Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/QBfEiO42e6vRTomIkFrl_57dkss.roa
File: QBfEiO42e6vRTomIkFrl_57dkss.roa (raw, json)
Hash identifier: t0dwxfn9z0yl9cSdDZtRr94RDHDrZReu9ablq0cEUyU=
Subject key identifier: 40:17:C4:88:EE:36:7B:AB:D1:4E:89:88:90:5A:E5:FF:9E:DD:92:CB
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 019EAD49C21D56319D3C946DCA94F8AE22FD
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/QBfEiO42e6vRTomIkFrl_57dkss.roa
Signing time: Tue 09 Jun 2026 16:49:12 +0000
ROA not before: Tue 09 Jun 2026 16:49:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215290
IP address blocks: 2a0d:ad44::/32 maxlen: 32
2a11:b4c0::/32 maxlen: 32
2a11:b4c1::/32 maxlen: 32
2a11:e2c1::/32 maxlen: 32
2a11:e2c6::/32 maxlen: 32
2a12:2805::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ad:49:c2:1d:56:31:9d:3c:94:6d:ca:94:f8:ae:22:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Jun 9 16:49:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4017c488ee367babd14e8988905ae5ff9edd92cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:14:dc:d6:91:23:a6:9f:04:ca:23:91:f2:44:
8e:09:26:20:ca:3e:a3:0f:d5:05:ba:c8:7f:92:32:
cd:a3:73:56:45:d1:79:bd:30:23:b5:3e:02:c6:4a:
6a:c5:8a:0f:ec:c6:bf:58:95:ec:e8:1a:76:4d:53:
a8:97:00:95:c8:de:ad:66:ab:e1:18:16:1a:5f:15:
68:c8:5e:f2:89:86:b6:f1:22:17:39:92:d4:54:99:
2b:de:95:ab:83:0c:69:f4:11:31:d3:e2:5e:b3:ed:
04:bc:3a:52:e5:6d:11:c3:b1:b0:07:50:71:35:15:
14:9e:02:b1:15:db:05:ab:31:a0:e5:93:02:05:8d:
e0:67:e3:27:e6:3e:7d:e9:c9:3a:d8:28:29:96:e0:
85:29:ce:76:a1:7d:66:e5:62:68:4b:8e:f6:d4:c4:
2f:3b:0b:13:c3:24:3d:a4:dd:8f:f6:73:d4:50:80:
fc:a3:9f:54:71:e8:9e:8d:b0:6f:3c:a8:b0:78:20:
ee:75:0b:2b:14:1e:8b:44:26:6b:a9:07:7d:a4:de:
7e:89:8f:7c:fa:fa:99:dd:bb:0b:11:90:78:c1:23:
bf:43:17:4c:8f:e7:57:a9:6d:cd:2b:d4:5a:40:8f:
a7:c6:76:68:60:4b:28:6c:9f:96:17:08:49:70:a1:
0c:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:17:C4:88:EE:36:7B:AB:D1:4E:89:88:90:5A:E5:FF:9E:DD:92:CB
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/QBfEiO42e6vRTomIkFrl_57dkss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0d:ad44::/32
2a11:b4c0::/31
2a11:e2c1::/32
2a11:e2c6::/32
2a12:2805::/32
Signature Algorithm: sha256WithRSAEncryption
78:db:fd:d7:a0:44:22:6e:1c:94:4d:8b:b5:6d:35:d0:bf:8d:
aa:d9:80:b4:23:7d:02:5d:1c:08:84:1d:17:6b:a0:25:8b:3a:
a5:9f:d8:fa:5c:ba:34:c9:61:f9:71:9d:99:94:7a:69:8b:3c:
47:1c:b8:7a:0b:58:53:48:23:fe:1b:ae:ba:ed:24:a3:3d:7b:
02:0e:19:f7:e6:86:54:36:3e:b8:23:99:ec:22:13:01:40:5b:
52:23:2e:8d:e8:07:52:96:3d:38:39:78:7f:a3:c2:66:f4:ee:
4a:35:d5:3e:24:a7:98:cc:20:83:fc:6c:ae:65:89:63:80:7d:
6e:5a:9b:bd:cc:04:fd:b2:8a:2d:c9:03:af:af:b8:3f:98:62:
dd:07:38:e5:af:87:7d:c0:cb:40:5e:bc:25:63:07:b4:0e:03:
85:89:99:91:92:8e:bb:4d:80:51:49:29:95:17:8b:86:c9:5e:
b0:99:6f:20:9f:77:e8:cd:44:87:f5:6b:1a:67:14:35:47:0f:
1c:18:e7:d8:19:62:61:43:54:bf:8f:bc:e6:4d:e5:b2:db:38:
d6:58:1b:1a:9b:e9:8e:e6:58:d2:30:9c:2d:c8:bd:c8:0c:52:
74:68:b3:60:df:57:f5:ad:f4:a9:0d:8a:4f:3d:9f:c7:c7:5d:
3b:19:db:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 10:37:17 2026 by rpki-client