Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QPXx2jRMTPxl2Y4WSkBaNqb97WE.roa
File: QPXx2jRMTPxl2Y4WSkBaNqb97WE.roa (raw, json)
Hash identifier: 4eQkFQZwGLhtxRn/90Z4is1FyVC3eyJoeCf1weukpTo=
Subject key identifier: 40:F5:F1:DA:34:4C:4C:FC:65:D9:8E:16:4A:40:5A:36:A6:FD:ED:61
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 019C9E1D35178F8EA566D8896F8E7A759740
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QPXx2jRMTPxl2Y4WSkBaNqb97WE.roa
Signing time: Fri 27 Feb 2026 08:00:40 +0000
ROA not before: Fri 27 Feb 2026 08:00:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207513
IP address blocks: 45.148.119.0/24 maxlen: 24
139.28.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9e:1d:35:17:8f:8e:a5:66:d8:89:6f:8e:7a:75:97:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Feb 27 08:00:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40f5f1da344c4cfc65d98e164a405a36a6fded61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:af:99:f5:81:bb:d7:44:5e:b2:b3:77:fe:ca:
37:76:3d:d5:c5:2c:89:0a:71:56:54:fb:3f:b5:07:
5f:8b:86:ef:48:cd:f6:eb:73:70:a0:67:82:29:8d:
91:32:e2:61:55:cc:e7:95:e0:51:b4:48:b5:ab:6d:
ed:d9:63:4f:ec:fe:c0:37:67:af:53:1b:bc:b7:a0:
6b:09:bb:8e:ed:38:56:9f:21:a7:eb:08:74:66:7b:
96:18:09:9d:f7:d5:55:d3:a9:f0:06:d9:c2:41:2f:
2f:aa:66:c4:20:bf:dd:18:ed:fc:6d:cb:51:72:1e:
de:51:14:33:49:36:1a:60:c8:99:dd:fc:26:db:02:
a1:e6:be:7c:38:d4:77:cc:83:37:f1:a6:0f:be:76:
46:31:dd:ec:bd:a7:2f:72:02:fa:09:bc:a9:05:4d:
4b:ca:26:d4:c6:5e:cd:36:b0:bd:cf:55:a1:3b:25:
c0:55:48:1c:6e:3d:18:b1:03:41:2e:93:d6:ac:67:
9b:21:9e:78:7b:50:58:1a:bf:83:28:cd:ff:76:b8:
95:19:3b:f2:71:3c:c4:e6:48:43:bd:8b:4f:24:11:
df:fa:29:78:83:27:2e:1f:50:2b:fc:5b:a6:d6:1c:
a5:7a:6b:8c:2b:50:03:61:5b:9c:f7:69:e3:45:54:
65:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F5:F1:DA:34:4C:4C:FC:65:D9:8E:16:4A:40:5A:36:A6:FD:ED:61
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/QPXx2jRMTPxl2Y4WSkBaNqb97WE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.148.119.0/24
139.28.98.0/24
Signature Algorithm: sha256WithRSAEncryption
c7:bf:ec:f9:3b:8a:16:95:e0:ef:b2:60:78:9f:cd:c5:e2:fb:
f1:e4:e3:9a:c6:fb:19:e5:0a:9b:c7:10:5a:ae:bf:e6:6a:ad:
fa:7f:13:34:ee:de:8a:fc:87:54:d7:22:5d:e7:81:a7:2e:41:
75:4f:22:9d:20:30:33:e6:93:88:b3:20:16:3e:33:5e:f9:52:
96:ec:17:eb:5a:27:3d:0f:bd:ef:04:e5:82:e6:b0:46:6e:c5:
14:ce:f2:52:ca:09:8f:7d:b0:e0:52:3b:f1:01:ed:9a:e9:d4:
3a:09:20:11:43:29:e2:28:06:f8:91:ea:88:73:a5:81:cf:a9:
bd:4b:5d:03:8e:90:d5:99:32:e3:7a:fc:f0:58:0d:44:a8:de:
de:ca:a7:95:28:e0:02:48:ab:ea:03:b1:c7:99:e8:eb:cc:2d:
57:c8:69:71:76:95:1a:e2:2a:d8:cc:cd:be:81:98:ed:86:aa:
66:87:40:cf:a9:8e:41:b8:41:21:3f:e8:cb:be:ec:6b:72:8f:
81:51:cf:c0:30:64:b4:f0:a0:bc:78:18:6e:f1:3b:fa:d2:5b:
ad:81:dd:a3:be:88:c9:8b:07:e8:95:4b:03:67:72:47:af:97:
c9:2c:bb:7e:81:28:2e:f4:ee:05:70:f3:27:34:21:b1:83:2b:
19:ab:b0:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:19:06 2026 by rpki-client