Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/QdPFDtWVxkEJpznnKF6tITle6G8.roa
File: QdPFDtWVxkEJpznnKF6tITle6G8.roa (raw, json)
Hash identifier: DNgnhPj30PZlfK71mnwNTLe3HEwOKQYeLOXwSPHiQp0=
Subject key identifier: 41:D3:C5:0E:D5:95:C6:41:09:A7:39:E7:28:5E:AD:21:39:5E:E8:6F
Certificate issuer: /CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Certificate serial: 019C9563B0365B9358781E1673ADEB5B6F26
Authority key identifier: 44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/QdPFDtWVxkEJpznnKF6tITle6G8.roa
Signing time: Wed 25 Feb 2026 15:21:04 +0000
ROA not before: Wed 25 Feb 2026 15:21:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6797
IP address blocks: 2a00:4961::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.mft
rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:63:b0:36:5b:93:58:78:1e:16:73:ad:eb:5b:6f:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44c0f2a2a56007e4c45ccc71e7da092861305b20
Validity
Not Before: Feb 25 15:21:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41d3c50ed595c64109a739e7285ead21395ee86f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:52:f3:f4:1f:da:33:bd:c8:94:29:08:f3:3c:
09:2c:e4:8e:df:24:25:28:c4:3b:06:d8:2e:a1:3f:
63:a7:d9:58:82:ef:7f:b1:7d:b8:5e:1f:7e:8a:88:
41:a4:8e:de:c7:78:9a:10:b0:e5:a4:23:16:b9:e9:
53:c2:ba:6e:83:1c:d9:50:35:e0:0f:fb:ab:b0:5a:
eb:a9:71:a1:a3:e2:a9:84:48:12:c5:e5:e3:49:69:
74:67:2c:8d:44:cf:87:db:92:5b:61:f8:58:46:d0:
ad:99:5d:69:3b:5c:98:70:39:82:d4:6e:96:97:9b:
4b:da:ff:80:6f:6b:94:0a:23:b0:c6:1e:6b:95:0f:
7c:0b:9d:f1:a8:64:38:1c:1e:30:38:a0:22:a2:86:
b0:82:fa:f1:14:ac:b7:62:f0:3c:2b:c2:88:4d:65:
b4:82:d1:78:5e:aa:d6:42:07:8a:4e:c1:54:32:89:
a5:be:4f:18:8f:16:67:db:81:65:9e:03:7c:81:9c:
50:4e:82:94:9c:ae:b5:2e:30:bb:5c:b9:06:ed:61:
41:22:37:9b:b4:c4:ef:6a:41:3a:b4:72:05:6f:4f:
c4:47:13:5f:84:68:cf:48:f4:65:69:4a:dc:6d:d9:
41:1c:43:a6:09:5a:f8:d9:4c:25:18:52:9d:e8:ea:
8a:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D3:C5:0E:D5:95:C6:41:09:A7:39:E7:28:5E:AD:21:39:5E:E8:6F
X509v3 Authority Key Identifier:
keyid:44:C0:F2:A2:A5:60:07:E4:C4:5C:CC:71:E7:DA:09:28:61:30:5B:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RMDyoqVgB-TEXMxx59oJKGEwWyA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/QdPFDtWVxkEJpznnKF6tITle6G8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cd/b8058e-4eba-4cc4-8c1d-9c84f2fdd8f0/1/RMDyoqVgB-TEXMxx59oJKGEwWyA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a00:4961::/32
Signature Algorithm: sha256WithRSAEncryption
aa:7e:31:c5:10:fb:4b:a7:d9:0f:f5:80:37:53:f4:22:da:dc:
d6:43:96:d3:3b:b3:70:38:7a:58:d0:8a:0b:56:47:ee:68:b2:
a7:5e:eb:ce:da:69:95:91:5d:3c:a0:54:0f:ed:bf:49:cc:1e:
55:b8:af:2f:ba:c1:e1:62:82:60:2b:aa:fb:f0:f5:fa:da:d8:
f3:be:c2:ff:51:ff:fe:5b:a9:ec:dd:ec:2b:56:f0:ef:2e:1e:
3d:ef:9e:11:7a:9b:c8:66:35:13:73:94:9a:98:a1:c0:6e:4b:
f4:78:0c:b3:95:84:73:53:4d:29:3b:3d:09:4a:b6:ab:6d:65:
1b:6c:0a:6e:bb:19:3d:da:e5:02:f6:42:5d:71:d4:18:5d:47:
ef:5b:e0:17:91:e4:ad:06:b7:ee:82:d8:c6:3b:a4:20:66:9c:
27:74:1b:af:26:ad:e6:e9:5a:f9:6e:53:df:00:c5:6d:e2:0e:
11:90:d5:74:2a:6f:36:8c:1a:d4:ed:ac:cc:2b:a7:2a:d0:58:
6e:aa:52:c1:d6:a0:dc:6d:73:52:2e:07:fc:09:2d:ab:b2:ab:
6d:24:26:47:c9:d1:13:4f:c4:96:a3:2d:24:06:e4:e3:7a:ba:
ab:0b:85:72:86:93:9e:e1:69:ee:be:44:5c:a3:49:fb:69:79:
4a:65:0b:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 22:43:41 2026 by rpki-client