Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/QdCCFy0Che3zQ-ePH2OEt46GxG8.roa
File: QdCCFy0Che3zQ-ePH2OEt46GxG8.roa (raw, json)
Hash identifier: uUeKh+S8JSSLHm2QW0yzdqWBVQgBt2ppseQ+0eEMG+I=
Subject key identifier: 41:D0:82:17:2D:02:85:ED:F3:43:E7:8F:1F:63:84:B7:8E:86:C4:6F
Certificate issuer: /CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Certificate serial: 019F18173F0DEF5A28274C26DAD71D5FADA6
Authority key identifier: A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/QdCCFy0Che3zQ-ePH2OEt46GxG8.roa
Signing time: Tue 30 Jun 2026 10:33:24 +0000
ROA not before: Tue 30 Jun 2026 10:33:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209361
IP address blocks: 185.234.116.0/24 maxlen: 24
185.234.117.0/24 maxlen: 24
185.234.118.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:18:17:3f:0d:ef:5a:28:27:4c:26:da:d7:1d:5f:ad:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2cbe9aba1ff7564d913ed78672e3371b7f35824
Validity
Not Before: Jun 30 10:33:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41d082172d0285edf343e78f1f6384b78e86c46f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:5f:51:47:f1:32:66:24:9c:e0:db:29:ae:60:
56:8c:a3:23:c4:eb:0c:4f:b6:f1:bf:a9:57:c5:d0:
69:3a:03:8b:31:8c:ff:fd:f1:23:49:0d:b8:08:7b:
11:4b:20:26:63:55:eb:54:8f:4b:2a:15:b4:62:84:
92:82:b5:fa:14:76:c4:bc:c0:4e:a6:bc:4e:a0:b5:
c8:41:fc:5f:97:a9:c5:8e:9a:e3:f9:9d:55:73:4d:
4e:fb:2a:3b:5a:53:85:86:73:07:7d:98:b8:bd:0c:
d6:7d:cc:73:84:90:b1:80:07:a6:75:45:38:91:1b:
2d:fc:6e:1a:7e:7a:43:80:16:42:61:3a:dc:d7:fe:
7a:04:e7:b0:e1:d5:05:06:e0:fc:5c:f5:d7:db:ab:
b4:c7:d1:90:65:84:7f:40:ec:d5:8e:ba:47:ea:03:
b8:60:9d:a1:4f:ff:d7:51:72:c4:cd:a0:3d:dc:8c:
a1:e0:91:0f:33:4e:88:d3:8a:c7:ce:85:4e:09:8b:
13:ba:56:24:2d:e7:e2:fd:a7:7c:91:63:8d:45:05:
87:8b:af:11:28:21:34:9f:99:7a:61:d4:7f:67:5e:
ab:1e:94:bb:bc:82:d6:6b:59:f3:f9:63:b6:38:96:
3e:53:a7:00:23:0d:1e:cb:77:70:31:78:56:d2:ae:
72:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D0:82:17:2D:02:85:ED:F3:43:E7:8F:1F:63:84:B7:8E:86:C4:6F
X509v3 Authority Key Identifier:
keyid:A2:CB:E9:AB:A1:FF:75:64:D9:13:ED:78:67:2E:33:71:B7:F3:58:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/osvpq6H_dWTZE-14Zy4zcbfzWCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/QdCCFy0Che3zQ-ePH2OEt46GxG8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/408e83-530d-4462-b1c9-df324c4c6eed/1/osvpq6H_dWTZE-14Zy4zcbfzWCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.234.116.0-185.234.118.255
Signature Algorithm: sha256WithRSAEncryption
4e:f5:82:42:33:d6:ac:c6:dd:22:7c:28:9b:0d:d4:35:69:b1:
2e:66:b6:98:3f:3e:f4:e2:65:0f:e0:9b:33:f4:d6:8f:44:f0:
33:34:27:fc:2b:64:8c:65:45:f3:8c:c1:09:8a:57:0a:c2:82:
e7:6e:82:31:95:3e:58:a3:ce:ea:d1:91:b2:25:50:4f:03:36:
93:24:2a:0b:fe:49:a2:5e:39:24:f1:55:d4:bd:70:75:7f:65:
73:b6:ba:82:67:43:80:4d:f3:fd:33:a3:55:b6:4e:48:8f:05:
28:51:6b:4b:8c:88:e7:2a:15:69:9b:72:8f:c1:d1:67:18:50:
38:33:03:63:52:f2:82:6d:0b:b2:37:21:6d:b8:cc:2d:73:68:
1e:7b:73:da:db:4f:48:94:ad:ad:bd:0e:a6:47:4a:79:69:56:
46:44:f4:62:59:61:84:31:a3:6f:0d:dc:2b:bb:5c:a1:09:c1:
05:74:77:f4:a2:da:2e:90:3b:56:53:3f:68:fc:50:ec:75:9e:
33:8e:f4:55:de:f1:13:72:4a:35:66:59:c2:49:38:d4:ae:ef:
12:37:25:c6:11:8c:c1:f2:18:ca:08:27:67:a6:ee:22:47:e0:
e6:32:80:1a:23:5a:92:22:95:58:36:42:29:c5:a4:f2:59:11:
a4:35:f9:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:05:44 2026 by rpki-client