Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/QWVsdq5fZw_Ad9yMYYQkeLNXBQU.roa
File: QWVsdq5fZw_Ad9yMYYQkeLNXBQU.roa (raw, json)
Hash identifier: MTlU9w7plyBiKdc6VEl228HVuiuaSunDNSYa1+Qc8/U=
Subject key identifier: 41:65:6C:76:AE:5F:67:0F:C0:77:DC:8C:61:84:24:78:B3:57:05:05
Certificate issuer: /CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Certificate serial: 019CF29FE042FB16CF628D194509DF5E7C26
Authority key identifier: 3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/QWVsdq5fZw_Ad9yMYYQkeLNXBQU.roa
Signing time: Sun 15 Mar 2026 17:51:29 +0000
ROA not before: Sun 15 Mar 2026 17:51:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214025
IP address blocks: 212.116.246.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 15:17:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f2:9f:e0:42:fb:16:cf:62:8d:19:45:09:df:5e:7c:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b098e45ef4bb5d18dbc86c5a135f57ebcbe005d
Validity
Not Before: Mar 15 17:51:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41656c76ae5f670fc077dc8c61842478b3570505
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:f2:d9:8e:3d:83:cd:d1:f2:38:68:96:47:7a:
df:58:e5:be:f0:64:ca:2b:c0:bd:f2:9a:66:2f:24:
e4:03:d4:27:8c:70:6e:d7:0d:a3:f0:48:81:02:81:
81:7b:4f:a6:bf:df:82:4b:b8:8e:c3:68:ec:1c:ea:
21:b2:f6:80:7d:1c:7d:07:8d:29:74:c1:8f:08:ee:
12:fb:95:ad:8e:27:1c:27:bd:c5:1e:8a:6b:54:18:
c2:db:d9:6e:bb:e7:e7:6f:6f:6d:09:02:b1:c2:ab:
09:e7:7a:39:75:58:a8:ea:e6:5d:eb:c6:98:78:8b:
16:93:b5:1a:6b:15:57:0a:d3:b9:8a:b7:84:5b:7c:
dc:1b:65:4b:b2:81:c6:de:49:43:03:13:6c:d1:8e:
2e:8d:6b:f5:a0:1e:a6:5f:11:8a:ca:28:5e:09:0f:
8c:fb:d0:c3:47:f5:ef:71:c6:0c:2b:51:f9:3a:21:
92:c1:11:a5:34:c7:91:24:4b:2e:61:5b:9b:2c:fc:
3d:9f:b9:e8:e3:c9:f5:2f:80:ad:f7:9e:d2:0f:c6:
30:f4:27:0b:c3:dd:ea:66:03:70:16:55:6e:05:73:
7a:bf:b7:17:f5:37:b6:c8:88:42:73:43:3d:1c:69:
f3:7f:28:f8:c8:6e:02:ce:bd:d3:bc:84:d0:77:b8:
59:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:65:6C:76:AE:5F:67:0F:C0:77:DC:8C:61:84:24:78:B3:57:05:05
X509v3 Authority Key Identifier:
keyid:3B:09:8E:45:EF:4B:B5:D1:8D:BC:86:C5:A1:35:F5:7E:BC:BE:00:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/OwmORe9LtdGNvIbFoTX1fry-AF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/QWVsdq5fZw_Ad9yMYYQkeLNXBQU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/954d31-f74c-467b-9013-e12b164215b9/1/OwmORe9LtdGNvIbFoTX1fry-AF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.116.246.0/24
Signature Algorithm: sha256WithRSAEncryption
07:45:64:4a:b7:59:5e:ca:05:7a:a2:75:63:be:d3:c1:76:86:
1a:3f:10:5b:bf:03:9b:94:c7:d0:67:b0:90:b6:cc:37:15:ab:
61:a9:b0:c5:95:ea:b2:ad:82:92:20:04:86:b2:23:da:87:be:
84:13:a7:43:c9:b2:72:36:c0:6e:3a:ca:eb:82:e5:fd:7b:7e:
26:8f:6a:2c:03:15:fc:d4:fe:c1:19:6f:57:31:41:fe:70:a4:
a6:cf:2f:96:f2:d4:4e:ea:f8:e6:3c:f2:22:61:19:48:cc:5c:
8e:04:c2:c4:d8:d4:9b:0e:70:5f:92:d5:9c:ec:19:a7:6b:8c:
e9:31:56:2f:c6:4f:e4:a7:12:f0:c2:72:a4:54:ae:98:99:83:
99:fd:5e:06:f9:40:77:26:e2:66:af:7a:ac:36:f7:0e:37:84:
9c:43:53:11:b2:d9:40:98:c3:25:48:b4:35:27:f0:4d:13:17:
d2:be:63:7b:fe:52:8f:e5:9b:5b:bd:73:3e:05:d3:1d:6c:ed:
61:bf:32:c3:78:36:39:d6:6d:05:f7:be:45:5a:c2:c3:c0:b2:
33:8a:ec:ef:05:f0:f7:5b:fd:1d:03:02:c5:cd:f0:23:5f:56:
61:92:81:9c:0a:04:d1:91:33:4b:37:e6:91:aa:d9:01:76:70:
e7:df:30:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 02:31:52 2026 by rpki-client