Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/QR-4xyPmxQoNOzw8r8G1312CGFY.roa
File: QR-4xyPmxQoNOzw8r8G1312CGFY.roa (raw, json)
Hash identifier: mQraALPAX5RAPWW2mrRXlTw0EIho9B1EEiVrzSs5Y7E=
Subject key identifier: 41:1F:B8:C7:23:E6:C5:0A:0D:3B:3C:3C:AF:C1:B5:DF:5D:82:18:56
Certificate issuer: /CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
Certificate serial: 019B7C7FE85EC05516F29E81E9A568B0756A
Authority key identifier: BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/QR-4xyPmxQoNOzw8r8G1312CGFY.roa
Signing time: Fri 02 Jan 2026 02:18:35 +0000
ROA not before: Fri 02 Jan 2026 02:18:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211068
IP address blocks: 185.183.140.0/22 maxlen: 22
185.183.140.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7c:7f:e8:5e:c0:55:16:f2:9e:81:e9:a5:68:b0:75:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4abd784bf0c0249c0139d610ff90a9ae0b7124
Validity
Not Before: Jan 2 02:18:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=411fb8c723e6c50a0d3b3c3cafc1b5df5d821856
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ff:ea:71:02:f0:1f:93:02:20:86:cc:c8:17:
fe:74:7c:b3:1e:be:26:7d:2e:06:43:9e:52:0b:5b:
d1:b6:68:57:54:b1:6b:bb:4f:c9:ab:c7:2a:9b:bb:
11:88:ed:5f:ba:00:82:36:e7:b4:ce:09:59:6b:c5:
95:9f:eb:00:bf:72:71:02:6a:76:22:35:e0:24:15:
4c:12:1d:0e:63:65:cb:ed:66:7a:5a:8e:d0:ed:8e:
c1:a2:90:e0:96:2b:d2:4b:92:72:ad:e9:57:6b:59:
6e:75:23:a9:41:83:f8:96:50:34:08:d8:e8:10:37:
3e:15:31:80:85:0e:8f:fa:dd:3f:62:d9:42:04:48:
e0:83:57:20:7c:5b:c5:e2:cb:6f:99:25:5d:03:8b:
d2:84:77:c3:e3:3d:2f:36:c3:7f:bc:c3:ae:ba:ee:
7d:bc:aa:48:e8:7d:44:5f:6e:05:33:79:1f:be:68:
b9:f6:ff:d5:3b:fb:51:27:7b:71:e3:df:d5:9d:a0:
0c:43:e6:e7:b6:7f:da:eb:2d:3c:cb:8a:da:67:e2:
8e:f6:f5:f4:e9:8a:72:c2:38:5b:9b:b3:6f:0a:2a:
42:a1:58:4d:16:51:06:61:3e:ce:61:2a:18:87:d0:
37:ae:72:0a:72:bd:23:69:9d:3e:81:b5:e1:0a:e6:
03:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1F:B8:C7:23:E6:C5:0A:0D:3B:3C:3C:AF:C1:B5:DF:5D:82:18:56
X509v3 Authority Key Identifier:
keyid:BD:4A:BD:78:4B:F0:C0:24:9C:01:39:D6:10:FF:90:A9:AE:0B:71:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUq9eEvwwCScATnWEP-Qqa4LcSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/QR-4xyPmxQoNOzw8r8G1312CGFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/e1043c-7c75-4ffc-b494-bb5f8b809b0c/1/vUq9eEvwwCScATnWEP-Qqa4LcSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.183.140.0/22
Signature Algorithm: sha256WithRSAEncryption
7c:c0:ce:8a:08:0a:03:8f:ae:2b:f9:c6:7d:20:7f:d5:00:cf:
c8:b6:4a:94:dc:bf:34:e9:44:1d:c0:28:c7:b0:fb:2a:73:46:
ba:90:39:2c:a2:1e:4c:d2:88:d7:df:b9:9f:78:8a:7f:fc:b9:
4f:21:4d:9b:00:ba:c6:50:7f:e7:fe:db:be:2e:4d:c9:df:10:
c0:d7:44:aa:2d:8b:8e:01:ab:b6:01:c6:0d:51:cf:42:19:2c:
8b:aa:06:e6:81:86:e2:40:60:75:33:38:68:26:4c:a7:df:9d:
33:88:86:3c:0e:0a:10:34:ea:47:14:a2:5d:ad:8b:0a:69:91:
8e:67:f4:9a:73:36:13:73:bd:91:9b:05:68:61:5e:15:a0:a9:
52:48:d8:11:f9:54:37:72:95:44:e3:30:89:0f:7f:2a:65:6a:
b2:d0:2b:66:28:70:71:c7:45:8f:81:a6:44:5d:ad:6b:0a:d5:
5f:51:e5:7c:35:3d:31:46:61:2a:d0:b9:6f:fb:c1:cc:19:69:
71:8b:89:76:80:54:8b:c6:7f:52:20:ec:15:f0:e4:25:0e:65:
0a:79:d3:d3:ce:0b:e7:d2:7a:59:cc:62:6d:5d:35:b0:8a:d6:
91:de:0b:9c:40:03:c6:53:1d:64:eb:6f:fe:f1:31:2d:57:f8:
01:0f:f8:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:14:44 2026 by rpki-client