Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/QZQCliYt7_SkiNgn0oBCrt9JnJA.roa
File: QZQCliYt7_SkiNgn0oBCrt9JnJA.roa (raw, json)
Hash identifier: J1S9YQoNzohLr1YwHRGBK6/jtI3laoaPMu+xmQQPktQ=
Subject key identifier: 41:94:02:96:26:2D:EF:F4:A4:88:D8:27:D2:80:42:AE:DF:49:9C:90
Certificate issuer: /CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Certificate serial: 01A09FD9D282BB052C9F42E15914CA563075
Authority key identifier: 7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/QZQCliYt7_SkiNgn0oBCrt9JnJA.roa
Signing time: Mon 14 Sep 2026 12:17:27 +0000
ROA not before: Mon 14 Sep 2026 12:17:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201966
IP address blocks: 94.229.84.0/23 maxlen: 23
2a05:2c7:c000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 01:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9f:d9:d2:82:bb:05:2c:9f:42:e1:59:14:ca:56:30:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7cfc92b0a75b89ad2e3c57f7cba0e478684219ce
Validity
Not Before: Sep 14 12:17:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41940296262deff4a488d827d28042aedf499c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:e5:e3:49:fc:57:4b:0b:1c:74:1c:31:bc:
48:92:6e:1b:42:15:17:1f:c7:69:1b:16:29:4f:ae:
18:aa:62:20:bf:47:df:87:aa:e6:e1:e7:92:37:65:
74:18:f3:e7:a6:1c:a8:b0:fd:66:12:0f:28:b9:cf:
0e:19:80:87:5f:e1:6f:48:f7:aa:c2:d4:a5:f4:f2:
a7:5d:7a:50:91:56:5a:f9:e8:98:ea:21:d0:e0:b4:
96:6b:a0:1c:ac:51:8b:e1:b2:a3:b5:01:46:bb:f1:
b2:e3:1f:ee:80:b8:8f:43:45:87:41:a5:f8:e6:26:
bc:90:96:33:43:05:63:78:15:42:ea:a5:7e:f1:b1:
af:2c:97:58:00:13:ae:a4:8d:7b:e9:b7:fa:01:db:
a7:aa:c5:b5:ea:a2:62:84:4b:c9:4f:01:71:44:2c:
da:5e:6c:03:6c:26:12:dd:7b:8f:5f:11:67:14:5f:
10:d5:ad:a8:62:cb:db:25:99:ab:0b:20:ac:92:da:
c2:52:0a:31:7d:89:fe:93:68:63:2b:ce:a8:dd:c9:
85:0f:81:1e:91:d9:9e:45:ee:16:30:18:04:32:03:
6a:d7:b8:a2:d8:5c:b7:e1:47:35:a2:d0:cb:c6:3d:
1f:94:ef:dd:73:3c:18:58:db:d0:80:df:a1:5f:4b:
57:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:94:02:96:26:2D:EF:F4:A4:88:D8:27:D2:80:42:AE:DF:49:9C:90
X509v3 Authority Key Identifier:
keyid:7C:FC:92:B0:A7:5B:89:AD:2E:3C:57:F7:CB:A0:E4:78:68:42:19:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fPySsKdbia0uPFf3y6DkeGhCGc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/QZQCliYt7_SkiNgn0oBCrt9JnJA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f1/1776cb-1c78-4dcc-b43b-36d7b4f84e5c/1/fPySsKdbia0uPFf3y6DkeGhCGc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.229.84.0/23
IPv6:
2a05:2c7:c000::/34
Signature Algorithm: sha256WithRSAEncryption
4f:2a:61:03:2b:50:a9:cb:5e:dc:2a:86:f3:a4:f7:3c:c9:54:
77:1b:16:0a:75:dd:f6:b8:d8:eb:27:10:46:50:c0:03:05:91:
ea:c2:90:ac:7b:46:91:25:a7:1f:87:17:82:a1:44:c4:91:2c:
de:62:48:e0:d1:16:f8:e2:4e:f5:ae:b6:b4:3d:00:a3:c9:61:
d6:a1:4d:d2:e0:d1:7c:9f:15:5a:e3:18:84:38:92:19:88:94:
44:e5:4d:f0:a9:11:cc:80:ae:bd:82:ec:a7:bb:72:cf:5c:02:
3a:18:6f:1a:bc:ff:81:43:c4:a5:47:7e:7f:2f:57:f7:be:df:
ca:95:d1:10:4f:9b:d6:4c:13:83:30:39:e1:3a:79:51:15:32:
2e:a3:e1:03:3c:57:37:57:36:54:23:d1:0e:3e:ef:d7:02:49:
d6:5d:91:d6:b6:ea:7e:4e:be:6a:c6:9b:55:11:20:ec:f7:4d:
58:f7:44:ff:0e:18:e5:3d:4f:32:e6:b9:25:45:f8:1f:2e:99:
13:b0:a3:d2:c6:29:2b:a1:8c:ed:73:48:8a:de:43:84:b2:d8:
ec:eb:29:f9:c0:66:09:27:e2:c4:60:ff:d6:b6:a7:7d:fe:20:
fb:4c:c9:05:c2:8e:08:a6:48:bd:ec:be:87:21:df:54:e9:4f:
ef:cd:d2:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 22 12:03:29 2026 by rpki-client