Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/QLEEsVMAnp8yBuh1hcBg5UTekXg.roa
File: QLEEsVMAnp8yBuh1hcBg5UTekXg.roa (raw, json)
Hash identifier: rhepJz5uuPekXjrE3FZCBDFMEp//GBVxeS0QL8Wrygc=
Subject key identifier: 40:B1:04:B1:53:00:9E:9F:32:06:E8:75:85:C0:60:E5:44:DE:91:78
Certificate issuer: /CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Certificate serial: 019C969C3A94FF2F07AE7643392C454EC80D
Authority key identifier: 96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/QLEEsVMAnp8yBuh1hcBg5UTekXg.roa
Signing time: Wed 25 Feb 2026 21:02:26 +0000
ROA not before: Wed 25 Feb 2026 21:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13213
IP address blocks: 85.203.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:96:9c:3a:94:ff:2f:07:ae:76:43:39:2c:45:4e:c8:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=962bd76a5cac283ece0a0f8eab2c97021401fb89
Validity
Not Before: Feb 25 21:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40b104b153009e9f3206e87585c060e544de9178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:04:ae:3d:07:c0:26:7c:94:1c:23:dd:16:7b:
78:69:b0:ba:be:a3:1d:0e:25:13:1f:5e:ad:b1:ce:
82:3e:73:40:a3:ce:0c:79:32:40:86:73:52:4a:c7:
2c:ad:6a:19:9f:3b:9d:a8:e8:e1:80:d9:87:4d:4d:
77:51:02:68:40:cf:52:8e:b3:c7:69:39:49:08:fc:
6c:6b:d8:d6:e9:ad:1e:0f:16:35:d4:73:5b:78:ba:
e4:0c:6a:41:aa:9c:bf:be:d2:78:73:21:f5:16:00:
ff:ee:36:ec:9d:68:9e:03:d0:33:da:1f:2f:b7:32:
a8:a5:9d:f2:39:5a:04:43:7f:e1:d5:d8:75:30:87:
ec:94:20:dd:27:b4:a7:65:50:dd:20:63:8f:b0:95:
a2:97:30:4f:a3:95:bc:ef:eb:d7:81:c4:02:60:64:
fc:06:12:cd:59:e8:08:ee:05:a7:49:44:40:71:28:
a8:d6:41:ed:a0:96:f6:50:82:eb:43:b6:b2:86:bb:
c2:31:59:59:85:8e:99:e2:f0:92:97:e9:bd:1d:2a:
23:4b:46:7d:8c:4c:a8:bb:6d:25:06:15:1d:d7:6d:
1e:d9:59:89:79:f4:43:ee:9c:8d:e1:ee:6b:57:d4:
d1:b9:e5:65:c8:9d:54:c5:64:12:d6:ba:54:18:b4:
f8:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:B1:04:B1:53:00:9E:9F:32:06:E8:75:85:C0:60:E5:44:DE:91:78
X509v3 Authority Key Identifier:
keyid:96:2B:D7:6A:5C:AC:28:3E:CE:0A:0F:8E:AB:2C:97:02:14:01:FB:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/livXalysKD7OCg-OqyyXAhQB-4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/QLEEsVMAnp8yBuh1hcBg5UTekXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/046460-102c-4930-842c-6ab11155f6fb/1/livXalysKD7OCg-OqyyXAhQB-4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.203.22.0/24
Signature Algorithm: sha256WithRSAEncryption
4b:fd:7d:ea:39:bf:e8:5d:d9:3e:d8:fc:23:24:45:22:65:ef:
93:25:3f:0d:e6:0b:27:1f:2f:ce:80:78:a1:47:9f:c0:5e:f6:
1c:f3:f3:d4:18:f4:b9:e7:f8:5b:cc:be:d4:f9:1c:ef:49:fc:
92:10:15:b4:ab:3c:ca:9a:62:88:7e:83:d3:cf:b9:1d:f4:f0:
5a:71:06:83:1f:6f:cc:ca:aa:fc:35:23:b3:6e:51:18:51:8c:
85:be:96:87:a4:ae:db:51:b1:07:1e:9c:36:e9:b2:24:aa:33:
12:17:d3:7e:e1:6e:bc:bc:00:84:2c:01:f3:ef:23:75:1c:0e:
65:15:0d:57:1a:16:28:c2:e9:8e:86:75:f0:6d:15:bf:1a:75:
44:7a:ad:ee:b3:b3:f9:01:b4:15:1e:20:72:61:cf:4d:30:11:
74:be:f7:d5:4f:60:77:e1:3b:6d:77:9f:69:5f:6e:43:07:2f:
9f:6f:01:de:ee:cf:76:fe:89:a9:d9:71:b1:1f:7f:ab:ca:c5:
58:d8:e1:6b:de:b8:dc:88:e8:2c:a0:2b:a7:45:d5:66:60:32:
1a:7b:d5:db:9f:15:f8:05:de:d7:65:64:7f:1a:78:da:72:f0:
10:1c:b2:c3:95:f7:55:69:e2:d1:cb:bc:55:b0:33:3f:82:db:
00:61:16:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 01:06:19 2026 by rpki-client