Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/QYcsqIEgS-bJ0dBchY5bciKUIv8.roa
File: QYcsqIEgS-bJ0dBchY5bciKUIv8.roa (raw, json)
Hash identifier: U7Mynn+sXKsTbSzkkZd8aGLNagZtvqMM5WNpk+1IFKo=
Subject key identifier: 41:87:2C:A8:81:20:4B:E6:C9:D1:D0:5C:85:8E:5B:72:22:94:22:FF
Certificate issuer: /CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Certificate serial: 019DF24211D7CCDB9B8507F2C469726E4E80
Authority key identifier: 1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/QYcsqIEgS-bJ0dBchY5bciKUIv8.roa
Signing time: Mon 04 May 2026 09:11:49 +0000
ROA not before: Mon 04 May 2026 09:11:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152586
IP address blocks: 2.58.200.0/24 maxlen: 24
2.58.201.0/24 maxlen: 24
2.58.202.0/24 maxlen: 24
45.11.230.0/23 maxlen: 23
45.11.230.0/24 maxlen: 24
45.11.231.0/24 maxlen: 24
45.67.84.0/24 maxlen: 24
45.67.87.0/24 maxlen: 24
45.134.111.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.mft
rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 16:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f2:42:11:d7:cc:db:9b:85:07:f2:c4:69:72:6e:4e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b0415bfc43b38e9cfd1a12995202e8763752fde
Validity
Not Before: May 4 09:11:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41872ca881204be6c9d1d05c858e5b72229422ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ee:59:d8:23:00:47:16:c1:a5:d9:35:ef:0c:36:
e7:37:2c:a3:31:75:53:6d:5b:74:16:d4:2f:8c:56:
27:a4:02:c6:cc:af:88:cd:66:50:d4:45:d7:0b:6b:
81:ef:fe:2c:0a:ad:11:75:92:fa:1f:00:fa:35:f4:
fd:d5:18:57:22:4f:f2:7d:91:70:3b:35:ca:70:bc:
e2:9e:fa:74:7b:54:63:1c:07:63:c2:4a:eb:72:d3:
7f:d0:83:8f:c0:20:b9:39:01:8c:60:4f:8b:a6:d8:
d0:51:a7:5d:cc:6f:9d:8f:86:6f:f1:0b:c7:9b:d3:
0a:0d:a2:48:71:96:97:0e:4d:16:e6:87:0f:71:9b:
91:b4:ad:b7:b4:d8:5e:9e:c1:0b:93:12:9f:97:4d:
b5:9e:d9:c1:ab:ea:64:37:ee:18:26:3b:ef:fb:c1:
4c:84:a5:76:c6:0c:40:cb:67:9a:8f:18:e2:8d:09:
71:38:12:4c:ed:e8:78:4f:34:7c:29:b0:52:5a:4e:
ba:5e:98:37:42:e0:de:e9:76:c3:7f:98:57:07:b1:
d0:d8:6f:5a:97:37:4b:ae:6c:fa:36:cb:0a:76:7c:
b7:30:f9:47:8a:42:9d:de:ca:51:8a:5c:50:f9:32:
04:f8:d4:84:61:79:c7:df:08:49:34:19:d6:99:63:
9a:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:87:2C:A8:81:20:4B:E6:C9:D1:D0:5C:85:8E:5B:72:22:94:22:FF
X509v3 Authority Key Identifier:
keyid:1B:04:15:BF:C4:3B:38:E9:CF:D1:A1:29:95:20:2E:87:63:75:2F:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GwQVv8Q7OOnP0aEplSAuh2N1L94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/QYcsqIEgS-bJ0dBchY5bciKUIv8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/094081-8aeb-42bf-a578-a3ca0db83254/1/GwQVv8Q7OOnP0aEplSAuh2N1L94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.58.200.0-2.58.202.255
45.11.230.0/23
45.67.84.0/24
45.67.87.0/24
45.134.111.0/24
Signature Algorithm: sha256WithRSAEncryption
16:30:ae:60:24:2f:db:7b:01:28:ae:af:19:47:68:38:4e:ed:
44:c1:14:9a:ce:e0:38:c2:c7:73:46:45:fe:e2:63:96:f2:56:
d6:ec:de:9e:85:79:c3:3b:67:2a:1a:c3:12:01:05:1e:9d:c5:
5c:af:6b:06:40:ed:db:f4:9a:65:7f:bc:59:7e:1f:5d:11:63:
99:42:53:26:df:e3:f5:71:55:e3:92:ff:57:74:68:ff:d9:f2:
3b:ac:d4:98:05:cb:b0:52:72:e3:2c:13:b6:e5:a8:67:9e:1d:
cc:97:26:b2:b6:ab:57:f1:ab:d8:42:69:42:cd:cb:84:af:ea:
40:9a:0d:c6:40:80:49:6c:c9:c2:f9:c3:d5:db:fa:4e:44:5b:
d3:ce:51:02:69:4e:f2:89:0d:ec:27:6a:9e:d8:02:78:31:0b:
bf:c3:55:6b:7a:a7:8b:67:e0:9f:92:c2:e4:12:41:cd:83:23:
69:63:08:04:63:2e:99:de:0a:53:3a:5d:6a:5c:6b:e8:f2:19:
de:1e:70:75:b0:71:47:5f:d0:c9:8d:eb:a6:57:01:37:81:f5:
56:a7:07:67:da:32:79:e2:df:fd:5e:91:e7:8d:7c:8a:63:68:
1d:9c:96:33:29:b1:4c:7a:d3:3e:15:32:09:27:7c:10:b7:61:
50:f6:62:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:34:42 2026 by rpki-client