Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/QjGOkpGhnIHTjcyUOw5HqV889uo.roa
File: QjGOkpGhnIHTjcyUOw5HqV889uo.roa (raw, json)
Hash identifier: 3L8C74glFccswyHlfz0jSKhqaPXmi+TBnYkBkUnonkw=
Subject key identifier: 42:31:8E:92:91:A1:9C:81:D3:8D:CC:94:3B:0E:47:A9:5F:3C:F6:EA
Certificate issuer: /CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Certificate serial: 01A0908C4686E315E162BCACE1821E761767
Authority key identifier: FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/QjGOkpGhnIHTjcyUOw5HqV889uo.roa
Signing time: Fri 11 Sep 2026 12:58:27 +0000
ROA not before: Fri 11 Sep 2026 12:58:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212994
IP address blocks: 94.131.54.0/24 maxlen: 24
185.39.28.0/23 maxlen: 24
185.39.28.0/24 maxlen: 24
185.39.29.0/24 maxlen: 24
185.237.216.0/24 maxlen: 24
185.237.217.0/24 maxlen: 24
2a13:f9c0::/39 maxlen: 42
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Sep 2026 09:18:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:90:8c:46:86:e3:15:e1:62:bc:ac:e1:82:1e:76:17:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=faa6e5e86023c9b314ee651291fafe8c6dd69a83
Validity
Not Before: Sep 11 12:58:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42318e9291a19c81d38dcc943b0e47a95f3cf6ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a5:20:47:34:73:e1:a3:53:da:c7:6a:e6:8f:
3e:24:90:c9:17:93:c8:24:32:a5:d2:3d:e2:1d:4d:
37:22:e8:b1:14:6b:d9:cd:d9:ba:21:7b:3f:55:f6:
13:18:70:a2:b8:07:06:ae:9b:9d:40:59:2b:b4:b4:
5c:ca:74:a5:58:82:57:ea:d2:bc:9a:81:a2:ff:3d:
a0:68:b0:50:22:75:2d:9f:96:9a:f5:17:bb:c8:3a:
87:f3:42:6f:4a:c5:25:a6:b7:42:19:5e:86:1c:f3:
fd:3c:1f:ed:bf:88:c3:23:f4:4d:93:bc:53:fe:f5:
5b:a1:08:25:e1:e3:d4:54:86:72:6d:17:a4:01:16:
b3:88:32:b4:d0:08:ca:46:a3:12:30:21:e6:a7:aa:
66:f3:88:9c:4d:76:be:03:58:0a:50:12:f6:bb:3d:
d0:73:49:4b:63:de:dc:ae:53:ab:79:22:b8:0a:55:
a0:8f:f5:87:b4:c3:40:b2:94:a7:4d:ef:ad:c0:6c:
c7:6b:1f:3a:1e:03:c5:40:7e:7b:c7:4e:d9:6d:4b:
7a:ea:3f:4d:88:3c:0b:d3:97:76:2c:0c:2f:1e:bc:
e3:6e:8d:0b:95:5b:db:8a:f6:40:52:7c:8c:31:0d:
4e:49:04:2f:92:8a:1c:92:b6:6a:48:92:fe:7a:ed:
c5:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:31:8E:92:91:A1:9C:81:D3:8D:CC:94:3B:0E:47:A9:5F:3C:F6:EA
X509v3 Authority Key Identifier:
keyid:FA:A6:E5:E8:60:23:C9:B3:14:EE:65:12:91:FA:FE:8C:6D:D6:9A:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-qbl6GAjybMU7mUSkfr-jG3WmoM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/QjGOkpGhnIHTjcyUOw5HqV889uo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/c04d99-de44-40ab-a2c0-08279455f941/1/1-qbl6GAjybMU7mUSkfr-jG3WmoM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.131.54.0/24
185.39.28.0/23
185.237.216.0/23
IPv6:
2a13:f9c0::/39
Signature Algorithm: sha256WithRSAEncryption
a7:c6:ee:1a:41:a1:3a:4f:f5:a5:98:e9:fd:d9:e7:2e:54:fe:
38:60:f1:55:8f:38:cf:c7:cd:4f:4f:50:df:1c:76:f6:7b:d5:
51:4a:68:34:b6:e0:c6:d8:47:54:d3:50:3c:2f:96:0a:0b:e5:
e6:0b:76:c2:96:88:bd:d6:09:88:dd:8c:a0:fc:10:4c:29:d7:
3d:09:e6:5f:91:49:78:80:f4:2a:a0:72:cd:e3:a8:d3:6e:62:
45:71:66:67:fe:54:1e:53:2d:31:a4:d2:15:7b:68:7a:59:ab:
d8:8c:de:30:dc:c3:64:a3:bf:55:fa:e3:f1:8f:78:09:18:ce:
9f:0e:4e:cb:2c:7a:a4:a5:f5:29:03:75:5a:9d:63:d2:2e:12:
f7:76:67:37:98:be:85:e9:08:f3:71:09:14:1f:c8:9f:7a:d3:
39:86:2e:7c:6f:76:6d:bc:58:dc:fd:90:f8:be:6a:a8:ca:13:
3e:d1:16:dd:6b:ed:17:e2:92:24:34:10:04:fa:96:23:40:6f:
60:d4:c9:cc:62:9a:a6:ef:c2:ee:03:3e:bb:ee:f5:6b:cb:66:
e4:92:70:47:aa:83:78:6d:3f:a6:76:64:0f:bb:76:34:b9:43:
8d:c1:78:77:b3:1b:08:3f:48:56:6e:01:b7:9f:b3:94:9d:d5:
45:54:f2:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 26 16:19:16 2026 by rpki-client