Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/Qsmck_Q1LRjc9BFJ4PRK8hkx8lE.roa
File: Qsmck_Q1LRjc9BFJ4PRK8hkx8lE.roa (raw, json)
Hash identifier: tFHy5YIAzvBM7ghe1eYeoeXBK1W4SJOIgpN7n9hkr8Q=
Subject key identifier: 42:C9:9C:93:F4:35:2D:18:DC:F4:11:49:E0:F4:4A:F2:19:31:F2:51
Certificate issuer: /CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Certificate serial: 01A09F1098F8697DF3EF94488307ABE008A4
Authority key identifier: BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/Qsmck_Q1LRjc9BFJ4PRK8hkx8lE.roa
Signing time: Mon 14 Sep 2026 08:37:40 +0000
ROA not before: Mon 14 Sep 2026 08:37:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16509
IP address blocks: 46.254.177.0/24 maxlen: 24
46.254.178.0/24 maxlen: 24
185.34.85.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 01:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:10:98:f8:69:7d:f3:ef:94:48:83:07:ab:e0:08:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf88849a2eb5e9dd571a8e743bed7b9513d7a121
Validity
Not Before: Sep 14 08:37:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42c99c93f4352d18dcf41149e0f44af21931f251
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:63:06:fa:1c:60:95:3c:c2:e5:fb:ef:88:6f:
90:ab:03:96:7b:0a:ba:d9:e4:38:47:b4:cb:8a:c6:
6a:91:ae:43:63:e8:17:a5:77:cf:38:cc:cf:81:7f:
69:64:7c:be:49:b5:05:31:00:e8:3f:6a:04:98:e0:
70:6c:64:6e:70:e9:27:e2:87:30:05:f4:64:7e:44:
fc:b6:bc:12:3e:ab:cc:29:ca:2b:cc:b8:02:09:05:
6f:82:3a:75:fb:c1:1b:d7:56:c0:16:3e:05:63:8a:
ff:f2:22:0f:f6:fa:b3:45:1b:f0:20:d3:24:1d:ab:
38:ac:f0:da:71:e9:60:95:b7:70:c8:f0:d0:3b:3a:
37:34:04:fc:94:8d:16:ab:01:25:b4:42:a4:7e:5c:
2c:43:9d:29:29:75:c1:9a:47:aa:89:19:28:67:b0:
95:70:e0:e9:d0:21:1e:b5:ad:7b:d1:7e:52:6e:cb:
c0:f5:02:18:52:b5:b2:ab:ea:8d:47:13:42:d3:c5:
eb:d6:63:7b:e2:22:3d:cf:6e:ec:4b:7b:24:1e:e8:
bf:da:c2:57:75:c5:a1:7c:0f:4d:af:87:d3:10:ee:
38:82:0c:df:5d:ac:e9:53:25:a4:e9:1d:b1:c4:71:
23:05:af:cb:45:65:42:0a:f1:52:ee:d0:8d:58:c1:
d9:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:C9:9C:93:F4:35:2D:18:DC:F4:11:49:E0:F4:4A:F2:19:31:F2:51
X509v3 Authority Key Identifier:
keyid:BF:88:84:9A:2E:B5:E9:DD:57:1A:8E:74:3B:ED:7B:95:13:D7:A1:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v4iEmi616d1XGo50O-17lRPXoSE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/Qsmck_Q1LRjc9BFJ4PRK8hkx8lE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/dbc58e-027b-4aac-9de6-23739b5fd84c/1/v4iEmi616d1XGo50O-17lRPXoSE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.254.177.0-46.254.178.255
185.34.85.0/24
Signature Algorithm: sha256WithRSAEncryption
66:b5:7b:40:d1:f7:7c:b4:f5:77:95:0a:19:19:73:6d:cb:95:
72:83:e1:dd:55:86:bb:92:f6:b6:47:07:b5:b8:52:5c:89:80:
df:fd:d5:89:6d:73:0f:b8:96:e2:c2:7c:b1:38:61:8e:38:4c:
c7:2b:83:d4:ed:0d:4f:04:29:e1:f1:9e:ef:46:9e:1f:09:96:
a1:40:02:54:6d:1f:36:b9:99:5b:4b:0b:73:f7:33:76:6c:8b:
59:57:e5:a6:ea:2d:57:c7:ce:4f:39:a7:7b:5e:e6:5a:fa:52:
77:9c:99:6c:98:f8:a6:fc:82:9e:81:07:9f:0d:5f:7a:f6:0b:
be:73:3f:33:04:88:20:e0:aa:9f:55:a9:eb:df:cd:11:c8:60:
df:f8:a0:1b:c6:19:e8:b9:7c:c0:0e:96:05:25:6f:da:52:c2:
45:8f:a3:b8:13:22:57:36:d5:12:36:f5:0a:c7:76:d3:d5:67:
cf:83:6d:b2:fa:76:26:f1:bc:08:5e:8f:31:15:be:6e:c1:6f:
ba:4d:5d:6e:9e:76:08:3d:c8:d1:8f:9d:d3:7a:88:16:cc:af:
5d:a0:e6:b4:26:04:c4:51:f6:1f:6e:6b:fd:63:2b:59:68:c7:
f8:65:ff:10:33:1c:22:54:ad:84:ae:c3:a3:d5:14:53:e9:79:
cc:a3:31:88
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Wed Sep 23 10:19:19 2026 by rpki-client