Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/Qkmm8NzglIDSaRRojnPgAONoFTs.roa
File: Qkmm8NzglIDSaRRojnPgAONoFTs.roa (raw, json)
Hash identifier: +ytJC/qxZWUUZ4DE43GZcN4/00ano+1+6kAJf6whSh4=
Subject key identifier: 42:49:A6:F0:DC:E0:94:80:D2:69:14:68:8E:73:E0:00:E3:68:15:3B
Certificate issuer: /CN=750e52de53330d5005498b0fc409e64dd98bb099
Certificate serial: 019C8DDB045F4E0BAFC5881F534DA64D0554
Authority key identifier: 75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/Qkmm8NzglIDSaRRojnPgAONoFTs.roa
Signing time: Tue 24 Feb 2026 04:14:26 +0000
ROA not before: Tue 24 Feb 2026 04:14:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202446
IP address blocks: 194.33.20.0/24 maxlen: 24
194.33.21.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8d:db:04:5f:4e:0b:af:c5:88:1f:53:4d:a6:4d:05:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750e52de53330d5005498b0fc409e64dd98bb099
Validity
Not Before: Feb 24 04:14:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4249a6f0dce09480d26914688e73e000e368153b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:57:87:45:29:9a:a9:a7:fb:90:51:e9:65:03:
d2:82:49:96:ed:de:13:62:6b:d0:76:d1:ec:07:09:
0d:ed:c3:eb:61:83:80:11:c8:8f:18:5a:8d:52:d0:
67:75:2e:ad:aa:cb:26:e9:8d:19:8f:15:5d:c6:52:
94:c6:aa:3c:97:74:a7:70:2f:fb:a2:03:c8:88:24:
11:5e:73:a4:6c:74:c3:05:7d:49:b2:ac:a7:b5:61:
bf:a2:3b:5f:38:f9:af:7b:00:46:f4:8d:6e:6e:88:
20:37:c3:69:65:6a:d3:a8:f0:5c:72:eb:b2:cd:7f:
a3:44:54:00:15:d4:b2:92:6b:69:c4:0b:ee:e5:aa:
ef:c9:76:35:89:6e:0e:bb:a8:43:8b:6c:ae:2c:77:
53:c9:ff:ed:c8:4d:03:87:8d:c2:09:87:4a:64:da:
7a:bb:20:a8:5c:db:ac:e1:f5:a3:70:b2:be:55:49:
f5:43:01:1f:95:cb:dd:85:1e:52:b0:15:58:40:0d:
33:ec:e6:84:cc:3a:a2:24:d9:6d:d0:e1:71:d0:fb:
cc:e9:8c:07:12:a8:87:07:79:19:8a:1f:88:6c:3b:
20:27:57:72:5e:08:6c:3a:f7:1a:6c:ab:32:12:ef:
e8:7b:fc:88:28:88:52:fe:94:73:c1:7b:4c:d5:0b:
b7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:49:A6:F0:DC:E0:94:80:D2:69:14:68:8E:73:E0:00:E3:68:15:3B
X509v3 Authority Key Identifier:
keyid:75:0E:52:DE:53:33:0D:50:05:49:8B:0F:C4:09:E6:4D:D9:8B:B0:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/Qkmm8NzglIDSaRRojnPgAONoFTs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/76519e-c680-4297-8b79-24f6bdbd950d/1/dQ5S3lMzDVAFSYsPxAnmTdmLsJk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.33.20.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:95:86:d8:2d:9a:ed:44:15:14:be:31:2a:f8:15:82:03:0a:
57:7a:e0:71:51:53:6e:10:a3:72:25:e2:d4:cf:55:2f:1a:e7:
a6:94:86:53:b0:7e:ca:b5:5c:d0:1d:03:40:c6:cd:50:1c:db:
13:da:f6:0a:fe:cd:eb:ab:cb:4b:25:f8:c4:d6:56:6c:95:1b:
32:4a:14:ac:ee:ff:05:c7:00:d1:01:51:3e:54:e6:a5:52:bf:
ec:04:d5:81:d1:be:f3:1d:ed:3f:03:37:61:82:ae:22:b4:10:
54:f6:0a:8c:30:e7:a6:80:ef:cb:9e:11:bf:6f:16:4a:2a:a6:
14:16:64:16:68:72:d2:17:ef:74:85:f4:00:cf:f7:0b:3f:7e:
b7:86:20:24:6d:96:fb:77:be:53:e1:26:dc:ee:cc:5c:20:a4:
eb:d6:ab:de:e4:1b:e4:78:a5:3f:15:48:c2:33:1f:73:ff:b5:
91:5f:29:89:2c:7b:ac:90:dd:af:2b:75:09:ed:c2:54:48:09:
77:d7:4a:1b:28:1c:d6:40:6a:0a:c7:ea:98:df:6a:a5:37:ba:
86:bd:e0:22:62:f1:62:00:30:26:69:c5:a0:34:13:51:b9:d8:
4b:11:85:7d:94:4c:38:df:58:6e:47:02:0f:ce:0f:2f:97:fb:
56:d8:af:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 19:21:44 2026 by rpki-client