Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/QaJt0Pl9LdxriDUX5cGoaEI6qpk.roa
File: QaJt0Pl9LdxriDUX5cGoaEI6qpk.roa (raw, json)
Hash identifier: qYV4E2Opiwf3dYy0mFyFAXHeQGaGP28V9neJ4q7C4dM=
Subject key identifier: 41:A2:6D:D0:F9:7D:2D:DC:6B:88:35:17:E5:C1:A8:68:42:3A:AA:99
Certificate issuer: /CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Certificate serial: 019E3ABB0A624AA305AE2CEFE61A998C56A9
Authority key identifier: 0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/QaJt0Pl9LdxriDUX5cGoaEI6qpk.roa
Signing time: Mon 18 May 2026 10:56:36 +0000
ROA not before: Mon 18 May 2026 10:56:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200367
IP address blocks: 87.58.212.0/24 maxlen: 24
87.58.214.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.mft
rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:bb:0a:62:4a:a3:05:ae:2c:ef:e6:1a:99:8c:56:a9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d3558546a2c54bbd812a19228aa98e078d3aa68
Validity
Not Before: May 18 10:56:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41a26dd0f97d2ddc6b883517e5c1a868423aaa99
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:f9:e4:87:84:6b:13:18:f3:a5:eb:19:18:23:
a7:1e:f8:d9:08:d4:ac:5b:a9:39:7c:c7:2a:7f:88:
17:89:31:89:11:97:ca:47:77:d9:a2:8e:84:9b:00:
b3:72:1a:47:46:ce:0f:6e:3a:e8:52:0c:4a:41:39:
a3:44:df:31:ec:08:2d:db:b0:79:07:53:d4:54:d0:
87:c9:7f:40:2b:ef:01:50:07:f1:75:3a:65:90:aa:
17:dd:76:57:7e:27:1e:7a:e7:de:02:53:26:14:ff:
46:01:41:0c:d4:ec:60:f4:a7:19:aa:6d:16:0d:ed:
67:97:7e:62:29:0b:45:10:4b:57:08:89:0d:5c:6a:
23:cd:f2:0c:07:ac:18:17:e8:0c:24:a1:41:6d:a9:
83:62:d9:67:99:44:ab:d3:7f:51:42:dd:70:06:e7:
0e:f3:f2:cc:77:4d:b3:07:93:3c:e1:0c:5a:05:a6:
19:07:70:d7:68:35:03:7a:4a:f2:15:64:29:95:26:
9b:45:f8:60:40:30:66:f3:4d:00:75:a1:0c:b7:64:
46:03:e6:2e:7a:ef:38:41:1f:9d:b0:a3:2e:66:6b:
ef:8f:89:d4:65:7f:df:5b:89:79:c5:09:ac:1e:55:
5a:e4:5b:4b:8c:eb:b2:ef:e3:f3:e7:25:74:b7:ee:
81:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A2:6D:D0:F9:7D:2D:DC:6B:88:35:17:E5:C1:A8:68:42:3A:AA:99
X509v3 Authority Key Identifier:
keyid:0D:35:58:54:6A:2C:54:BB:D8:12:A1:92:28:AA:98:E0:78:D3:AA:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DTVYVGosVLvYEqGSKKqY4HjTqmg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/QaJt0Pl9LdxriDUX5cGoaEI6qpk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/474f27-b286-46f0-ae45-132ffc8bde46/1/DTVYVGosVLvYEqGSKKqY4HjTqmg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.58.212.0/24
87.58.214.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:58:a6:2e:f5:6f:2c:cf:fd:d0:fa:90:e5:82:87:16:1f:6f:
a8:be:05:08:31:cf:f2:5a:3b:61:0e:4d:44:e6:88:18:ae:80:
d7:ae:b7:d3:eb:f4:ec:46:40:e4:c7:8a:c2:1b:41:78:30:53:
a6:40:e3:71:48:2e:20:d3:74:3c:60:f8:f5:2b:73:1c:73:87:
96:46:ce:68:0b:2c:e9:cc:2f:73:89:05:fb:d0:62:a4:6e:81:
c8:85:77:34:36:01:fa:72:ff:53:e4:64:eb:58:bc:af:4f:2e:
9a:86:27:3d:05:b3:e9:2c:1c:38:2e:d6:a1:ef:bf:00:84:4a:
01:36:d9:ff:54:1e:32:72:6c:0d:4a:78:12:89:c6:21:80:32:
37:48:15:77:06:d9:f7:c9:08:05:79:8c:0e:cd:77:27:af:ed:
af:26:be:9c:1d:8f:d0:55:30:6c:44:0f:04:de:ec:66:e8:17:
57:f0:5e:89:ed:0c:24:a6:fd:02:0d:16:b6:ad:91:3e:6d:0d:
5d:d4:9d:d0:53:28:26:f1:9b:a8:5b:c1:8a:7d:00:b2:23:de:
6a:d3:69:6b:fc:bd:74:66:4f:b5:4f:3c:1f:77:c9:21:8e:ab:
e1:fc:9d:db:57:fb:0f:03:7c:52:8a:e8:6f:7d:d1:79:18:4c:
9d:e2:20:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 08:23:25 2026 by rpki-client