Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/QFIFjY-TvdhFpu5liSbZap-Vvrw.roa
File: QFIFjY-TvdhFpu5liSbZap-Vvrw.roa (raw, json)
Hash identifier: ++dcv8XUbXJ+JM0rFaYwn+vsJq/alYRvMZD3jyve1ks=
Subject key identifier: 40:52:05:8D:8F:93:BD:D8:45:A6:EE:65:89:26:D9:6A:9F:95:BE:BC
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019EFE5047211AF5B948E25C8E8CBFB6B686
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/QFIFjY-TvdhFpu5liSbZap-Vvrw.roa
Signing time: Thu 25 Jun 2026 10:25:34 +0000
ROA not before: Thu 25 Jun 2026 10:25:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198486
IP address blocks: 109.66.226.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:50:47:21:1a:f5:b9:48:e2:5c:8e:8c:bf:b6:b6:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jun 25 10:25:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4052058d8f93bdd845a6ee658926d96a9f95bebc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:98:99:08:0f:79:b5:84:b6:7d:87:de:4b:d3:
bd:29:96:79:3f:66:53:c1:86:b5:7f:f2:da:3d:ed:
0c:88:58:cd:9c:cb:fc:fb:96:b2:f6:32:04:9b:1c:
51:2e:3f:bd:69:7a:af:78:1f:61:99:f9:f0:d9:bf:
61:e1:ec:08:37:bf:f7:9d:f5:3e:37:36:64:7c:83:
7a:49:50:3b:f0:31:22:2b:78:28:84:f7:52:d2:8b:
a7:b3:f3:ea:1a:77:ee:68:df:42:6e:4e:d9:d3:5c:
5d:8e:74:d9:28:cf:60:5f:8f:46:47:2a:de:b4:1d:
c0:01:b4:d7:42:3d:20:57:3d:0a:21:2c:74:90:db:
29:8f:35:3b:ae:7d:a5:b4:f1:2b:c9:69:93:16:7a:
2b:9f:db:c9:34:cb:5d:53:f0:e5:40:35:98:20:db:
c2:25:7f:d8:17:45:66:eb:2f:0f:8b:80:65:e9:ea:
4f:d6:21:2c:2c:6b:89:b3:9f:d5:7e:57:a8:9e:88:
86:ed:3f:51:a5:f4:19:f4:d0:0c:a5:61:8a:ed:69:
4d:6d:f4:81:bc:0c:4e:9e:10:ac:51:d2:6a:87:34:
81:06:c5:7d:15:2c:16:0f:fd:f1:af:95:ce:0f:c5:
a6:23:8d:31:7d:d1:29:35:4b:dc:ef:12:6f:3c:8f:
49:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:52:05:8D:8F:93:BD:D8:45:A6:EE:65:89:26:D9:6A:9F:95:BE:BC
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/QFIFjY-TvdhFpu5liSbZap-Vvrw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.226.0/23
Signature Algorithm: sha256WithRSAEncryption
6f:51:89:dc:9d:bb:e1:a9:f7:47:d7:75:0e:af:d5:f4:c4:00:
5b:1d:8a:c9:a0:46:6c:8b:ec:79:59:c7:bc:39:12:2e:f9:a9:
31:32:5b:eb:4a:46:2b:9d:b2:31:c1:4c:11:88:f3:0b:81:23:
f1:4c:ff:99:75:b4:44:00:84:79:0d:70:32:c4:69:b7:69:75:
68:07:20:15:79:66:3b:f6:cb:12:2a:94:b5:7e:44:93:f7:c0:
17:fd:4b:aa:7c:35:5a:a8:a3:1a:01:17:12:8c:b2:7f:f4:ed:
53:9c:3e:82:f9:55:ac:73:17:f4:2e:f4:ac:64:4a:97:37:2a:
4e:7f:15:50:c8:b6:64:59:45:48:08:36:e4:9f:10:0f:2e:07:
a1:52:d3:38:c5:22:ba:bd:35:64:a1:85:00:09:c7:79:09:9d:
ca:75:dc:87:65:ba:06:cb:95:66:6b:06:3c:24:8f:14:87:e2:
27:0e:fa:f6:86:9d:77:71:b2:47:fb:23:d8:6a:c4:e4:4f:a2:
bf:e6:52:86:f0:49:7c:cd:be:9e:f0:85:52:0a:1c:b7:6f:a2:
f0:74:ab:1a:f8:ff:36:2a:3f:22:02:17:5d:7b:92:bf:d7:eb:
ae:4d:33:b6:2d:8a:33:73:8e:f8:6b:c4:5b:da:91:b2:a6:ea:
90:5f:47:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:39 2026 by rpki-client