Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/QceFKAB4kI1h3y2cqErIv8Hv4rw.roa
File: QceFKAB4kI1h3y2cqErIv8Hv4rw.roa (raw, json)
Hash identifier: UDlYs0IX2g9lgiSFVYGg7GDtdoJREyShW9ksWrzv5jY=
Subject key identifier: 41:C7:85:28:00:78:90:8D:61:DF:2D:9C:A8:4A:C8:BF:C1:EF:E2:BC
Certificate issuer: /CN=352ae33b11b36a319ba81347d852480d8e74c87d
Certificate serial: 01A0C7DE81871FCB69A088493FFE744DB759
Authority key identifier: 35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/QceFKAB4kI1h3y2cqErIv8Hv4rw.roa
Signing time: Tue 22 Sep 2026 06:47:23 +0000
ROA not before: Tue 22 Sep 2026 06:47:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210741
IP address blocks: 77.225.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c7:de:81:87:1f:cb:69:a0:88:49:3f:fe:74:4d:b7:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=352ae33b11b36a319ba81347d852480d8e74c87d
Validity
Not Before: Sep 22 06:47:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41c785280078908d61df2d9ca84ac8bfc1efe2bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:9c:82:9b:03:cc:51:d4:15:90:50:5f:98:aa:
d4:6a:72:d2:08:22:20:f9:77:09:96:de:f3:4f:a5:
64:14:82:cc:87:4a:93:74:90:b4:69:a8:02:a1:72:
bd:b6:39:21:cd:e2:27:19:c8:de:5c:43:a5:a3:0f:
44:dc:23:d4:35:95:5b:16:1e:7a:9e:78:2f:e6:c6:
ef:0e:06:a6:16:0e:de:43:47:83:52:5b:3a:fe:60:
c1:af:12:48:4c:6f:5b:99:e6:4f:a5:1d:49:73:23:
e7:3a:e4:44:21:9c:83:35:a9:31:9b:82:fc:24:7e:
17:0c:55:ae:71:22:a5:e4:78:cf:81:19:53:b1:d9:
2e:8f:35:4d:89:60:77:68:bf:22:79:fb:f1:83:6e:
45:5f:7e:27:43:bb:f8:a9:09:1a:2a:fb:e8:7e:f5:
ea:82:de:3f:bb:6c:f9:3f:76:5e:d3:ca:33:54:b7:
1f:4a:3f:c6:d6:83:42:46:d0:ea:1c:41:f5:68:04:
da:c1:f5:2d:b6:99:47:df:24:e8:37:e3:b6:82:69:
4b:1b:99:e7:19:d7:14:df:67:45:41:8f:47:89:bd:
3e:f4:20:9a:23:58:5e:7f:ca:4a:7b:8e:d0:9a:68:
37:04:5f:7a:4b:e0:de:d0:5e:d0:7a:41:43:b7:6e:
59:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:C7:85:28:00:78:90:8D:61:DF:2D:9C:A8:4A:C8:BF:C1:EF:E2:BC
X509v3 Authority Key Identifier:
keyid:35:2A:E3:3B:11:B3:6A:31:9B:A8:13:47:D8:52:48:0D:8E:74:C8:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NSrjOxGzajGbqBNH2FJIDY50yH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/QceFKAB4kI1h3y2cqErIv8Hv4rw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/c55ab0-ea22-4a19-8b33-25050c593aa1/1/NSrjOxGzajGbqBNH2FJIDY50yH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.225.201.0/24
Signature Algorithm: sha256WithRSAEncryption
0c:0e:ab:a1:fa:c1:40:92:c0:54:5d:00:e1:25:9b:2b:2d:cb:
af:a4:14:9f:c9:b2:a5:30:82:8f:8c:ee:60:8d:65:a2:27:04:
b8:e3:71:de:4b:52:52:e0:7d:da:0f:b2:4c:21:13:c6:6f:c0:
78:11:36:46:81:c4:47:0b:14:d0:01:aa:29:da:de:4e:f0:68:
ca:98:05:d6:bb:1f:e6:75:bd:94:13:f4:3e:17:9f:49:e7:17:
78:37:ff:9a:06:3b:ff:a8:b1:9a:4d:00:4b:07:ad:8b:dc:11:
42:dd:b6:b4:d9:2c:4f:12:9a:70:67:bc:b9:ca:13:ab:85:6a:
b8:71:f7:29:92:13:20:72:20:c7:69:40:be:c5:c5:96:a7:e7:
57:ce:92:b6:ab:3c:e7:16:8c:15:f9:5b:57:9b:65:93:0e:d5:
cf:55:0b:8a:2f:6d:41:9a:4f:d5:d5:84:b5:fc:f0:80:4c:0a:
80:0f:de:d4:76:28:cf:1d:09:d9:9c:44:1a:e1:58:77:ac:8a:
81:d9:74:5a:10:fb:6a:f7:68:99:05:30:45:bf:89:9b:97:b4:
e3:71:1a:6f:be:de:90:86:1c:95:4b:87:77:34:75:3c:6e:2d:
55:90:4e:7d:fd:a9:77:e7:db:74:e5:c3:1d:31:fc:91:3e:91:
37:23:d9:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 03:47:16 2026 by rpki-client