Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/QovdBxZFYO8Le-cS-a1JwRjgfQk.roa
File: QovdBxZFYO8Le-cS-a1JwRjgfQk.roa (raw, json)
Hash identifier: XGPaVXCFvuqE5pmLKAAz2EcSfvcufVPb2RTZtwJD+x4=
Subject key identifier: 42:8B:DD:07:16:45:60:EF:0B:7B:E7:12:F9:AD:49:C1:18:E0:7D:09
Certificate issuer: /CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Certificate serial: 019C1F32D545D4E6D7BA69FC4FB2D4EC7719
Authority key identifier: 74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/QovdBxZFYO8Le-cS-a1JwRjgfQk.roa
Signing time: Mon 02 Feb 2026 16:32:30 +0000
ROA not before: Mon 02 Feb 2026 16:32:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 33651
IP address blocks: 9.142.32.0/19 maxlen: 19
9.142.48.0/20 maxlen: 20
9.142.96.0/19 maxlen: 19
9.142.192.0/19 maxlen: 19
135.132.64.0/19 maxlen: 19
138.226.48.0/21 maxlen: 21
138.226.64.0/20 maxlen: 20
138.226.112.0/21 maxlen: 21
138.226.192.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:1f:32:d5:45:d4:e6:d7:ba:69:fc:4f:b2:d4:ec:77:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=743e447edb8a5e0e1b1d7f5cdc287c364a5fb0b5
Validity
Not Before: Feb 2 16:32:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=428bdd07164560ef0b7be712f9ad49c118e07d09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:c9:5d:c7:17:4d:44:ee:ad:92:5e:8a:2b:8a:
b6:78:bc:67:8b:e2:b3:5a:56:ed:9e:9b:56:a6:9e:
fb:20:1e:fb:66:58:3d:75:cb:a8:9c:5b:c6:43:26:
91:47:ad:a0:34:bb:03:5b:45:e4:91:fb:b6:ef:06:
97:b9:de:54:45:ca:4b:d8:37:2a:eb:1a:e0:ee:c8:
02:b9:05:32:82:7c:d5:41:ce:1e:e4:25:d8:b2:81:
eb:db:3b:6d:b3:2e:f0:8d:f4:83:14:5c:2e:78:fa:
36:33:25:c5:97:5d:14:87:af:10:a0:a3:ca:ad:1d:
61:32:c1:b7:d8:6a:9f:c2:ea:51:8d:f4:25:95:7f:
b1:c4:9d:8d:9a:2a:1d:ee:3b:5b:2c:8c:13:13:e3:
8f:88:34:e8:ec:08:eb:02:c9:92:61:0b:62:4b:7c:
be:70:c5:1f:02:07:53:86:c4:54:1c:cd:9c:3e:9a:
c6:03:f3:ad:cb:fa:82:c1:f7:ef:9e:20:99:28:91:
7e:7c:65:d3:8d:a6:05:3f:44:0f:c6:7d:a6:8c:7e:
c7:6e:b5:92:c3:94:fc:26:19:71:fd:18:00:81:f9:
8f:c2:60:a0:3d:b7:85:1b:e4:78:e1:18:9a:f6:a3:
1a:dc:c6:db:fc:e7:6e:59:46:9b:25:e5:26:d2:69:
d3:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:8B:DD:07:16:45:60:EF:0B:7B:E7:12:F9:AD:49:C1:18:E0:7D:09
X509v3 Authority Key Identifier:
keyid:74:3E:44:7E:DB:8A:5E:0E:1B:1D:7F:5C:DC:28:7C:36:4A:5F:B0:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dD5EftuKXg4bHX9c3Ch8NkpfsLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/QovdBxZFYO8Le-cS-a1JwRjgfQk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/a1ae70-7996-4687-a0d7-5e0f4ab809bb/1/dD5EftuKXg4bHX9c3Ch8NkpfsLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
9.142.32.0/19
9.142.96.0/19
9.142.192.0/19
135.132.64.0/19
138.226.48.0/21
138.226.64.0/20
138.226.112.0/21
138.226.192.0/21
Signature Algorithm: sha256WithRSAEncryption
77:32:2f:b4:fb:38:a5:44:42:1a:86:77:b8:40:03:71:c8:6c:
9a:ef:c9:94:8d:75:2e:0b:50:4c:f4:56:c5:62:82:5f:a9:38:
61:58:b7:b0:ac:8c:cb:f6:57:e5:1f:10:50:f9:59:5d:09:70:
27:bf:0c:63:a1:e4:ad:52:cb:a3:70:e4:e8:da:ff:5a:e1:fc:
e7:05:a1:5b:fd:b1:e4:fd:a6:cf:44:4b:be:04:53:10:e5:c1:
68:86:e6:ae:f0:d7:ea:c8:1b:c0:ec:5a:4c:f2:5e:cf:45:8f:
71:da:b2:06:f4:91:56:1d:6f:6c:0e:0a:85:89:85:c4:9c:39:
9e:d5:7e:65:af:a2:13:38:a5:f7:8c:e5:f5:00:6e:ba:f3:1f:
62:06:79:9e:24:0c:ac:a1:e5:e4:c9:af:14:37:81:9e:82:23:
be:bc:ce:95:91:24:a1:c6:57:0f:e5:6e:61:84:c2:6d:88:85:
52:c9:60:0a:dc:1e:07:d9:84:2e:b5:11:1c:2f:fa:7c:8b:4c:
80:3f:b5:5f:85:ea:7c:e0:b1:f1:59:60:f4:53:c0:7a:f7:21:
22:4c:fc:e0:fe:38:5b:68:26:c5:9e:11:04:70:a8:a8:38:bb:
02:be:41:1e:98:b4:b2:70:4e:54:09:79:54:ac:d4:42:c5:a8:
c1:e9:bb:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 07:30:22 2026 by rpki-client