Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QuYIuEWfuLxCBh6SczKlvzLc7R0.roa
File: QuYIuEWfuLxCBh6SczKlvzLc7R0.roa (raw, json)
Hash identifier: wq5LtQWkzD1IvS0cRF5e7YpZie3ZK8BoD748nc2SSUs=
Subject key identifier: 42:E6:08:B8:45:9F:B8:BC:42:06:1E:92:73:32:A5:BF:32:DC:ED:1D
Certificate issuer: /CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
Certificate serial: 019CA289833A4EBF030E28AA48EA7E801DAA
Authority key identifier: 40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QuYIuEWfuLxCBh6SczKlvzLc7R0.roa
Signing time: Sat 28 Feb 2026 04:37:26 +0000
ROA not before: Sat 28 Feb 2026 04:37:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215743
IP address blocks: 2001:67c:291c::/48 maxlen: 48
2001:67c:2d20::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:a2:89:83:3a:4e:bf:03:0e:28:aa:48:ea:7e:80:1d:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=406bb3e2cad7b100256e1c4a7f555b6a38d87526
Validity
Not Before: Feb 28 04:37:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42e608b8459fb8bc42061e927332a5bf32dced1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:d0:bc:1c:0a:dc:e2:08:2f:5b:8c:e6:4c:c2:
74:b2:22:c0:93:fb:05:7c:69:f0:36:34:5d:27:2a:
46:4d:d4:49:2e:58:71:4c:ba:c9:fa:5a:c1:18:16:
c6:e2:1b:9e:80:e8:33:f2:96:7d:26:0e:49:c2:13:
18:2d:f9:e0:73:07:05:0d:14:63:ed:86:2e:12:60:
ed:9f:19:10:1f:4d:a2:56:4a:0b:64:0a:0b:66:b1:
b0:74:0e:ee:97:bb:65:89:b6:3c:86:41:91:84:92:
ad:24:db:64:fa:22:5d:b7:5f:95:c9:dd:ab:22:87:
75:e6:0d:f1:5e:de:4e:e6:ee:bd:85:ba:3c:f9:fd:
10:1c:7d:53:80:fa:cb:5f:0b:b6:de:f0:2f:fb:70:
04:13:2d:47:56:ca:0d:60:9e:34:b0:57:05:20:22:
05:ac:7c:d0:87:95:89:3b:3d:1b:c9:df:29:e7:5e:
e6:0c:b0:40:6d:49:3d:2e:d3:f9:99:75:c6:d4:40:
ae:07:d7:d6:ef:df:5f:03:04:7d:05:13:c4:6e:d2:
2f:be:ff:15:5b:f4:59:01:b9:a8:91:03:98:94:6b:
69:34:5b:ac:2d:9d:bb:20:00:7e:43:85:8f:4b:46:
f2:11:32:fe:52:31:a2:78:f3:d4:e9:c6:da:ff:6d:
a3:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E6:08:B8:45:9F:B8:BC:42:06:1E:92:73:32:A5:BF:32:DC:ED:1D
X509v3 Authority Key Identifier:
keyid:40:6B:B3:E2:CA:D7:B1:00:25:6E:1C:4A:7F:55:5B:6A:38:D8:75:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QGuz4srXsQAlbhxKf1VbajjYdSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QuYIuEWfuLxCBh6SczKlvzLc7R0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/8f0adf-663a-402b-b26c-cfc01c8ff9ed/1/QGuz4srXsQAlbhxKf1VbajjYdSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2001:67c:291c::/48
2001:67c:2d20::/48
Signature Algorithm: sha256WithRSAEncryption
a9:e3:42:a1:9c:c9:a7:9b:76:8a:52:d7:77:8e:14:b6:fb:83:
43:7e:ac:ee:68:26:0c:0f:65:2c:aa:b5:93:66:fd:55:89:4e:
b2:25:fa:da:7e:96:34:55:4d:88:6f:81:34:75:49:6d:b9:d9:
98:4d:81:bb:4c:66:5c:45:49:6c:26:44:ff:52:7d:0f:0b:22:
42:72:e4:2a:e1:c3:a7:59:b7:43:af:2f:30:77:72:f1:92:52:
d6:23:d8:f4:3f:07:82:0b:a6:67:59:6c:0e:64:11:77:cd:15:
4d:34:1a:4c:d3:4e:5a:f9:af:f6:4d:b3:e6:78:c3:8d:39:9e:
ae:f9:f1:cf:a8:de:f1:19:62:9d:2f:7e:87:7b:98:90:5e:03:
51:cd:e6:bd:0b:54:b0:e4:ee:61:e0:51:73:5f:60:09:5a:85:
1c:49:de:70:8a:96:fe:7a:05:82:78:f3:80:50:c9:54:03:f5:
55:18:cd:43:9c:ef:e6:b1:b0:81:3b:6d:59:8a:b4:79:13:7a:
5e:87:8a:3d:32:e5:b1:19:85:f7:be:54:ea:2f:5b:be:5d:a5:
47:e9:32:a9:3c:e4:df:49:f1:77:d0:d9:fd:e4:89:1f:1d:91:
0c:fa:4b:31:c1:ae:5e:39:19:6a:6c:30:f5:9e:5a:93:e4:02:
ee:07:91:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 06:42:29 2026 by rpki-client