Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/QAjbbxJkwWP6mtvrf816lbgaTpE.roa
File: QAjbbxJkwWP6mtvrf816lbgaTpE.roa (raw, json)
Hash identifier: BE3I5u9iuuHjxCqTUslvbILWdwNCS8MnbabYgEyaLMg=
Subject key identifier: 40:08:DB:6F:12:64:C1:63:FA:9A:DB:EB:7F:CD:7A:95:B8:1A:4E:91
Certificate issuer: /CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Certificate serial: 019975CF4B6E8F877A4DD2B1D41BFA21737C
Authority key identifier: DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/QAjbbxJkwWP6mtvrf816lbgaTpE.roa
Signing time: Tue 23 Sep 2025 09:02:23 +0000
ROA not before: Tue 23 Sep 2025 09:02:23 +0000
ROA not after: Wed 01 Jul 2026 00:00:00 +0000
asID: 214943
IP address blocks: 94.26.38.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Oct 2025 00:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:75:cf:4b:6e:8f:87:7a:4d:d2:b1:d4:1b:fa:21:73:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=de12eb9c75d359d25137b5ef4e176f5eeb6c4342
Validity
Not Before: Sep 23 09:02:23 2025 GMT
Not After : Jul 1 00:00:00 2026 GMT
Subject: CN=4008db6f1264c163fa9adbeb7fcd7a95b81a4e91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:83:29:ba:8f:f7:dc:5d:a5:05:ad:82:3c:1b:
0a:9c:3e:58:50:08:0e:bc:fb:22:b7:fd:22:ae:6c:
6f:13:00:78:e1:ce:0a:f3:02:5d:48:b0:26:fb:30:
fc:6a:f6:2d:a7:a4:e8:10:db:d0:f2:69:49:ce:ac:
4f:40:9c:2e:3c:5d:e8:b4:f0:5d:12:ae:dc:78:86:
83:08:a0:46:24:27:65:7a:12:1f:ab:60:d8:02:69:
e6:db:b8:89:56:45:e9:5a:08:2f:96:92:43:ad:40:
98:4d:c3:2c:6f:8e:d3:86:e4:2d:dd:f3:79:ce:22:
de:6e:2e:3b:67:52:85:4b:b6:9a:0d:48:3e:ba:56:
99:f5:47:96:64:8d:31:99:66:36:28:15:da:8e:0d:
83:ad:22:05:db:bb:e1:a4:2a:0e:c4:ae:a1:6b:13:
a7:c4:e3:f8:92:be:4a:52:5f:82:9e:4f:66:45:b1:
1e:0b:0a:29:16:37:07:34:58:cf:0d:93:39:df:14:
1d:4b:e9:cc:08:3d:27:a1:c6:5d:cf:0b:03:56:e0:
02:08:78:2a:e5:db:5f:dc:39:68:b4:ed:e8:8f:bc:
24:49:45:5c:e1:f2:5d:ba:da:ac:e9:6c:8d:d2:71:
e7:13:0b:ab:d6:70:5f:69:ee:63:b3:c4:19:e1:c2:
13:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:08:DB:6F:12:64:C1:63:FA:9A:DB:EB:7F:CD:7A:95:B8:1A:4E:91
X509v3 Authority Key Identifier:
keyid:DE:12:EB:9C:75:D3:59:D2:51:37:B5:EF:4E:17:6F:5E:EB:6C:43:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3hLrnHXTWdJRN7XvThdvXutsQ0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/QAjbbxJkwWP6mtvrf816lbgaTpE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/269a04-77b4-4ee7-b164-c16787272049/1/3hLrnHXTWdJRN7XvThdvXutsQ0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.26.38.0/24
Signature Algorithm: sha256WithRSAEncryption
39:21:5f:cd:0f:59:f1:77:5c:ae:70:e8:f7:88:16:5a:a4:6c:
02:cb:5e:73:8d:fb:94:70:78:b4:77:91:d5:44:88:d0:ad:f4:
40:48:f1:28:bc:90:3e:5a:aa:59:de:e0:ae:9a:54:c5:8d:06:
df:cc:3f:f5:a8:14:2b:13:2d:ac:ac:7b:be:03:0f:b2:9f:7d:
ee:dd:dc:d1:fc:48:34:82:b7:b8:bb:59:51:ed:6a:82:13:d1:
10:b1:0c:de:f1:92:19:cd:14:66:97:4f:b0:7c:67:99:67:11:
92:68:17:57:77:26:eb:c8:10:06:ba:0f:8d:90:22:ba:87:b9:
77:18:ba:f1:c7:ef:b3:63:84:ad:88:15:27:69:0c:85:a0:57:
7d:f7:eb:f6:d5:d2:71:1a:67:d7:d8:f7:ce:6a:af:f2:2e:da:
1d:b6:ce:44:eb:43:1a:3d:75:6a:50:cb:a5:7d:0a:bc:c6:62:
06:74:e9:99:5b:d9:54:90:21:14:ac:91:bb:95:0c:60:22:13:
48:75:87:8a:8a:de:d4:ed:d7:6d:23:35:72:2b:06:33:b3:e4:
91:cc:57:10:89:ef:28:d7:1d:6c:9b:78:3f:fd:74:9f:58:80:
da:51:c1:8d:39:49:ba:02:fc:d9:83:52:af:eb:88:de:69:b0:
b7:b1:3c:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 20 08:28:07 2025 by rpki-client