Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/QTSeAmbhk4ALBMpkH985HfYO3Hs.roa
File: QTSeAmbhk4ALBMpkH985HfYO3Hs.roa (raw, json)
Hash identifier: AgyeNLNXK0dfLFTU8GE2xydoqlDVwBT0jf9mFYgh9VI=
Subject key identifier: 41:34:9E:02:66:E1:93:80:0B:04:CA:64:1F:DF:39:1D:F6:0E:DC:7B
Certificate issuer: /CN=d325fc508a7373256720a54d73fa9057d8a21c13
Certificate serial: 019D72AC2F14262B04A766D3EE96E483284C
Authority key identifier: D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/QTSeAmbhk4ALBMpkH985HfYO3Hs.roa
Signing time: Thu 09 Apr 2026 14:36:20 +0000
ROA not before: Thu 09 Apr 2026 14:36:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205609
IP address blocks: 185.133.252.0/22 maxlen: 22
185.133.252.0/23 maxlen: 23
185.133.254.0/24 maxlen: 24
185.133.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 11:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:72:ac:2f:14:26:2b:04:a7:66:d3:ee:96:e4:83:28:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d325fc508a7373256720a54d73fa9057d8a21c13
Validity
Not Before: Apr 9 14:36:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41349e0266e193800b04ca641fdf391df60edc7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:25:59:54:bf:e8:cb:9b:e6:2a:dd:08:e2:49:
7d:5c:fb:52:b3:87:3c:fa:8c:17:23:dd:3b:94:55:
88:da:c4:76:9d:cf:cd:6a:ce:8a:76:c1:7e:31:76:
6e:52:2f:df:d5:d0:82:e1:75:09:39:02:78:fc:4b:
fd:40:c0:b2:a5:dd:5d:a5:ba:7c:ab:b8:cb:92:6e:
3b:b1:80:ef:29:b2:5b:cf:eb:72:83:bc:cb:88:ad:
90:25:6e:84:02:b1:c6:b2:f8:49:cf:17:79:44:6b:
40:66:1d:f4:16:e3:61:e3:2d:7d:a7:e2:f8:6f:b9:
5e:04:29:be:f0:b8:91:c2:fb:c8:81:b8:6c:b5:44:
7d:b4:9d:39:f0:1a:db:9b:ae:d4:49:eb:34:d6:8f:
71:4c:cf:61:1b:f9:24:64:9f:d2:d4:bb:b8:e2:5d:
7d:0a:d5:c5:16:e0:40:12:b7:f4:bc:c8:36:23:62:
4e:1a:05:20:19:d0:58:a1:29:49:1e:e8:9b:a5:70:
cf:8b:74:c1:49:7f:c9:48:77:8f:c6:7b:06:9a:0a:
a6:21:a9:da:9e:5b:43:72:79:ee:b8:c1:4c:f4:ed:
ab:ad:3f:3c:a5:48:44:23:ff:60:9f:4c:a6:d3:4e:
d4:61:7d:96:07:6f:cc:37:0d:95:b4:54:0c:51:ae:
39:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:34:9E:02:66:E1:93:80:0B:04:CA:64:1F:DF:39:1D:F6:0E:DC:7B
X509v3 Authority Key Identifier:
keyid:D3:25:FC:50:8A:73:73:25:67:20:A5:4D:73:FA:90:57:D8:A2:1C:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0yX8UIpzcyVnIKVNc_qQV9iiHBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/QTSeAmbhk4ALBMpkH985HfYO3Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c0/dc1724-3165-47ef-a6fe-1c6aa1f6b70b/1/0yX8UIpzcyVnIKVNc_qQV9iiHBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.133.252.0/22
Signature Algorithm: sha256WithRSAEncryption
9e:49:24:38:69:0a:97:e6:bc:00:8f:6d:cb:50:7d:0c:2a:65:
90:1d:85:7b:6c:90:89:6b:b7:9d:e6:96:c3:45:97:35:44:71:
dc:dd:c5:1d:6f:83:80:d9:9c:76:96:2c:3b:0b:d7:40:0f:73:
13:00:07:d4:bf:b5:e3:c6:43:86:84:8e:d3:e1:e6:ad:2d:35:
36:4b:c9:27:96:f4:2b:85:4f:bd:ca:a1:3a:bc:f4:95:48:c4:
e7:49:a8:5c:e1:c3:85:83:25:4a:aa:1f:7a:bb:85:24:f5:90:
c7:0e:a5:b8:8e:55:e4:7d:4e:ff:b1:79:9e:19:53:b3:c6:c5:
bb:f7:b1:2c:a8:47:b9:7b:9e:12:1d:c8:39:09:1e:e2:04:36:
bd:68:aa:d5:6e:29:d2:03:c4:1f:06:bd:a4:10:c7:9c:c3:77:
41:2a:b3:b6:f4:a8:82:6b:54:67:4c:cd:ec:02:94:62:d4:92:
3e:9f:bd:17:50:c8:07:08:0f:19:18:0e:cd:18:9a:37:97:c5:
56:bb:b2:71:8f:3e:8d:e4:46:3a:b1:81:00:a9:bb:10:91:57:
5e:e7:eb:fd:78:dc:9f:ec:ea:4c:4a:de:fc:49:a4:1d:f5:c4:
a6:ee:d7:91:21:5f:37:89:e4:c6:a8:52:92:0c:5d:6c:4f:f5:
32:9f:8c:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 17:58:19 2026 by rpki-client