Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/QF5kVTqfei8NqBc5MXq6FYFc1SE.roa
File: QF5kVTqfei8NqBc5MXq6FYFc1SE.roa (raw, json)
Hash identifier: cGFyalFTRqxABPLpzT33ObWii2dsn9tI01P6PYrTQLs=
Subject key identifier: 40:5E:64:55:3A:9F:7A:2F:0D:A8:17:39:31:7A:BA:15:81:5C:D5:21
Certificate issuer: /CN=31d2424123ed07725330bf817944fd276b7ca36b
Certificate serial: 019C4A2F34198B1C62303197693203A74C9F
Authority key identifier: 31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/QF5kVTqfei8NqBc5MXq6FYFc1SE.roa
Signing time: Wed 11 Feb 2026 00:52:13 +0000
ROA not before: Wed 11 Feb 2026 00:52:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201487
IP address blocks: 2a06:9801:c::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.mft
rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:38:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4a:2f:34:19:8b:1c:62:30:31:97:69:32:03:a7:4c:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31d2424123ed07725330bf817944fd276b7ca36b
Validity
Not Before: Feb 11 00:52:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=405e64553a9f7a2f0da81739317aba15815cd521
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:f5:aa:93:ea:f9:2c:be:27:f8:5a:c5:a3:f5:
f3:8e:33:3e:b4:cd:39:8d:03:55:42:0e:0b:65:49:
b4:e3:9a:04:d6:96:9a:95:80:60:2b:c1:dc:81:97:
e7:e0:ae:27:fc:9e:05:a1:c6:45:9f:84:bb:6f:2d:
69:e0:c5:32:be:a8:15:c9:54:c1:d2:d5:16:5b:f3:
45:7b:1b:37:f2:79:63:6d:ff:37:91:96:a0:57:39:
b6:64:97:ab:81:df:2f:b5:ac:85:35:d0:a8:c5:34:
dc:a6:f6:2c:d1:1c:f0:15:3a:b7:c2:99:dd:e4:66:
13:e6:48:02:04:b5:74:2d:17:bb:74:96:2d:4a:2a:
32:d4:fa:79:07:48:4f:5b:30:4d:e5:73:18:d6:83:
cc:25:ba:56:90:07:6f:72:6e:ae:e4:2d:56:89:a1:
8e:06:0c:f4:12:05:c2:55:b1:f5:f8:1f:c4:f5:61:
85:23:bb:53:ae:f6:68:d3:33:04:47:14:8a:65:50:
f0:09:30:3c:01:c8:76:7a:8d:53:fa:e0:7d:9a:f7:
a3:c5:86:6d:29:28:04:04:e0:ee:90:95:f7:5c:04:
64:7b:c1:94:12:e4:5c:ae:c9:9f:32:47:c6:84:dd:
2f:3d:61:bd:ff:e8:a9:ec:9a:32:bf:a6:84:db:3a:
66:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:5E:64:55:3A:9F:7A:2F:0D:A8:17:39:31:7A:BA:15:81:5C:D5:21
X509v3 Authority Key Identifier:
keyid:31:D2:42:41:23:ED:07:72:53:30:BF:81:79:44:FD:27:6B:7C:A3:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MdJCQSPtB3JTML-BeUT9J2t8o2s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/QF5kVTqfei8NqBc5MXq6FYFc1SE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/1a6b17-e3fe-4c6d-b8c1-ed8cfaf1b81f/1/MdJCQSPtB3JTML-BeUT9J2t8o2s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:9801:c::/48
Signature Algorithm: sha256WithRSAEncryption
55:94:cb:aa:9e:9d:20:82:8f:da:1e:42:08:59:bd:f5:b7:c2:
9b:75:81:2b:73:98:ce:81:df:aa:06:ae:1e:e1:50:b9:c6:af:
bb:2e:d1:bc:83:72:86:73:03:c4:df:03:6f:d9:23:18:ac:ef:
78:86:2e:44:ac:5f:1a:57:01:b6:6b:12:77:c4:ce:60:e6:0b:
23:5e:cd:72:ee:3c:13:61:85:27:f6:17:38:c3:07:8f:cb:ba:
cd:26:8b:80:0f:65:ad:e6:84:5d:45:39:0b:78:1d:bb:07:1d:
71:bc:80:84:f2:b7:4b:b1:bd:64:09:b9:7d:39:1c:31:6d:b8:
7a:dd:1c:bf:fb:e4:59:28:de:0c:f0:c9:c3:8a:32:3a:07:be:
57:9c:bc:bd:40:b0:b9:0c:ec:35:7b:39:b2:b1:ad:da:2d:6b:
0c:cc:04:e8:5d:2d:12:35:d4:cd:0b:2e:83:1f:b3:01:31:2a:
3f:ff:13:b7:49:08:2e:8f:fb:a3:d0:21:1a:ab:0c:33:76:ab:
96:67:6b:77:9a:90:2f:20:0a:d6:6b:ef:ba:d8:fe:be:b0:07:
3e:96:bb:6d:1b:c8:ea:bd:50:6d:33:ad:46:b8:41:7b:40:4f:
13:5e:78:40:ec:83:d2:42:65:33:7f:0f:ee:f5:9e:6c:0c:a9:
c6:e0:b7:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:07:27 2026 by rpki-client