Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QT_KKoCNCUoCbjR5YD6Q8XkUFps.roa
File: QT_KKoCNCUoCbjR5YD6Q8XkUFps.roa (raw, json)
Hash identifier: ZVBUINkFlfK8R6KEx0Oz9S1h7a5DFnVh59ZssBEYX+Y=
Subject key identifier: 41:3F:CA:2A:80:8D:09:4A:02:6E:34:79:60:3E:90:F1:79:14:16:9B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019EB1F74361B3764F41E78FA354302F276F
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QT_KKoCNCUoCbjR5YD6Q8XkUFps.roa
Signing time: Wed 10 Jun 2026 14:37:12 +0000
ROA not before: Wed 10 Jun 2026 14:37:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198487
IP address blocks: 81.168.111.0/24 maxlen: 24
89.213.45.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 17:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b1:f7:43:61:b3:76:4f:41:e7:8f:a3:54:30:2f:27:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Jun 10 14:37:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=413fca2a808d094a026e3479603e90f17914169b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:94:9b:47:6a:20:92:76:ba:b0:68:2b:45:10:
c7:3d:37:82:6f:1e:ce:4f:8d:57:e5:8b:3b:7b:87:
62:3e:c4:85:ff:38:c5:38:89:39:c4:07:a6:e1:24:
93:0b:13:5b:82:97:97:30:c2:08:03:56:c6:37:18:
40:a8:fa:88:0b:6f:65:b8:69:90:b0:f2:77:88:d3:
f0:4c:1d:de:1f:96:13:4e:99:45:89:33:30:77:67:
ad:d2:8e:00:73:e6:03:1f:41:dd:42:7e:ea:a1:48:
ed:74:66:37:e3:c6:78:d5:ca:ee:4f:59:10:a9:4e:
25:1d:c0:cc:16:65:fa:26:8d:1b:e0:01:b4:2f:5f:
ff:ce:24:15:64:17:d6:5f:45:77:f8:65:da:00:ee:
e6:c4:ae:57:d4:5a:fe:37:89:43:06:78:e1:0e:5a:
56:95:af:6d:72:0e:c3:af:34:b2:d5:6d:7d:c8:52:
b3:24:99:1e:e6:b4:30:fd:99:fb:18:1b:7a:09:00:
18:02:3e:13:16:0c:8c:b6:61:f4:a9:fb:cb:d8:3b:
6d:f9:8e:28:7f:5c:ed:cd:db:6e:0a:fb:1f:4c:60:
2d:f9:6c:e1:52:8f:c0:90:bf:ca:8c:6b:e3:12:09:
f5:ec:88:c4:1d:2f:f7:55:46:06:0b:ca:3f:97:d1:
f8:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3F:CA:2A:80:8D:09:4A:02:6E:34:79:60:3E:90:F1:79:14:16:9B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QT_KKoCNCUoCbjR5YD6Q8XkUFps.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.168.111.0/24
89.213.45.0/24
Signature Algorithm: sha256WithRSAEncryption
33:2b:26:1f:11:65:49:90:a4:cf:ca:60:e0:bb:5b:06:40:c2:
30:ee:cd:54:19:16:1e:76:2d:e4:83:52:25:b2:be:e0:a1:a2:
9a:8e:56:78:36:63:b4:c0:02:b6:5a:e1:68:d4:e9:10:08:05:
2e:c8:cc:89:77:cc:0e:a2:d3:b4:9f:ad:9c:33:38:42:91:06:
64:2e:18:e6:06:ab:16:ec:71:c8:ff:ff:a3:33:88:bc:61:28:
7f:e7:44:6a:70:23:26:35:c9:a1:79:c0:bf:7b:7c:1a:b8:18:
bd:93:13:24:5b:f0:e3:47:d7:9d:35:66:d8:6a:dd:58:0c:a7:
f4:7c:45:23:bd:3b:80:b5:e9:0b:d3:89:ce:a2:6a:79:b4:e0:
7a:ee:5a:92:27:86:e4:93:6a:69:3f:19:22:38:2c:a4:d6:e2:
3f:d7:8f:dd:26:ca:f8:cd:b5:d6:e4:d3:7a:06:c5:df:35:49:
a9:9b:98:4d:3d:e3:b9:1e:6b:11:c7:f4:da:97:1f:ad:ca:22:
be:1f:43:22:24:dc:12:f0:07:cb:69:43:1f:f6:8e:64:c4:b4:
70:c6:0c:a6:7a:c1:8a:39:a1:bd:dc:22:36:75:7b:c7:f0:ed:
19:36:37:da:09:32:b7:81:31:c2:14:f5:91:76:59:e5:ce:86:
75:04:12:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 22:51:46 2026 by rpki-client