Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/QXZE3Zq08zJCNAuWkUlhOf72CEo.roa
File: QXZE3Zq08zJCNAuWkUlhOf72CEo.roa (raw, json)
Hash identifier: 4w3elPVXjJm0mGB/LmhaWlS8kL5Tk75Pr/n+xOgx6fw=
Subject key identifier: 41:76:44:DD:9A:B4:F3:32:42:34:0B:96:91:49:61:39:FE:F6:08:4A
Certificate issuer: /CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Certificate serial: 01A0A673E1D108DB4947BBEE27DB18ED788B
Authority key identifier: 55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/QXZE3Zq08zJCNAuWkUlhOf72CEo.roa
Signing time: Tue 15 Sep 2026 19:03:27 +0000
ROA not before: Tue 15 Sep 2026 19:03:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210769
IP address blocks: 95.169.222.0/24 maxlen: 24
185.7.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.mft
rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 16:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a6:73:e1:d1:08:db:49:47:bb:ee:27:db:18:ed:78:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=557b0ac10b8642a27dd3d74ed6cb5ee045e67b97
Validity
Not Before: Sep 15 19:03:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=417644dd9ab4f33242340b9691496139fef6084a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:25:82:ea:0b:11:4a:a5:3c:56:4f:4c:f8:60:
3c:b8:1c:6e:21:c0:5c:9c:58:5d:d6:b7:05:a6:40:
72:86:a9:3b:17:3e:03:53:3b:69:74:c7:50:10:ef:
54:03:53:0d:51:00:28:c0:0a:74:06:7f:74:f8:13:
85:13:fa:3e:e2:cb:e3:23:3c:d1:cc:20:1b:03:2a:
4a:15:10:49:14:04:de:30:b8:3b:05:a5:b8:70:e4:
4f:84:68:41:f8:20:26:ec:cf:27:9e:d9:6f:13:18:
1a:fe:fb:1c:79:ca:20:81:52:7a:ac:c1:40:99:93:
df:90:f2:82:f6:8e:5d:74:a4:22:6d:05:51:0f:a3:
ba:1d:8f:59:45:f4:ce:9a:51:e2:35:fb:8f:a4:86:
c6:db:9a:33:e3:c0:02:d5:45:a6:8c:89:10:e6:42:
78:ee:c4:8d:27:4a:e1:35:31:51:72:35:84:3d:97:
7a:6f:10:8f:5a:25:08:26:da:75:c8:8e:dd:b1:cb:
2e:18:5b:d3:97:07:80:3d:fd:95:a0:3f:e6:f6:15:
5a:a0:82:9f:71:83:24:be:e9:e2:ad:d5:1f:7a:b7:
62:df:cf:bd:f2:96:b5:cd:25:18:52:cf:2d:06:b5:
eb:d5:45:e0:96:85:ca:10:c6:59:97:24:98:8e:0f:
29:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:76:44:DD:9A:B4:F3:32:42:34:0B:96:91:49:61:39:FE:F6:08:4A
X509v3 Authority Key Identifier:
keyid:55:7B:0A:C1:0B:86:42:A2:7D:D3:D7:4E:D6:CB:5E:E0:45:E6:7B:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VXsKwQuGQqJ909dO1ste4EXme5c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/QXZE3Zq08zJCNAuWkUlhOf72CEo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/5e5c30-8aa4-47e8-bd8f-fbe1a0d0aa98/1/VXsKwQuGQqJ909dO1ste4EXme5c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.169.222.0/24
185.7.217.0/24
Signature Algorithm: sha256WithRSAEncryption
1b:94:c2:6b:11:c9:f3:3e:a6:bf:72:6a:67:a9:68:f6:41:1c:
05:4a:ae:76:67:a5:58:bb:8c:30:49:85:0e:a6:ef:94:71:db:
f3:54:92:89:fc:92:4a:04:d8:3a:92:c5:33:3c:a4:f1:76:af:
f5:5d:fd:4f:04:b8:fb:c5:79:4d:6c:77:ec:6f:65:02:46:af:
1d:25:52:4c:10:0e:a5:24:75:d3:39:da:fa:ab:d9:24:1b:6a:
c1:80:c0:ed:a2:24:c9:bd:2b:57:1a:ae:42:65:12:89:78:4a:
81:13:e9:30:4c:3b:ba:b3:8c:9c:d6:8b:4e:4c:e2:1e:1a:07:
0c:5c:56:d6:28:41:4e:7d:b1:ce:7b:20:07:6a:54:37:67:c5:
cd:e8:b2:06:b7:89:68:d9:6b:51:34:61:60:af:60:e4:0b:f1:
8c:cb:b5:f2:9a:12:80:a7:e0:96:d2:a3:6b:4d:b6:44:5f:d6:
ba:15:af:50:59:c7:ea:40:3e:cf:94:5e:d2:3a:eb:54:26:9c:
66:37:05:54:96:3d:1e:52:02:08:12:4a:3e:78:ef:bf:fb:13:
48:15:a3:55:e7:91:9c:12:b4:fc:01:97:2d:fb:5c:09:29:7f:
1f:a2:03:76:c6:9f:af:5f:37:ff:62:c3:c0:cb:0a:a8:6d:55:
0d:32:13:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 23:48:11 2026 by rpki-client