Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/QSxz1MJOKVPcnOAb056M9bNuEpY.roa
File: QSxz1MJOKVPcnOAb056M9bNuEpY.roa (raw, json)
Hash identifier: ACtE1+dO+kmAK+SFZkqW3ICcwAl9l/2TWZxLXdg3uWE=
Subject key identifier: 41:2C:73:D4:C2:4E:29:53:DC:9C:E0:1B:D3:9E:8C:F5:B3:6E:12:96
Certificate issuer: /CN=deceda98c164c705cc46a8bab74510164a4e5443
Certificate serial: 019F2368B62CA0FC96CC55C1C8E374CB9782
Authority key identifier: DE:CE:DA:98:C1:64:C7:05:CC:46:A8:BA:B7:45:10:16:4A:4E:54:43
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3s7amMFkxwXMRqi6t0UQFkpOVEM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/QSxz1MJOKVPcnOAb056M9bNuEpY.roa
Signing time: Thu 02 Jul 2026 15:18:12 +0000
ROA not before: Thu 02 Jul 2026 15:18:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25210
IP address blocks: 212.82.217.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.mft
rsync://rpki.ripe.net/repository/DEFAULT/3s7amMFkxwXMRqi6t0UQFkpOVEM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:b6:2c:a0:fc:96:cc:55:c1:c8:e3:74:cb:97:82
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=deceda98c164c705cc46a8bab74510164a4e5443
Validity
Not Before: Jul 2 15:18:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=412c73d4c24e2953dc9ce01bd39e8cf5b36e1296
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:d3:f9:ac:bf:72:1b:28:19:1f:2b:d4:f1:fd:
b2:6b:ea:45:47:7d:a9:f4:e3:ca:a6:2d:46:a5:9b:
06:da:2a:a8:08:4d:f6:91:db:d7:91:e7:ad:ca:11:
3e:4b:5c:47:5a:07:4f:ad:09:29:b4:bb:d6:a2:da:
3f:93:b2:f2:cf:2a:a9:03:df:01:8d:54:09:bb:e7:
79:11:0c:79:83:e6:83:4b:5b:47:99:73:e8:70:04:
2b:88:b5:14:b2:50:71:d5:1a:72:77:87:78:43:24:
58:b8:c2:2c:04:61:ad:69:09:b8:bd:94:7e:d2:9c:
f3:38:21:fa:97:4f:c1:79:50:34:20:88:60:6c:fd:
be:5b:1e:a8:63:04:e9:7a:94:db:05:cd:cb:04:dd:
1d:85:43:6b:fc:f7:3b:3a:8b:eb:29:c0:bf:5a:54:
cb:85:f9:39:83:f9:6b:a7:e4:4d:0c:83:1d:18:7c:
e6:7c:d0:25:cb:4d:8c:8e:06:70:c8:d9:7d:ef:ec:
2f:a2:13:c7:72:ee:81:b6:7e:fd:9b:14:f4:09:58:
08:44:f3:1b:88:ed:82:25:2d:a1:d6:54:bd:61:ca:
1d:b7:e9:4f:9e:82:12:7b:7f:37:56:8a:a3:73:45:
2a:da:6d:c8:0e:25:52:ed:18:37:43:e4:b0:e8:56:
19:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:2C:73:D4:C2:4E:29:53:DC:9C:E0:1B:D3:9E:8C:F5:B3:6E:12:96
X509v3 Authority Key Identifier:
keyid:DE:CE:DA:98:C1:64:C7:05:CC:46:A8:BA:B7:45:10:16:4A:4E:54:43
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3s7amMFkxwXMRqi6t0UQFkpOVEM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/QSxz1MJOKVPcnOAb056M9bNuEpY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/eaf81d-a9df-4a6a-b610-de05c54045bb/1/3s7amMFkxwXMRqi6t0UQFkpOVEM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.82.217.0/24
Signature Algorithm: sha256WithRSAEncryption
14:12:a5:4b:25:96:a1:95:9a:fe:fc:6c:f6:45:46:04:20:a1:
f5:90:30:1c:38:1f:1b:31:51:ce:25:89:d9:0a:23:7f:5d:c0:
74:0c:ce:88:fb:1a:0d:8a:e5:b9:7a:16:7a:fc:3b:37:3b:54:
72:40:62:92:c5:a3:2b:cd:24:93:d0:b4:c0:84:c8:22:1f:74:
cf:03:00:e8:1b:27:8f:5e:7f:77:d2:28:e0:d0:af:68:c1:21:
b0:66:d7:02:69:75:80:b4:05:bc:b2:c9:fb:cb:91:3b:7a:a4:
b6:c2:ec:38:0e:7e:34:d0:a9:77:1a:42:7a:06:49:83:5e:ab:
ee:9e:89:95:ab:1a:10:8c:35:b5:6c:c2:dd:22:31:2a:d6:16:
b5:e2:83:b1:9e:f5:f0:a8:e8:16:14:c3:bc:f3:5b:cd:d9:b7:
5a:00:71:b7:7b:c3:d6:25:43:cc:41:64:50:ea:7f:52:15:e0:
5a:7c:51:38:e4:03:7b:b9:da:63:6a:0b:9d:ee:91:44:7c:cd:
07:e4:d9:85:98:01:aa:ef:30:82:60:63:4d:40:7c:ea:f0:b1:
50:4f:07:fa:07:3f:09:54:6c:f9:47:9b:b2:2e:8a:98:d5:81:
56:a4:2a:5f:d0:6f:c9:f6:29:47:b5:08:89:42:10:d4:b2:82:
bd:70:29:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 22:46:31 2026 by rpki-client