Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/dqnyw_W1CCAqSNUANvlF6IrPlWU.roa
File: dqnyw_W1CCAqSNUANvlF6IrPlWU.roa (raw, json)
Hash identifier: thPaFAmYSy3lVkdasWJWFM9aDXlXWLax09uSL/lQTRw=
Subject key identifier: 76:A9:F2:C3:F5:B5:08:20:2A:48:D5:00:36:F9:45:E8:8A:CF:95:65
Certificate issuer: /CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Certificate serial: 019C47E19938FD69395A0F27A89659FDBCA6
Authority key identifier: 60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/dqnyw_W1CCAqSNUANvlF6IrPlWU.roa
Signing time: Tue 10 Feb 2026 14:08:13 +0000
ROA not before: Tue 10 Feb 2026 14:08:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 53356
IP address blocks: 95.173.36.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:47:e1:99:38:fd:69:39:5a:0f:27:a8:96:59:fd:bc:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=60661758ce330622470a39ae8d6ef4a2044f83c4
Validity
Not Before: Feb 10 14:08:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=76a9f2c3f5b508202a48d50036f945e88acf9565
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:a6:7a:e8:a6:87:2c:29:09:9b:7e:cb:52:
b9:6f:38:f1:f1:a9:b0:1e:6a:87:77:38:ae:11:6d:
0d:be:76:64:29:51:d8:07:e7:6a:ea:23:ca:98:17:
fe:a6:be:9c:4f:d8:9f:d3:ac:dc:f5:cd:2d:2a:21:
ca:a3:ec:90:ac:14:97:46:20:15:2d:e9:30:c3:de:
1b:81:f0:b9:5c:d5:b9:4f:db:a0:f8:14:36:47:ee:
53:79:9d:09:26:87:8c:64:ef:b3:00:a7:f2:af:50:
4f:50:46:a6:ef:17:1a:e7:22:05:4d:85:2e:60:e0:
90:cd:06:d1:3c:c4:84:f8:1d:da:02:bb:f1:a0:6c:
36:db:25:f6:30:4e:a8:87:e7:8a:2e:74:75:16:f7:
8c:b6:65:3f:54:3a:51:c0:14:7e:4c:60:e1:d9:a6:
f0:93:1c:da:81:bd:3c:7c:56:a6:b3:34:b8:4b:93:
40:18:c2:9c:e6:af:54:d8:ec:15:ee:41:0b:c8:2b:
30:03:f4:f4:5d:ad:46:ba:c6:87:6b:57:e5:8d:e0:
37:b6:7b:5d:7a:ee:60:81:02:dd:3e:45:23:44:47:
1c:17:20:c4:8a:b8:09:b6:33:c8:12:d8:98:da:d6:
a9:5a:07:7b:39:5c:3e:71:14:fa:b5:7d:24:7d:87:
14:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:A9:F2:C3:F5:B5:08:20:2A:48:D5:00:36:F9:45:E8:8A:CF:95:65
X509v3 Authority Key Identifier:
keyid:60:66:17:58:CE:33:06:22:47:0A:39:AE:8D:6E:F4:A2:04:4F:83:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YGYXWM4zBiJHCjmujW70ogRPg8Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/dqnyw_W1CCAqSNUANvlF6IrPlWU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/edd128-6d6e-49e3-b77e-1f8746945483/1/YGYXWM4zBiJHCjmujW70ogRPg8Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.173.36.0/22
Signature Algorithm: sha256WithRSAEncryption
71:ec:d6:bb:73:1b:10:1c:ab:8d:12:bf:46:b2:cb:e1:ac:9f:
14:b8:73:a3:76:75:bb:c3:6b:9c:bb:ab:19:37:b3:31:86:9e:
ab:56:de:e1:2a:5e:52:f3:cd:0f:19:fe:8b:6d:49:f0:b5:8f:
1d:b6:d3:e8:15:8a:99:a6:1a:bb:f1:68:99:12:cf:73:82:78:
04:a8:9c:89:7d:9c:33:c2:33:c3:02:c3:eb:af:9f:31:0a:5e:
ca:13:1f:33:98:84:69:cf:08:de:0a:da:47:57:83:44:e5:e4:
20:62:f3:9f:f1:2c:4f:c7:3c:dd:4e:a5:b1:2b:21:f1:56:1c:
b0:d2:1b:b0:39:0f:54:ce:c2:69:5a:2f:47:8a:58:99:98:b6:
c0:d9:5e:d5:d7:c6:2e:03:fe:06:1f:93:23:2b:a2:a9:b4:96:
85:a9:7b:69:c1:ce:cd:86:77:cf:1f:84:98:4d:a9:c1:a9:a4:
91:58:24:de:bf:45:f1:3c:89:a0:36:bb:39:94:09:0b:4d:3e:
aa:78:aa:58:e2:5c:1d:11:9d:ac:8d:01:2c:f2:c0:07:2c:97:
5d:3b:10:43:24:c7:4b:0e:c3:b2:f8:c4:84:0d:54:83:e6:87:
1c:98:e5:35:d0:6f:a7:dd:d5:e3:2d:b5:bb:e4:33:f5:72:70:
81:27:dc:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 11:52:04 2026 by rpki-client