Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/QCih5l8ms9ZT9yQSt5C9uapsYYM.roa
File: QCih5l8ms9ZT9yQSt5C9uapsYYM.roa (raw, json)
Hash identifier: /QPJzCsQ+24ZR6+p5oNE2OgeX+eucsMYEmdpUXhs184=
Subject key identifier: 40:28:A1:E6:5F:26:B3:D6:53:F7:24:12:B7:90:BD:B9:AA:6C:61:83
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 019ECF8581A549BFFAE813103A1A625CCC4B
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/QCih5l8ms9ZT9yQSt5C9uapsYYM.roa
Signing time: Tue 16 Jun 2026 08:21:33 +0000
ROA not before: Tue 16 Jun 2026 08:21:33 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211902
IP address blocks: 217.130.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 05:01:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:cf:85:81:a5:49:bf:fa:e8:13:10:3a:1a:62:5c:cc:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Jun 16 08:21:33 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4028a1e65f26b3d653f72412b790bdb9aa6c6183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:07:b2:24:1c:2e:b4:88:b4:49:33:b4:b4:ca:
0c:a4:0c:cf:46:ad:6e:d6:c2:7b:c6:88:bf:ae:fb:
6f:51:df:d8:32:97:5c:2a:f4:b0:2e:d4:78:b4:47:
03:a1:0e:9d:07:52:49:eb:d3:58:79:00:a8:32:0e:
c2:00:1a:e3:0d:75:46:06:bb:aa:03:45:52:a8:4a:
ff:ff:3c:f6:cc:8c:35:b2:7c:cc:94:7c:b0:8e:0e:
8f:b0:cf:f6:ec:14:d9:09:76:2d:9e:b4:d2:c7:7c:
eb:30:0f:18:dc:43:ec:d7:e5:52:d7:42:dd:e6:63:
bc:81:01:19:86:b8:24:04:93:c5:82:89:d5:5d:8d:
08:95:58:93:ec:ad:e4:4e:9a:bd:e7:0c:b8:d3:3b:
66:e2:4b:69:46:98:66:96:f5:a2:e6:ab:d0:79:e4:
49:af:6f:63:e2:ca:ee:d0:cb:ba:0a:9a:13:3a:24:
5a:b7:1e:bb:71:42:93:da:66:04:22:0e:c8:7f:b2:
a3:05:ef:75:11:36:cb:38:60:31:75:e9:fe:55:14:
cc:1c:21:df:b6:59:b6:1c:4b:4f:92:b5:57:0a:7b:
2e:2c:62:ba:ea:57:ba:8b:94:2b:9b:59:ff:11:6f:
5a:ad:2b:a5:7d:38:d2:7e:24:00:9b:94:53:8d:f6:
1c:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:28:A1:E6:5F:26:B3:D6:53:F7:24:12:B7:90:BD:B9:AA:6C:61:83
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/QCih5l8ms9ZT9yQSt5C9uapsYYM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.130.114.0/24
Signature Algorithm: sha256WithRSAEncryption
04:d5:a9:c9:d7:d8:4e:82:61:b3:44:fb:02:9f:d1:e0:20:7a:
ef:e1:ea:88:dc:98:79:85:a1:df:27:13:6e:4f:4c:1f:8a:a0:
84:83:a1:df:de:fb:a9:70:ef:3f:98:23:a4:c3:64:82:8b:33:
62:b2:6f:b4:fd:c7:87:b3:29:b7:5f:91:e0:08:48:5e:8b:78:
1f:48:1f:50:55:ec:a7:c9:e2:b2:b9:72:5c:91:ce:2a:f5:cc:
8c:09:a4:95:bb:86:80:71:4f:1b:18:82:fe:a7:dc:58:31:b4:
21:1e:e9:ba:bc:d1:db:3a:23:9c:14:04:3c:34:d1:64:10:c1:
cc:3d:a4:0b:25:5e:4a:14:a2:a4:d0:93:eb:75:21:ca:90:95:
a9:e3:ef:d8:93:5a:40:d8:b8:38:38:ab:f1:9f:5f:2b:1c:cb:
6f:9a:1f:69:6d:4d:6b:3e:74:39:34:60:59:3f:13:12:8c:db:
0b:10:7d:43:12:eb:aa:5a:11:a6:15:eb:10:5c:73:5e:c6:68:
80:c9:1c:2a:04:be:36:8a:9c:59:14:0d:57:52:5b:1e:60:2d:
c9:c5:ef:09:1a:ef:c7:67:37:75:48:45:f6:91:5d:1c:e9:4d:
b5:55:06:4c:32:c0:b3:16:df:8f:8f:48:c8:6e:c1:f0:7c:75:
65:68:df:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 13:45:41 2026 by rpki-client