Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/QL2RZ2Q7sMvqAmtDAtbRFFttDqQ.roa
File: QL2RZ2Q7sMvqAmtDAtbRFFttDqQ.roa (raw, json)
Hash identifier: 4wHUxK0fzTcnu97RI6Dg3YXNgmexEtc/7w7Ys0gTVow=
Subject key identifier: 40:BD:91:67:64:3B:B0:CB:EA:02:6B:43:02:D6:D1:14:5B:6D:0E:A4
Certificate issuer: /CN=0cd0969e49c9ae7ca5e8f384e1912fc736aec31d
Certificate serial: 019F236920C9635FA973F8DC97A6A8F248B2
Authority key identifier: 0C:D0:96:9E:49:C9:AE:7C:A5:E8:F3:84:E1:91:2F:C7:36:AE:C3:1D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DNCWnknJrnyl6POE4ZEvxzauwx0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/QL2RZ2Q7sMvqAmtDAtbRFFttDqQ.roa
Signing time: Thu 02 Jul 2026 15:18:39 +0000
ROA not before: Thu 02 Jul 2026 15:18:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207151
IP address blocks: 185.165.64.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.mft
rsync://rpki.ripe.net/repository/DEFAULT/DNCWnknJrnyl6POE4ZEvxzauwx0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:20:c9:63:5f:a9:73:f8:dc:97:a6:a8:f2:48:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0cd0969e49c9ae7ca5e8f384e1912fc736aec31d
Validity
Not Before: Jul 2 15:18:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40bd9167643bb0cbea026b4302d6d1145b6d0ea4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:ab:0a:aa:4f:c7:a5:58:66:62:f6:03:a2:1f:
35:5a:e7:1d:8b:1c:66:01:d5:ab:0c:33:ee:36:bb:
ee:0a:32:2f:8a:6c:f3:b5:f0:9b:ca:51:75:84:02:
60:0b:e6:5b:ea:7e:8e:69:b6:54:e3:3e:05:36:fd:
c1:42:73:c0:b8:75:39:65:57:ce:19:14:74:f8:a4:
ab:56:12:6b:9b:ee:96:1f:7b:c5:71:4a:c5:72:eb:
1c:34:12:36:80:0b:36:67:6c:53:55:a3:e0:c3:71:
c0:57:f5:77:86:19:72:70:e4:11:5f:e7:39:0e:46:
ee:b4:96:13:70:14:82:12:0f:47:b4:4b:74:ff:d8:
ea:7c:63:16:35:4f:2f:a3:d6:4a:07:fa:9e:f7:c5:
93:c7:78:2f:28:05:97:cf:04:66:4e:bc:18:cf:e2:
19:f7:5c:a6:42:cf:f6:f0:af:b3:7f:28:81:1b:4a:
d7:22:36:da:52:36:40:a3:ef:49:53:ea:ce:94:72:
f4:ac:99:ac:b1:59:a9:f0:0c:74:dc:27:fe:0a:42:
48:0b:bc:71:2b:e8:f7:a8:bd:89:0f:02:4d:16:bb:
60:0d:85:13:24:c9:d3:05:94:a0:25:76:0a:ff:e6:
52:98:ad:9f:4e:96:8a:70:38:b1:17:43:0c:bb:c6:
b1:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:BD:91:67:64:3B:B0:CB:EA:02:6B:43:02:D6:D1:14:5B:6D:0E:A4
X509v3 Authority Key Identifier:
keyid:0C:D0:96:9E:49:C9:AE:7C:A5:E8:F3:84:E1:91:2F:C7:36:AE:C3:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DNCWnknJrnyl6POE4ZEvxzauwx0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/QL2RZ2Q7sMvqAmtDAtbRFFttDqQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/771e77-c649-47f3-99a8-dbfac00fb0ef/1/DNCWnknJrnyl6POE4ZEvxzauwx0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.165.64.0/22
Signature Algorithm: sha256WithRSAEncryption
1b:2b:c6:5a:46:38:12:21:68:c2:d8:77:42:c5:c1:84:5b:7d:
e4:e1:db:17:cf:15:a2:f4:e8:e6:88:15:9e:7c:0b:4f:30:bb:
f2:13:ae:6b:fd:37:d6:ce:2f:2c:3a:3e:35:8b:9c:bc:2e:f7:
16:87:ed:c9:c6:9f:52:24:f1:2e:5b:84:70:f9:e2:fc:68:9d:
37:ee:d1:28:22:ed:68:ad:db:61:c6:b7:45:c7:06:ff:2d:4f:
f0:62:ce:1f:ee:37:3e:f0:8a:2e:dc:94:d4:0d:9c:16:18:73:
62:90:0d:05:a2:ae:1b:03:b5:11:61:b0:02:a6:7b:f3:1d:26:
ed:37:ae:89:3b:a3:1b:5c:a9:1a:ef:32:bf:29:02:54:c5:df:
f8:e8:99:85:43:33:02:a3:1d:f0:78:1c:60:f5:89:5b:f1:3f:
c1:05:dd:bc:41:94:6c:fc:7a:3f:06:df:d6:df:85:92:14:25:
39:7f:04:9e:5c:68:58:db:c2:3c:67:d8:ae:3a:2a:8d:16:16:
37:ff:ca:14:e9:ec:81:22:27:28:cb:d4:f5:12:8c:ed:a7:77:
29:7a:e6:4b:31:d3:1d:58:22:3e:14:3b:38:70:a7:e5:6e:61:
44:97:7c:42:5a:2d:0f:69:ed:90:ae:95:0e:2d:0c:81:00:fd:
fe:d1:93:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 22:24:01 2026 by rpki-client