Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/QnL2C3-KGaekq-1q87fzI7-f6vg.roa
File: QnL2C3-KGaekq-1q87fzI7-f6vg.roa (raw, json)
Hash identifier: g47Y6ZOFMFnPYe8Q7Dl4VLnyKH5AOEhgtWJJzN6BsaY=
Subject key identifier: 42:72:F6:0B:7F:8A:19:A7:A4:AB:ED:6A:F3:B7:F3:23:BF:9F:EA:F8
Certificate issuer: /CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Certificate serial: 019D57876BA99B44FD1CF28345BEFD119796
Authority key identifier: 48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/QnL2C3-KGaekq-1q87fzI7-f6vg.roa
Signing time: Sat 04 Apr 2026 08:06:25 +0000
ROA not before: Sat 04 Apr 2026 08:06:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208972
IP address blocks: 2a13:a440:8::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.mft
rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:57:87:6b:a9:9b:44:fd:1c:f2:83:45:be:fd:11:97:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4805f17c2d7133d2dad3a8df7e35315e37ef5daf
Validity
Not Before: Apr 4 08:06:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4272f60b7f8a19a7a4abed6af3b7f323bf9feaf8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:a3:0f:82:35:c2:88:59:e5:1b:55:be:b9:ea:
d9:6f:4c:dd:b0:1c:e3:46:d2:a9:54:c0:a7:f4:0b:
26:18:fd:36:d4:b0:d4:f2:e0:e1:42:77:7c:e8:dc:
6a:cc:25:db:80:b5:b1:94:c4:d8:78:83:dc:cc:e6:
fe:34:d6:cc:24:ec:64:59:4b:02:53:f2:8a:1b:e3:
08:78:c8:39:ce:bb:52:3b:49:cf:4d:b8:69:a5:c8:
dc:7b:d6:2c:23:87:df:09:8f:ec:cc:e4:69:9a:57:
45:75:a0:59:6a:95:f6:e0:61:6e:33:9e:b5:68:db:
9f:b5:87:67:e3:15:bb:13:bc:27:d7:1b:25:c4:71:
62:2e:4b:4b:2a:e0:65:ca:51:f3:75:63:f4:d3:f4:
a9:78:7d:c9:6f:66:10:da:ae:84:d6:00:c7:13:78:
63:15:4b:4f:fe:79:37:41:2e:de:18:7e:37:f2:8b:
4c:c4:19:6c:5f:4b:70:a1:9f:c9:e8:0e:e2:b9:45:
26:3d:c3:fa:7f:e5:ca:18:26:02:e4:2b:02:dd:33:
d0:de:15:8d:b5:82:2a:3c:dd:b3:ba:f3:51:d2:c2:
dc:56:69:05:66:6b:85:2b:c2:6d:df:bb:13:c8:d9:
87:4b:7c:f3:e0:94:a8:14:52:08:89:5a:69:69:db:
d6:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:72:F6:0B:7F:8A:19:A7:A4:AB:ED:6A:F3:B7:F3:23:BF:9F:EA:F8
X509v3 Authority Key Identifier:
keyid:48:05:F1:7C:2D:71:33:D2:DA:D3:A8:DF:7E:35:31:5E:37:EF:5D:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SAXxfC1xM9La06jffjUxXjfvXa8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/QnL2C3-KGaekq-1q87fzI7-f6vg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/8e07dd-4fe5-4820-bcbe-5dd6e22ebab0/1/SAXxfC1xM9La06jffjUxXjfvXa8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a13:a440:8::/48
Signature Algorithm: sha256WithRSAEncryption
3f:b8:e2:95:06:92:89:17:54:fe:76:be:76:8c:9c:7b:4c:ae:
7f:65:bd:e5:e0:b4:23:10:13:07:f3:7d:b1:5b:f2:2b:f2:e6:
2a:94:8e:05:bc:ad:42:01:f9:60:0f:ef:fc:9e:31:4f:90:33:
a4:d1:54:1c:07:ba:3b:1c:66:60:96:24:3c:a7:aa:b4:3f:c6:
e2:eb:21:ba:48:10:9e:ed:88:35:ba:91:33:52:c1:58:9a:44:
cb:88:ca:67:b4:52:82:8c:13:80:eb:74:1b:48:98:8c:75:a1:
a0:fa:85:37:11:21:6d:e7:5e:74:7d:2c:2e:a3:8f:6b:65:3c:
80:65:8e:e8:82:de:f7:d5:fb:3e:aa:36:45:98:41:31:f6:6e:
5e:b0:1a:81:92:d7:61:a6:24:ce:02:ab:4b:1d:dc:5a:d6:3f:
1d:0b:4b:09:6b:77:fc:55:e9:cf:7f:3f:61:bc:6d:74:f6:07:
9b:b2:07:00:fc:6e:ed:42:e9:c3:69:f2:f9:d3:17:2e:c5:2d:
87:01:2a:50:ec:2e:b9:f6:86:05:5e:73:c4:76:44:1b:3c:c6:
11:42:db:a8:82:3c:b2:32:36:98:bc:7c:45:f1:38:0c:74:5a:
63:da:e2:80:8f:bb:b7:0b:e5:91:a2:27:5b:90:f0:72:c9:a5:
46:d8:ee:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 11:26:30 2026 by rpki-client