Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/QBDeh8-FvDO0AkQLiktV9k-NtVM.roa
File: QBDeh8-FvDO0AkQLiktV9k-NtVM.roa (raw, json)
Hash identifier: tI3DlxFpE7QxnE4bKmU+VTwjoA3hd05ITjU2EuSCJxc=
Subject key identifier: 40:10:DE:87:CF:85:BC:33:B4:02:44:0B:8A:4B:55:F6:4F:8D:B5:53
Certificate issuer: /CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea
Certificate serial: 019BDBD276A3DCC9377BB6FA1B182562CC8B
Authority key identifier: ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/QBDeh8-FvDO0AkQLiktV9k-NtVM.roa
Signing time: Tue 20 Jan 2026 14:32:41 +0000
ROA not before: Tue 20 Jan 2026 14:32:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203860
IP address blocks: 158.94.174.0/24 maxlen: 24
2001:67c:a0::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.mft
rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:db:d2:76:a3:dc:c9:37:7b:b6:fa:1b:18:25:62:cc:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ed21a3f312a49f3e9d8c6c44c9de133a9ed877ea
Validity
Not Before: Jan 20 14:32:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4010de87cf85bc33b402440b8a4b55f64f8db553
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:77:81:84:54:f4:87:06:57:e5:d0:f0:b5:3a:
b5:48:74:a6:12:7f:69:ba:26:dc:ee:55:fe:ca:64:
70:35:10:d5:e7:cd:fb:62:80:ed:6e:71:e4:b2:0d:
65:d1:b5:88:86:29:67:50:2e:22:0d:94:71:01:93:
5d:a9:22:41:6a:50:89:96:7e:e3:1b:0d:1e:4a:71:
a2:61:09:72:ca:62:a4:1b:2e:22:80:de:fd:9c:8a:
6f:5b:1e:3d:e0:f4:b2:a3:56:61:b7:59:bd:7c:da:
74:af:46:90:76:fc:b3:6b:97:ee:b6:be:73:58:37:
4b:e8:80:fa:e6:6d:ff:e3:0d:55:bd:ff:89:5c:5b:
2b:7a:b9:a1:f4:f2:55:42:49:ae:e9:f9:0e:3c:75:
01:12:71:62:d6:79:9c:70:42:b9:a9:42:94:43:a3:
65:d9:14:df:f4:be:4f:8a:9f:34:79:c0:35:aa:c1:
fb:b1:7e:1a:04:f4:2a:c1:5c:5b:2a:33:05:6f:d8:
94:32:fc:08:dd:2c:ad:85:23:65:2a:bb:5a:eb:45:
dd:fe:e4:b4:d0:63:8b:69:15:34:ec:62:92:4e:fb:
fc:35:7b:ba:51:98:84:81:33:ea:e8:fa:4e:41:09:
45:61:db:22:a1:f7:98:7c:d3:3a:f9:73:a4:02:42:
5b:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:10:DE:87:CF:85:BC:33:B4:02:44:0B:8A:4B:55:F6:4F:8D:B5:53
X509v3 Authority Key Identifier:
keyid:ED:21:A3:F3:12:A4:9F:3E:9D:8C:6C:44:C9:DE:13:3A:9E:D8:77:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7SGj8xKknz6djGxEyd4TOp7Yd-o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/QBDeh8-FvDO0AkQLiktV9k-NtVM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/cb350a-7f74-4a6b-ba57-df134f2a2e6c/1/7SGj8xKknz6djGxEyd4TOp7Yd-o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.174.0/24
IPv6:
2001:67c:a0::/48
Signature Algorithm: sha256WithRSAEncryption
92:18:a8:8a:65:ef:01:4e:78:00:e5:68:85:07:2e:fd:8c:21:
43:3b:1f:b8:17:f6:1a:d9:3b:51:0f:2d:80:ea:05:dc:45:ab:
ab:70:50:b5:37:7e:2b:2b:94:32:fd:d4:69:4e:28:51:a7:e8:
97:8b:96:2a:ed:85:b9:a7:15:a1:ca:45:b6:1d:4a:b4:ea:78:
49:97:2c:6a:3a:41:f5:aa:c2:09:12:17:1d:c1:5a:1d:fa:77:
4f:6b:04:e6:26:95:dd:f8:19:38:0d:79:e7:a6:23:95:94:8c:
ec:a4:47:f1:65:80:8c:ca:fd:13:b6:76:9e:59:1f:3b:79:a2:
2e:fc:1e:2f:e0:07:fc:7f:52:b5:49:d0:2a:7e:63:a5:ce:44:
e0:b8:07:0c:1a:ea:8b:3a:d9:48:81:7a:50:db:49:2b:d5:0c:
1f:0d:69:51:69:cc:ad:c4:ad:1b:3b:2b:8b:9e:9e:e2:db:a0:
6f:04:62:19:04:bb:73:60:b0:f4:78:46:96:80:18:b7:74:c9:
0f:a7:ba:98:75:7a:f4:23:46:e4:e1:37:94:9b:ff:9a:43:76:
f3:6b:be:e5:45:c4:95:11:8f:8b:4b:7d:a1:5e:fe:0d:93:eb:
f4:0c:ee:4e:92:02:e7:fb:58:3b:02:f6:8b:86:31:0f:3b:c6:
99:92:33:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 19:06:32 2026 by rpki-client