Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/_QiQmroF9P3WbIwXaXOwVu2gju0.roa
File: _QiQmroF9P3WbIwXaXOwVu2gju0.roa (raw, json)
Hash identifier: 9+ii97HZuPAGD+TGVcgVZZlv5SLZbzjKViVe7ESoXRc=
Subject key identifier: FD:08:90:9A:BA:05:F4:FD:D6:6C:8C:17:69:73:B0:56:ED:A0:8E:ED
Certificate issuer: /CN=41b888cec06f8aa59becccc7b3a97018abb73d0b
Certificate serial: 019F2368BC6427EC103D81FE131F7AFED30B
Authority key identifier: 41:B8:88:CE:C0:6F:8A:A5:9B:EC:CC:C7:B3:A9:70:18:AB:B7:3D:0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/_QiQmroF9P3WbIwXaXOwVu2gju0.roa
Signing time: Thu 02 Jul 2026 15:18:14 +0000
ROA not before: Thu 02 Jul 2026 15:18:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 176.119.194.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bc:64:27:ec:10:3d:81:fe:13:1f:7a:fe:d3:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=41b888cec06f8aa59becccc7b3a97018abb73d0b
Validity
Not Before: Jul 2 15:18:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd08909aba05f4fdd66c8c176973b056eda08eed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:0e:c4:15:99:2a:c3:1a:d7:d3:e1:3a:46:7c:
60:7f:bd:30:7d:dd:16:39:fc:21:0f:bf:27:f6:2d:
c6:1a:19:e6:c6:95:81:73:9f:0c:7a:ed:e8:e8:8c:
b9:e0:62:03:4d:95:2a:50:12:14:dc:e3:17:e3:51:
5a:99:93:d7:22:82:29:43:b1:be:50:f3:40:91:5a:
3d:17:8d:9d:bc:fd:38:b5:af:d4:52:6a:48:f7:0a:
b9:08:eb:9e:d8:05:f3:6f:6c:73:41:16:48:fb:64:
3d:4e:07:63:70:44:27:e9:b1:b0:02:d8:12:36:97:
29:7a:f6:f1:34:39:cc:39:80:94:5b:a8:9b:f0:1b:
7c:44:cf:0b:85:77:a7:c9:43:e9:68:c8:26:ca:11:
c2:93:64:c0:6e:88:f0:05:0c:f1:fa:a7:84:35:f6:
f6:b3:3f:33:d0:5f:b7:c4:5f:c8:64:6a:fc:94:fd:
2f:bb:db:19:f9:9b:ad:f7:4a:ad:19:08:8f:71:56:
90:44:09:c9:49:e6:fb:f7:35:ea:8f:e8:08:d2:bf:
86:c8:67:89:e3:0a:b3:97:4c:98:2e:60:59:4d:45:
43:5a:99:76:ee:7a:da:cb:4a:4c:3a:36:25:2c:a2:
5d:a1:86:db:d5:1a:da:87:d1:ab:62:04:83:bb:df:
46:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:08:90:9A:BA:05:F4:FD:D6:6C:8C:17:69:73:B0:56:ED:A0:8E:ED
X509v3 Authority Key Identifier:
keyid:41:B8:88:CE:C0:6F:8A:A5:9B:EC:CC:C7:B3:A9:70:18:AB:B7:3D:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QbiIzsBviqWb7MzHs6lwGKu3PQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/_QiQmroF9P3WbIwXaXOwVu2gju0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/32/fb8ca2-9fc9-4898-b048-52a368cac403/1/QbiIzsBviqWb7MzHs6lwGKu3PQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.119.194.0/24
Signature Algorithm: sha256WithRSAEncryption
95:7b:c3:c8:cd:a5:53:11:11:5b:07:83:a0:25:a8:39:16:86:
b8:92:cc:ea:ac:12:62:09:14:ca:4a:3c:ff:a2:f9:a3:c0:ab:
79:72:aa:33:f5:d0:dc:1c:eb:74:93:53:bf:1c:9a:cb:df:1d:
0e:b4:b6:0f:78:b3:26:d3:f6:63:35:6c:10:0b:21:f5:b3:2a:
d7:c0:38:47:53:d8:d6:7b:a1:86:de:fb:13:7a:ac:4a:a0:e6:
f4:35:57:f5:81:ef:a5:5d:e3:0d:42:ba:47:83:d2:65:e8:b3:
89:b2:11:33:2c:97:e9:b6:8d:30:22:c0:71:fc:7f:46:dd:9a:
83:1e:11:96:59:91:17:11:2f:6c:93:5f:c0:be:88:88:5a:5d:
97:b5:1f:bc:52:db:be:29:ad:b3:79:22:e5:18:61:e1:0c:5a:
13:ca:12:bb:76:04:8a:1f:5f:f5:9f:4b:f7:9a:0e:3d:d3:e1:
be:08:4a:13:fe:6a:66:db:5d:4f:72:62:16:9a:7b:60:ad:f9:
0e:b7:bf:0f:c8:72:9c:22:32:97:80:b0:57:20:c2:76:2e:aa:
8c:fe:35:27:d2:c0:a8:3c:58:ac:61:fb:9c:c0:a1:c3:76:61:
5b:fc:35:4b:db:9d:7f:13:5a:93:1f:9b:ea:26:1c:78:c6:e9:
5d:46:af:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 03:36:26 2026 by rpki-client