Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/QMUp40kkrX2lJ_rIuAHzjFB0NVE.roa
File: QMUp40kkrX2lJ_rIuAHzjFB0NVE.roa (raw, json)
Hash identifier: fV/Lnx4b62P680dfjuQ/4qY/FhgqUMdLzbc7uTbhNeY=
Subject key identifier: 40:C5:29:E3:49:24:AD:7D:A5:27:FA:C8:B8:01:F3:8C:50:74:35:51
Certificate issuer: /CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Certificate serial: 019D00AED0C12218C502C17165609CE5D249
Authority key identifier: 6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/QMUp40kkrX2lJ_rIuAHzjFB0NVE.roa
Signing time: Wed 18 Mar 2026 11:22:29 +0000
ROA not before: Wed 18 Mar 2026 11:22:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214515
IP address blocks: 109.122.248.0/24 maxlen: 24
109.122.253.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.mft
rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:00:ae:d0:c1:22:18:c5:02:c1:71:65:60:9c:e5:d2:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ddb38b343da2d119309edaa19c7a78870327ebe
Validity
Not Before: Mar 18 11:22:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40c529e34924ad7da527fac8b801f38c50743551
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:13:cb:46:76:ce:16:3a:dc:08:da:58:6b:ab:
2b:aa:78:ea:d9:c5:72:2a:4b:03:ec:e4:4b:9f:b3:
d6:c0:b2:7a:2e:82:08:44:e4:3c:8f:dc:78:44:01:
88:52:17:3a:c4:56:4f:b2:8c:07:f2:f5:3b:aa:90:
66:6c:85:21:b4:2b:3c:e7:08:2b:d0:d6:e1:06:a1:
a3:df:c8:31:ff:cc:f3:73:e3:d0:aa:d8:b0:00:da:
03:e2:95:07:28:8e:76:0c:41:45:3a:fb:dc:07:30:
66:c9:fa:30:ac:dc:40:0f:98:ae:6f:83:16:26:62:
76:2d:ec:34:50:09:84:d9:e3:f6:b1:9c:63:bc:9a:
8f:a5:92:d0:26:b9:fc:f4:da:1e:80:a9:a3:11:a3:
e1:97:1b:d7:f6:2d:94:ee:da:d5:1a:aa:ee:f9:be:
29:d9:3a:2d:22:eb:2b:c2:49:84:3b:3c:bd:c2:32:
6e:9f:da:61:4e:18:18:4e:db:15:d7:7b:df:35:85:
53:2e:f8:06:ad:78:3d:96:92:30:36:d1:dc:1a:41:
b8:9e:b7:52:64:59:97:f6:f0:9b:99:37:a9:8f:89:
5d:50:c7:8e:54:23:75:3e:40:bc:df:f3:aa:b9:e8:
08:9b:0b:36:07:36:f9:5e:be:d4:e6:bb:ac:dd:5d:
d6:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:C5:29:E3:49:24:AD:7D:A5:27:FA:C8:B8:01:F3:8C:50:74:35:51
X509v3 Authority Key Identifier:
keyid:6D:DB:38:B3:43:DA:2D:11:93:09:ED:AA:19:C7:A7:88:70:32:7E:BE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bds4s0PaLRGTCe2qGceniHAyfr4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/QMUp40kkrX2lJ_rIuAHzjFB0NVE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/c961a0-4f53-422a-b7dd-3dfa510d6b16/1/bds4s0PaLRGTCe2qGceniHAyfr4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.122.248.0/24
109.122.253.0/24
Signature Algorithm: sha256WithRSAEncryption
99:a6:4c:e9:70:be:7f:b9:c9:1d:ec:1a:0c:ec:2b:77:c5:3c:
e8:8e:c1:f9:28:ef:65:56:ed:ab:48:57:02:55:71:08:eb:70:
60:14:d5:23:d8:2c:88:7c:8f:05:a6:5e:86:11:60:8a:45:94:
be:d2:a6:2a:75:de:e5:ec:7f:21:17:73:a4:4d:2f:d4:15:1a:
2f:ab:14:80:bb:b4:b6:a9:58:fb:a2:4d:94:7d:d0:2b:d6:d2:
a1:00:52:53:c1:d8:30:3d:8d:a2:c4:c9:4d:ce:6a:d7:92:01:
a1:1a:38:c0:52:a3:72:9e:a5:a7:d1:51:27:14:d1:55:b4:34:
bb:d2:22:47:6c:73:bd:ae:88:f9:48:72:64:0c:fb:21:e0:60:
e0:7a:f8:4d:a0:90:a7:76:ae:39:3a:06:11:d1:75:04:b4:ea:
85:48:81:ad:65:46:16:17:e7:8e:01:d6:ab:98:a1:4a:3a:12:
54:6c:6c:57:b3:76:d6:be:dc:a0:0f:01:e1:76:46:9c:fd:c1:
df:fe:cf:c1:e3:e9:79:e2:d6:3a:ff:4a:40:c5:39:e5:f9:cc:
b0:6f:1d:a0:66:7e:47:75:19:97:d9:fe:1f:93:a4:35:12:34:
a6:c5:62:c4:69:a6:f6:3e:f7:b2:2a:81:b6:8d:91:fd:7a:84:
c2:fa:f8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 10:59:29 2026 by rpki-client