Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/QqOV1t_rvWgp7d8XnXyjaPwjar8.roa
File: QqOV1t_rvWgp7d8XnXyjaPwjar8.roa (raw, json)
Hash identifier: tOqX3TdeefdEULHlf/6xKuTSxXbTQGcNvDfPoledb9E=
Subject key identifier: 42:A3:95:D6:DF:EB:BD:68:29:ED:DF:17:9D:7C:A3:68:FC:23:6A:BF
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 019C9FB0C0DF64FA27039C99591C8B225B02
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/QqOV1t_rvWgp7d8XnXyjaPwjar8.roa
Signing time: Fri 27 Feb 2026 15:21:26 +0000
ROA not before: Fri 27 Feb 2026 15:21:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44788
IP address blocks: 2001:978:1d05::/48 maxlen: 48
2001:978:1d06::/48 maxlen: 48
2001:978:3c0d::/48 maxlen: 48
2001:978:3c0e::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:b0:c0:df:64:fa:27:03:9c:99:59:1c:8b:22:5b:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: Feb 27 15:21:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42a395d6dfebbd6829eddf179d7ca368fc236abf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f1:28:b3:02:a9:d4:4b:ea:12:e6:e7:d5:c2:
d9:66:b5:b8:87:fa:e7:ab:9c:e3:9b:18:2a:b3:e6:
4a:95:2c:9a:d8:84:07:da:2b:38:9b:05:85:7a:91:
3f:1a:8b:5a:ae:6c:3f:78:37:4f:ae:19:10:7f:a9:
00:2e:bc:6c:84:2a:b7:f8:54:ce:33:ef:c7:e9:2a:
15:ac:df:80:b4:3a:6f:12:de:67:4f:6e:52:52:b8:
76:37:ff:c9:ab:11:7e:02:a5:a6:8d:69:8f:a4:ec:
43:8e:80:9f:6a:6a:64:52:b2:68:a1:ff:21:a4:d9:
36:52:fd:ec:46:70:9c:41:e7:92:b9:d5:d1:3c:19:
4b:7d:d7:7e:24:51:31:f5:60:5e:b4:d0:96:3e:f9:
00:47:47:8a:fa:36:89:79:2a:9d:71:d9:f8:7c:e6:
32:15:14:8b:d3:ed:fb:ae:78:ca:cf:4f:12:05:22:
f8:94:7c:45:2c:a0:1b:85:d5:b9:ba:4b:6f:ac:b3:
79:53:43:98:66:24:3e:59:9a:f7:b3:82:18:05:61:
29:4e:cc:35:c1:df:60:93:56:9f:5d:6b:b4:ce:41:
2c:34:a6:2b:b5:fb:58:ea:1e:2d:32:f8:70:19:8b:
64:0f:cd:3f:6e:9f:ee:fc:38:6d:b7:6a:d3:5c:8a:
a6:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A3:95:D6:DF:EB:BD:68:29:ED:DF:17:9D:7C:A3:68:FC:23:6A:BF
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/QqOV1t_rvWgp7d8XnXyjaPwjar8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:978:1d05::-2001:978:1d06:ffff:ffff:ffff:ffff:ffff
2001:978:3c0d::-2001:978:3c0e:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
8e:da:37:de:f3:ba:66:94:56:dd:24:9a:bc:6c:ad:26:d8:24:
63:eb:f5:13:3d:b3:c7:4a:b7:e6:68:34:04:b3:de:e5:6f:01:
69:c4:cd:fe:66:dd:f5:80:2a:94:96:da:25:d4:48:22:44:c3:
b0:8c:15:82:75:e4:3b:e7:bb:0c:d8:44:4f:76:04:74:4a:31:
35:df:5f:a1:07:90:a5:11:59:b2:ca:d2:1e:33:4d:0d:b6:e1:
ef:18:15:69:34:27:9e:d5:1b:dc:7e:32:7c:cd:0e:8a:2b:d6:
e0:0d:8f:8b:42:f9:0e:96:97:79:38:16:06:e1:3a:3b:db:8c:
fb:fc:50:10:58:5e:14:39:c4:ca:eb:04:8f:96:7e:a9:05:73:
aa:e7:5e:60:cc:ac:2f:73:81:84:f1:3b:b7:ac:27:24:74:b1:
e5:40:87:14:34:a0:6b:f6:22:3d:12:60:65:04:b2:14:72:6d:
e6:14:e6:31:b3:00:78:b2:fe:2a:2c:fd:40:e9:79:2a:89:6a:
d0:30:2c:93:30:ec:bf:4c:08:81:77:b7:1a:80:14:f5:f9:10:
95:f2:e2:81:62:8a:b4:c3:23:fd:ae:a0:3f:6d:95:cf:20:ff:
5c:96:18:62:e6:b1:11:07:fd:63:19:05:70:0a:2b:8e:a4:48:
88:da:a7:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 21:20:42 2026 by rpki-client