Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/QFIth1cZ9VZVIrOH2T6S6rF7t94.roa
File: QFIth1cZ9VZVIrOH2T6S6rF7t94.roa (raw, json)
Hash identifier: 64GTVDBb7UuHCZclJHZvIQeOJohdGDxYDJQiaJPS1hY=
Subject key identifier: 40:52:2D:87:57:19:F5:56:55:22:B3:87:D9:3E:92:EA:B1:7B:B7:DE
Certificate issuer: /CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Certificate serial: 019FA9B3B4E791F7F0110714BFE42660E1FB
Authority key identifier: 2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/QFIth1cZ9VZVIrOH2T6S6rF7t94.roa
Signing time: Tue 28 Jul 2026 17:09:14 +0000
ROA not before: Tue 28 Jul 2026 17:09:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9123
IP address blocks: 138.249.15.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.mft
rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 14:18:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:b3:b4:e7:91:f7:f0:11:07:14:bf:e4:26:60:e1:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e6a86e62f0ce98e02e980869ff4414ee2a0f0ce
Validity
Not Before: Jul 28 17:09:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40522d875719f5565522b387d93e92eab17bb7de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:b4:10:f8:95:cf:4a:bc:93:13:59:c1:07:46:
89:da:a4:17:98:c4:81:50:82:42:22:47:f8:56:d5:
88:07:3a:b1:00:78:65:2e:e9:c4:05:aa:6a:12:5e:
18:05:cd:20:7d:d1:ff:6b:cf:8a:72:3e:9d:3a:0b:
46:71:e7:9e:5d:d6:f3:42:21:2e:27:d8:3c:ac:68:
33:d3:87:e6:f3:dd:d6:d6:08:af:aa:fa:ab:cf:d9:
1d:dc:68:6d:15:38:5e:d6:38:52:d6:07:00:be:74:
46:76:dc:fb:a8:41:88:db:22:61:aa:d3:0b:80:68:
4f:55:df:e7:7c:f3:0a:a0:80:fa:fa:3d:bd:29:69:
e3:84:0b:15:c2:3d:62:9d:a2:18:d7:a1:ff:84:a9:
c5:c9:14:75:3f:f5:2e:f6:e8:80:ad:45:e9:fb:be:
43:e9:d4:dd:47:b8:bf:9b:17:f4:d7:99:8c:d1:5b:
d9:66:95:db:75:f5:bd:e0:57:30:a8:63:24:58:ad:
bd:38:03:4e:5c:a8:4d:83:1a:5f:70:15:c5:ee:85:
88:25:1f:e2:b0:0b:fc:d4:90:7c:6e:3e:2d:37:17:
bb:0f:b8:b7:ce:18:e9:e3:e1:af:d0:02:82:de:34:
23:c3:58:d0:4f:3d:cf:c8:0a:32:bb:03:ea:a3:9e:
14:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:52:2D:87:57:19:F5:56:55:22:B3:87:D9:3E:92:EA:B1:7B:B7:DE
X509v3 Authority Key Identifier:
keyid:2E:6A:86:E6:2F:0C:E9:8E:02:E9:80:86:9F:F4:41:4E:E2:A0:F0:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/QFIth1cZ9VZVIrOH2T6S6rF7t94.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/2b6030-6d88-4e3e-9f3a-a667bb765060/1/LmqG5i8M6Y4C6YCGn_RBTuKg8M4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.249.15.0/24
Signature Algorithm: sha256WithRSAEncryption
67:48:a3:d0:ea:33:e9:87:4d:38:2f:de:69:c2:fd:aa:0c:35:
64:11:dd:35:a9:b5:7b:e1:1b:37:32:1b:98:45:7a:a0:fe:6d:
50:ee:f0:d2:e9:c2:8f:01:91:6c:67:aa:7b:7f:b8:04:96:e5:
61:61:b7:6a:bd:a6:88:50:90:3f:ae:1f:30:71:49:a7:3a:b1:
eb:e0:1d:88:9e:8c:f5:58:8d:b2:21:37:57:72:32:57:ef:fd:
76:58:f6:aa:15:5e:dd:7e:55:28:41:df:c6:a5:e3:ee:e0:55:
5a:1e:b1:8e:6a:54:54:6a:57:1c:18:92:bb:93:51:7b:65:9a:
ec:ec:48:3d:0a:c7:6b:b0:bb:1b:6d:0a:08:ca:f6:10:71:2b:
2a:30:d4:2c:c3:ea:3c:ad:f3:2a:d5:94:40:30:e1:60:d3:67:
f2:df:a8:39:7e:58:19:61:9e:f6:b9:da:b9:c0:d2:31:f0:ea:
05:08:3d:ac:2f:43:0e:18:76:cf:70:0e:3f:83:07:0c:4a:e9:
4b:e5:af:9c:de:41:38:b2:79:dd:2c:5b:b0:9d:3e:fb:cc:b6:
a3:6a:15:84:58:d3:96:c5:53:49:03:f1:aa:e2:38:44:15:1e:
72:34:76:5a:b2:62:51:41:a4:64:24:58:30:88:f5:a8:4e:4a:
bb:22:99:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 28 20:59:48 2026 by rpki-client