2e:53:2a:20:94:e4:f8:51:0b:9c:6a:7e:cc:07:62:51:6b:a4:
3e:1d:6e:a1:6e:24:2b:ee:63:fd:0e:f7:85:01:ef:e4:8f:25:
de:ab:3e:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:21:03 2026 by rpki-client