Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/QR4YodsDb-1d8HgF5xaT5z8x0IE.roa
File: QR4YodsDb-1d8HgF5xaT5z8x0IE.roa (raw, json)
Hash identifier: QUKbNtKvN+L9mS7kCM4PhlSqShi8hD89JCMS4nPqjI4=
Subject key identifier: 41:1E:18:A1:DB:03:6F:ED:5D:F0:78:05:E7:16:93:E7:3F:31:D0:81
Certificate issuer: /CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Certificate serial: 01A1C49B5549F88F96ED29ACD9D2C355E79F
Authority key identifier: C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/QR4YodsDb-1d8HgF5xaT5z8x0IE.roa
Signing time: Tue 10 Nov 2026 08:37:56 +0000
ROA not before: Tue 10 Nov 2026 08:37:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 1136
IP address blocks: 185.36.40.0/24 maxlen: 24
185.36.41.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 07:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:c4:9b:55:49:f8:8f:96:ed:29:ac:d9:d2:c3:55:e7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c8a4bbd78af363fa5beee632e8bdc48b6297343c
Validity
Not Before: Nov 10 08:37:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=411e18a1db036fed5df07805e71693e73f31d081
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:1f:a2:bf:16:2c:06:31:2e:06:ba:45:f8:be:
f2:29:bf:51:07:f2:d7:29:cd:18:3f:c4:4f:d3:40:
81:2a:5e:c7:db:c8:bc:a4:01:71:55:f3:92:cf:f6:
0f:b5:12:a3:ca:e6:e9:a4:d9:d8:c4:55:b9:77:c3:
dc:b8:8f:f5:ac:20:7b:a1:bd:8c:e7:e8:ee:18:94:
82:ea:f0:1a:4e:e1:b5:78:1c:42:d4:f9:d2:46:32:
6d:97:5d:60:c8:62:2c:f9:a5:8f:b8:33:ce:97:bf:
cd:fd:c5:9f:bc:34:cb:9a:f6:53:d8:09:19:f0:39:
28:a5:ed:22:cf:95:d4:8d:62:ff:97:b6:05:d8:b7:
77:7e:f5:0e:83:58:99:ba:42:45:0f:70:e2:9e:4b:
a4:74:57:f7:ab:30:27:eb:e9:7d:c9:d3:5d:ba:61:
b5:47:73:1e:24:64:63:e1:f9:94:ff:b9:14:fd:0c:
59:76:fc:fc:22:68:bf:a5:03:dd:3d:be:9b:ed:fb:
67:a9:cb:b2:df:0e:4c:91:12:e8:15:a9:23:17:71:
7d:40:44:d3:70:ce:9f:d5:41:4f:66:1b:47:2e:24:
47:1f:d3:7d:8d:78:27:5b:4e:1a:1f:51:7a:c2:01:
8d:28:71:68:61:eb:08:26:57:3f:23:79:23:bf:66:
f9:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:1E:18:A1:DB:03:6F:ED:5D:F0:78:05:E7:16:93:E7:3F:31:D0:81
X509v3 Authority Key Identifier:
keyid:C8:A4:BB:D7:8A:F3:63:FA:5B:EE:E6:32:E8:BD:C4:8B:62:97:34:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yKS714rzY_pb7uYy6L3Ei2KXNDw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/QR4YodsDb-1d8HgF5xaT5z8x0IE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/246b4d-4d3e-4e02-8c07-ac68a50d0c99/1/yKS714rzY_pb7uYy6L3Ei2KXNDw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.36.40.0/23
Signature Algorithm: sha256WithRSAEncryption
8b:27:ea:56:66:63:01:3c:bb:71:d0:3a:53:0d:d1:e0:0b:a7:
54:b4:a3:ce:88:08:9a:c9:db:ce:8a:9b:b6:d1:b5:86:df:37:
3d:f1:6a:05:b9:db:82:f7:f5:87:86:35:98:29:8a:6d:b7:f9:
ba:8e:7a:68:a8:49:ab:12:17:85:b2:c3:23:81:d6:19:ae:17:
99:57:1d:73:83:8c:2e:85:8c:29:3f:05:48:82:40:4c:22:73:
36:6c:30:f6:0e:e2:70:a4:24:f3:54:8b:e8:70:fd:27:37:0c:
82:08:51:a3:42:21:53:16:92:99:39:73:5c:3a:e3:31:19:45:
ff:30:10:e8:72:c2:b2:71:c2:c1:74:98:9f:a9:38:32:e9:b8:
eb:c0:35:78:16:06:01:eb:72:69:fd:80:78:34:4f:90:90:55:
0c:1e:1a:a9:48:22:af:58:29:e8:97:49:b5:9f:05:80:2c:69:
d1:52:3f:17:f9:3e:c3:1a:45:61:d6:ab:3f:22:35:7e:57:55:
d8:d6:10:e9:7a:d3:da:31:c6:7a:d3:a1:9e:97:81:90:26:4b:
0f:07:e9:9a:ac:99:3f:cc:61:64:a9:1b:4e:a4:40:48:d0:85:
df:91:76:70:a8:d9:79:24:bd:14:63:6f:ea:cb:e2:09:47:de:
5c:69:d3:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 16:55:58 2026 by rpki-client