Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/qdhzDXuwEXMKIhcBtC--OVRDYRs.roa
File: qdhzDXuwEXMKIhcBtC--OVRDYRs.roa (raw, json)
Hash identifier: iT11iYdlbhQ14x4ERQHAeOODlysNDcwshKAALWJPnaI=
Subject key identifier: A9:D8:73:0D:7B:B0:11:73:0A:22:17:01:B4:2F:BE:39:54:43:61:1B
Certificate issuer: /CN=600e85f581c7513908ea04665fd23726fd70e62b
Certificate serial: 019B7A5A61C18F9237BCC5AD3082BF363156
Authority key identifier: 60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/qdhzDXuwEXMKIhcBtC--OVRDYRs.roa
Signing time: Thu 01 Jan 2026 16:18:22 +0000
ROA not before: Thu 01 Jan 2026 16:18:22 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200577
IP address blocks: 193.228.3.0/24 maxlen: 24
193.228.60.0/24 maxlen: 24
193.228.101.0/24 maxlen: 24
2001:67c:201c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.mft
rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 07:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7a:5a:61:c1:8f:92:37:bc:c5:ad:30:82:bf:36:31:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=600e85f581c7513908ea04665fd23726fd70e62b
Validity
Not Before: Jan 1 16:18:22 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9d8730d7bb011730a221701b42fbe395443611b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:f5:b5:b9:7c:7d:82:e8:93:7c:09:ee:e2:f4:
fd:2b:24:fa:a3:98:6a:80:99:ea:74:cd:df:11:5d:
26:ab:7e:23:8c:b3:61:65:5e:70:06:e2:8c:b2:5c:
bc:1e:14:af:fd:23:1f:3d:22:cf:8e:24:ee:66:b9:
1a:48:ab:48:a1:b4:8c:12:bf:96:5a:a1:65:cc:36:
f0:c4:24:d3:6d:bc:ae:a8:b7:95:f9:af:e1:df:29:
3c:2f:6a:9f:c6:31:21:44:7a:f7:c0:62:6f:a5:51:
74:aa:25:01:8b:9f:8b:14:b3:0b:39:24:13:64:f4:
6f:f3:11:eb:96:77:33:c5:40:bb:7e:e8:38:0d:6d:
17:35:29:78:da:02:ef:48:02:52:24:ea:79:15:f4:
39:69:56:ca:36:58:70:14:1e:7d:72:da:25:f4:46:
c7:aa:7e:dd:ea:c4:dd:f2:4c:38:59:7f:76:bb:b7:
0c:20:b8:47:03:d3:98:b1:1f:2a:a4:54:d2:02:9f:
79:c0:68:93:86:71:ab:b0:18:34:c7:dd:e5:0c:6e:
f9:0a:19:f7:cb:cc:19:90:16:dd:d5:ad:35:33:52:
0b:f9:8f:3d:e0:10:a0:3a:7d:5c:fc:4c:b5:e8:c0:
12:3a:05:b9:7c:be:05:20:b3:8b:20:10:12:04:d5:
30:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:D8:73:0D:7B:B0:11:73:0A:22:17:01:B4:2F:BE:39:54:43:61:1B
X509v3 Authority Key Identifier:
keyid:60:0E:85:F5:81:C7:51:39:08:EA:04:66:5F:D2:37:26:FD:70:E6:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YA6F9YHHUTkI6gRmX9I3Jv1w5is.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/qdhzDXuwEXMKIhcBtC--OVRDYRs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/25c017-86e2-4cc3-a202-4cda788fe899/1/YA6F9YHHUTkI6gRmX9I3Jv1w5is.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.228.3.0/24
193.228.60.0/24
193.228.101.0/24
IPv6:
2001:67c:201c::/48
Signature Algorithm: sha256WithRSAEncryption
80:6d:77:70:91:45:1b:7b:61:6b:4d:d1:e4:bc:f4:d1:af:ec:
bd:a2:18:43:cc:a5:06:fc:81:ce:08:22:86:1a:e1:e8:dc:90:
2e:ee:a4:d7:66:3b:de:14:a9:a5:81:06:1b:db:9f:9b:97:0d:
f3:30:5d:40:02:e3:8b:9a:b1:86:58:ab:70:f1:71:68:5b:ef:
ca:78:9b:00:27:1a:a3:6d:7f:b7:f6:2f:28:5d:01:95:15:d7:
d8:fa:24:57:03:66:cd:ad:cd:c8:71:8e:58:ea:3d:c2:f9:f6:
44:e7:77:2f:ce:b8:fe:3f:55:13:21:15:a1:a6:b9:6f:73:a2:
bf:38:ed:01:e4:ef:0c:c8:6c:ab:d2:fc:cb:bb:cc:c4:8c:ca:
d3:2f:71:3d:dd:88:ea:7c:59:d8:2c:73:59:51:59:0d:16:da:
cb:9b:57:6d:c3:f9:e1:27:27:d3:2e:e0:86:3f:a7:5e:18:32:
2e:48:af:9d:c5:93:8f:c2:d2:67:aa:78:52:14:2e:3b:f5:e1:
b1:d8:f9:78:0c:98:72:e3:28:95:f3:b7:b2:c4:80:23:34:35:
ec:e3:aa:79:fc:f5:d7:ca:e9:a6:3f:b3:5f:36:3f:96:c9:1d:
5e:a3:37:10:e8:ba:ec:fd:73:eb:9f:f5:f8:57:9f:53:11:c1:
8d:3b:ff:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:03:19 2026 by rpki-client