Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/QGOUl6cOXI5SdOCs4uoyhWlaEsE.roa
File: QGOUl6cOXI5SdOCs4uoyhWlaEsE.roa (raw, json)
Hash identifier: WqfVmqTlGSTwM8JccYt4gG+EC62yBErfUVOCMQdkE0I=
Subject key identifier: 40:63:94:97:A7:0E:5C:8E:52:74:E0:AC:E2:EA:32:85:69:5A:12:C1
Certificate issuer: /CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Certificate serial: 019C5576C590A0B7F523232C2FBE6DD4EE1C
Authority key identifier: 93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/QGOUl6cOXI5SdOCs4uoyhWlaEsE.roa
Signing time: Fri 13 Feb 2026 05:26:12 +0000
ROA not before: Fri 13 Feb 2026 05:26:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 194.41.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 13:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:55:76:c5:90:a0:b7:f5:23:23:2c:2f:be:6d:d4:ee:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93677d7cb9271ce361256e9833cc7b14fd023ebe
Validity
Not Before: Feb 13 05:26:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40639497a70e5c8e5274e0ace2ea3285695a12c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:85:84:62:3b:50:13:5c:52:43:b8:4e:63:aa:
f0:a2:3f:97:2a:ba:b4:5f:b4:35:63:d5:ea:c4:38:
f1:39:1b:46:54:d9:95:33:5c:e0:ad:ce:0c:1f:69:
11:9c:d3:ae:d8:ba:f9:e6:1f:88:7f:21:96:a3:64:
af:bd:3e:47:d8:96:a5:b5:2f:97:fe:99:17:52:87:
12:c5:03:5c:8a:cf:85:49:2f:15:38:61:89:b2:e8:
11:d9:a5:c8:24:5f:1d:ca:49:c0:a7:92:ab:3a:5a:
03:27:38:dd:36:b3:8a:e3:53:f8:6e:93:eb:05:53:
ef:2c:c1:ae:b0:5d:71:1f:d3:d8:21:7f:fd:87:40:
71:65:32:ee:45:ec:8a:ab:5e:9e:ac:0c:3c:3b:df:
b8:99:3a:ff:8f:38:29:fd:84:22:42:a5:01:1e:a0:
2e:2c:df:65:d4:73:c7:24:a0:6c:88:ce:68:ae:cb:
00:6d:f8:75:88:14:2f:70:8c:3a:53:02:66:51:5c:
87:6e:db:1a:cc:14:ec:e5:53:07:0c:18:0f:01:11:
66:c3:0c:07:35:08:84:33:63:ba:9f:54:aa:3e:49:
ad:a4:d4:73:4c:39:07:d7:c5:3d:4f:75:6d:ee:66:
51:3f:2e:25:37:0d:8b:8d:90:e5:42:c3:68:96:b0:
c8:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:63:94:97:A7:0E:5C:8E:52:74:E0:AC:E2:EA:32:85:69:5A:12:C1
X509v3 Authority Key Identifier:
keyid:93:67:7D:7C:B9:27:1C:E3:61:25:6E:98:33:CC:7B:14:FD:02:3E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k2d9fLknHONhJW6YM8x7FP0CPr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/QGOUl6cOXI5SdOCs4uoyhWlaEsE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c8/a9c6da-8ea0-46b7-a1a6-99acb99ce754/1/k2d9fLknHONhJW6YM8x7FP0CPr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.41.114.0/24
Signature Algorithm: sha256WithRSAEncryption
35:88:44:0f:6f:47:98:8e:5c:3a:5a:ed:f3:d1:23:f9:26:5f:
01:99:60:1b:62:36:d8:cc:d7:4e:0d:df:37:2e:f9:00:ad:22:
43:32:65:9d:2e:08:99:80:64:fd:7c:c3:ec:83:6a:06:50:c2:
bf:05:b2:1b:06:b2:fd:a0:d3:dc:32:aa:5b:d5:a5:81:e3:70:
f1:6c:8f:0b:de:1e:7d:86:a4:c9:92:dd:39:15:65:f2:e1:fe:
54:2f:f5:3d:82:25:00:13:bb:ce:31:49:a6:dd:8b:54:b6:75:
8f:a9:36:4e:fa:23:5e:ff:c8:2d:ca:41:18:65:ce:f5:0e:9d:
36:51:fd:36:47:37:ab:b8:fd:dd:72:46:6e:06:d0:c1:45:ed:
40:10:4e:39:56:a3:5e:eb:a4:e8:3b:99:4c:e9:27:a6:02:52:
5f:8a:e8:76:4c:cb:3a:97:7e:e7:1b:a0:c4:a3:ea:56:0e:fd:
65:85:a7:b7:3f:4f:da:0e:ee:ff:66:3f:cd:8e:46:cc:24:93:
04:1f:90:bf:19:5f:16:c8:57:de:b8:fc:0c:7c:d8:d4:b1:c7:
19:a2:51:7d:18:c7:9c:78:21:ca:6c:b0:14:67:0c:dc:3a:ed:
e0:0c:4a:a4:0a:51:0a:bc:4d:c3:d4:20:ba:42:39:34:0a:f7:
91:dd:bc:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 00:02:36 2026 by rpki-client