Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/QTRMtFoOW3Na9Q55kjNuxm41uuE.roa
File: QTRMtFoOW3Na9Q55kjNuxm41uuE.roa (raw, json)
Hash identifier: pLBNua0p1PO6zDb7MzcwoLxSSVrUFoLKBy/Xu8ILddg=
Subject key identifier: 41:34:4C:B4:5A:0E:5B:73:5A:F5:0E:79:92:33:6E:C6:6E:35:BA:E1
Certificate issuer: /CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Certificate serial: 01A023E86406FA06CDF7D5EB10DFA54DF902
Authority key identifier: 4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/QTRMtFoOW3Na9Q55kjNuxm41uuE.roa
Signing time: Fri 21 Aug 2026 10:40:27 +0000
ROA not before: Fri 21 Aug 2026 10:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.18.160.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:23:e8:64:06:fa:06:cd:f7:d5:eb:10:df:a5:4d:f9:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f8122b0945ecccb1f2fb9912fbd86aa04a61987
Validity
Not Before: Aug 21 10:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41344cb45a0e5b735af50e7992336ec66e35bae1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:60:91:92:b0:d3:27:76:1a:c7:fa:15:9c:08:
e0:51:9b:da:a6:7e:27:ec:f3:37:17:38:7f:f4:c9:
14:dc:db:29:59:5b:44:ef:68:1c:31:85:4f:43:52:
88:02:f1:45:e6:58:bb:06:c6:df:fa:41:03:bc:d5:
7a:df:68:0b:f0:1d:be:25:7d:a7:d1:fd:31:c0:cd:
5d:48:65:f1:ff:13:83:6f:4c:62:2d:92:5f:37:d1:
91:40:d1:e1:0d:b9:e3:4d:fb:4d:83:7d:99:b5:a5:
79:10:93:cf:79:18:68:7a:13:27:4e:03:64:42:ae:
e1:40:f5:0a:a1:d7:54:33:15:58:bc:77:c1:a8:e7:
1d:b7:79:98:da:03:19:45:17:c6:fe:1a:5d:2d:79:
77:4a:f2:9e:07:b9:f0:f7:b9:f5:79:5a:5e:ea:f4:
f8:41:19:54:6e:af:da:61:47:5e:80:bf:aa:69:a4:
d7:bb:03:fe:7e:9f:1f:61:ec:24:22:e8:24:22:d1:
09:db:84:cb:d5:4e:49:55:24:a6:1e:da:f2:dc:f1:
75:03:d1:98:f7:8c:19:79:07:f0:62:2d:e5:ae:7b:
f0:c6:27:16:b1:5f:c7:7b:3f:c7:e5:a2:33:c8:07:
77:55:35:ba:88:48:d4:7e:74:c6:48:65:7f:c9:57:
37:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:34:4C:B4:5A:0E:5B:73:5A:F5:0E:79:92:33:6E:C6:6E:35:BA:E1
X509v3 Authority Key Identifier:
keyid:4F:81:22:B0:94:5E:CC:CB:1F:2F:B9:91:2F:BD:86:AA:04:A6:19:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/T4EisJRezMsfL7mRL72GqgSmGYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/QTRMtFoOW3Na9Q55kjNuxm41uuE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/21dee2-29d7-4dad-beb9-2b226a23406a/1/T4EisJRezMsfL7mRL72GqgSmGYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.18.160.0/24
Signature Algorithm: sha256WithRSAEncryption
84:f8:65:ad:50:9c:b6:18:d2:c2:5d:b2:e0:cb:1b:1f:e0:a3:
36:0f:7c:1e:91:2e:a5:33:d6:07:96:90:79:f6:9e:0d:75:95:
39:51:58:82:e2:21:bc:61:da:69:3e:d8:78:58:a5:c9:07:aa:
1d:4b:3c:c5:91:3e:88:0f:25:5d:e1:41:17:80:42:49:13:df:
c0:8a:0c:bc:dc:eb:82:44:ec:c1:36:29:5d:6e:79:fd:36:d2:
c2:12:e0:1a:eb:f9:86:0c:f0:0d:f7:db:ad:c1:b5:4d:5d:d2:
ae:e4:90:06:13:42:5c:85:60:b2:b6:35:a1:e8:c4:e9:f7:e6:
e7:81:c4:ff:b8:80:6f:61:cf:c9:c0:7f:ca:b8:40:0e:57:f0:
42:dd:19:ae:d4:cf:a1:7e:3e:cd:2a:c9:94:29:ae:10:cc:d4:
50:38:f5:59:22:e1:0e:98:1d:db:8f:34:4f:80:0b:fc:50:70:
a9:96:96:4e:93:95:e7:43:92:4b:46:1b:14:c8:63:ed:86:0e:
df:a9:6c:b4:e6:94:74:1a:20:f1:81:ae:3e:18:7c:53:2f:95:
01:cb:a3:40:35:ec:d6:44:7c:5a:3f:83:b6:09:d0:d9:bc:c4:
29:a9:07:17:1b:b7:9b:2c:ad:60:c4:5b:2f:48:6e:5a:70:9f:
7f:60:e6:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 20 21:53:48 2026 by rpki-client