Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/QTSqomjWXtKfh7OUVnkrjebBaII.roa
File: QTSqomjWXtKfh7OUVnkrjebBaII.roa (raw, json)
Hash identifier: zSqFmmIQHBY+0O4JMLLVBQ+PH7rl+fsYRK5olhmYc60=
Subject key identifier: 41:34:AA:A2:68:D6:5E:D2:9F:87:B3:94:56:79:2B:8D:E6:C1:68:82
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 01A0B560138357CC8FF65D333CA7086771DA
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/QTSqomjWXtKfh7OUVnkrjebBaII.roa
Signing time: Fri 18 Sep 2026 16:36:07 +0000
ROA not before: Fri 18 Sep 2026 16:36:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 85.208.11.0/24 maxlen: 24
94.229.214.0/24 maxlen: 24
94.229.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 07:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:60:13:83:57:cc:8f:f6:5d:33:3c:a7:08:67:71:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Sep 18 16:36:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4134aaa268d65ed29f87b39456792b8de6c16882
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:6a:6e:78:7e:c2:63:5e:12:ce:e5:e8:b6:13:
09:cd:c0:6a:3b:88:b0:57:5a:34:1f:c5:dc:d5:3f:
37:e2:83:80:44:58:26:a3:73:29:fd:4d:f3:ed:e5:
4d:81:d6:36:7e:dd:3d:71:2f:70:5f:15:2f:60:a8:
d2:e2:d1:a6:cb:fe:5a:1a:78:c9:ed:62:b4:82:f6:
6c:35:82:bb:94:9b:69:f8:13:75:30:d8:73:56:b2:
b2:ff:11:81:8f:0b:d0:4f:48:eb:ec:8f:d4:1b:d6:
d7:81:56:7d:04:54:a1:95:75:c5:d5:2c:bb:d4:a0:
fe:81:1b:c3:f4:06:80:e1:fb:b4:3a:de:29:66:37:
00:66:cd:a5:70:dd:cf:27:b5:9a:9b:ba:7d:34:39:
21:bc:13:5b:92:6e:a2:81:56:df:27:28:04:ab:53:
f9:31:44:bf:90:98:74:4d:99:56:3c:61:91:a9:8c:
09:82:b0:1e:5f:9b:6f:b6:2a:90:81:13:5b:62:03:
00:03:76:96:c8:0e:a4:ba:74:c8:0c:f4:93:d0:44:
e7:1e:49:e8:db:7c:9a:5f:11:7f:08:ee:9f:f7:5b:
76:2a:34:7c:a7:83:24:61:e6:43:aa:ad:1b:6e:08:
b8:23:10:43:5f:45:97:88:5f:e8:b3:4b:80:61:95:
6d:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:34:AA:A2:68:D6:5E:D2:9F:87:B3:94:56:79:2B:8D:E6:C1:68:82
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/QTSqomjWXtKfh7OUVnkrjebBaII.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.208.11.0/24
94.229.214.0/24
94.229.219.0/24
Signature Algorithm: sha256WithRSAEncryption
05:76:37:ba:e9:7a:a2:d0:81:1f:88:a8:07:44:49:31:d9:a1:
ff:a8:cc:d4:ed:bb:4f:54:4d:8e:24:b9:55:a8:7d:14:06:1c:
d1:8f:b8:10:a4:73:b1:2d:c8:bb:ba:04:70:9c:27:09:0f:20:
ac:40:37:60:bb:e3:5d:0b:99:1c:c6:c4:16:38:0c:e2:c6:eb:
77:53:4e:7a:03:b9:b6:98:ed:23:e7:70:87:fc:9f:87:f8:b2:
57:bf:7f:01:5b:cf:06:4e:67:a5:cb:90:f9:c8:52:8c:da:92:
4e:28:a1:a3:04:c3:8f:98:95:5e:2b:85:22:44:77:a9:0f:76:
a1:23:4c:e2:f5:e4:e4:af:0d:c3:fa:75:75:c8:70:1a:37:16:
f9:aa:30:89:c3:43:7a:4a:a2:c1:6e:71:4b:0d:7c:53:61:eb:
f0:80:00:61:e2:9b:51:f9:ca:a5:ff:af:df:fe:cf:76:8c:91:
40:20:31:32:1a:5b:93:01:63:44:20:61:0e:fa:8f:86:63:46:
c8:72:0e:77:ba:69:17:e4:de:24:5c:74:16:c2:01:9e:b7:87:
7c:d2:ca:e0:21:f2:0d:a2:5d:9b:5b:a6:ed:32:51:e8:43:d1:
1c:1f:d9:42:5f:ae:21:f5:e3:a2:f3:93:e7:d5:cb:9b:df:7c:
dc:be:f9:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 21 12:29:27 2026 by rpki-client