Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/QZ671pc0AHWGiJKaiCeRWUkvi0w.roa
File: QZ671pc0AHWGiJKaiCeRWUkvi0w.roa (raw, json)
Hash identifier: 1qOoSO1VGJunDj9On7JrnmSQh5tAX58/tLnNsRng6ZQ=
Subject key identifier: 41:9E:BB:D6:97:34:00:75:86:88:92:9A:88:27:91:59:49:2F:8B:4C
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 019D19E8F3AF91E521065EB619771EF8B689
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/QZ671pc0AHWGiJKaiCeRWUkvi0w.roa
Signing time: Mon 23 Mar 2026 08:56:30 +0000
ROA not before: Mon 23 Mar 2026 08:56:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202283
IP address blocks: 2a02:1041::/32 maxlen: 32
2a02:10ef:4000::/34 maxlen: 34
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 08:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:19:e8:f3:af:91:e5:21:06:5e:b6:19:77:1e:f8:b6:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Mar 23 08:56:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=419ebbd6973400758688929a88279159492f8b4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:89:33:bf:d7:64:75:4d:ed:16:7b:51:5d:b6:
5e:18:dd:62:cc:b6:00:7c:da:3c:ae:9c:d6:17:ac:
1c:a0:a9:f2:19:9a:e7:77:89:a3:c4:42:d8:ec:f2:
8a:0c:02:3c:db:14:26:b5:c0:e7:a0:c6:68:7a:5b:
d2:b9:c6:17:04:69:2a:c0:92:3e:4e:8a:7f:67:50:
5a:5f:b1:89:74:ce:43:49:a9:8f:78:43:2f:ae:27:
c6:00:31:e3:0e:c5:f9:e6:85:0f:cd:6e:8b:c1:50:
49:93:d8:9c:ef:9f:ea:2b:0f:6a:f9:2c:e7:ea:2b:
d0:4b:1e:c4:28:5d:af:ec:95:de:a6:5f:c9:de:e8:
c1:7a:8e:9c:65:9a:01:75:ff:15:12:c3:c7:0c:f1:
ae:39:20:be:f3:81:ae:e2:3c:38:84:84:47:bc:39:
c7:4b:2b:41:cf:f0:81:ce:35:8a:e3:8f:e7:11:87:
19:5b:46:0a:c2:83:b1:4d:eb:ac:60:07:4b:20:d5:
f5:80:f6:44:02:c8:e7:52:93:44:49:ce:13:38:98:
9d:ca:52:51:7d:14:91:1a:63:e9:01:6a:2e:fd:89:
2f:f0:7f:ff:f3:df:28:0d:4d:4e:59:d9:1d:32:65:
15:f7:62:78:f1:aa:27:ca:6a:55:71:bc:72:e6:53:
be:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9E:BB:D6:97:34:00:75:86:88:92:9A:88:27:91:59:49:2F:8B:4C
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/QZ671pc0AHWGiJKaiCeRWUkvi0w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:1041::/32
2a02:10ef:4000::/34
Signature Algorithm: sha256WithRSAEncryption
7a:54:c0:f6:8c:b1:8c:08:e3:c1:cb:62:a0:f3:c6:e1:17:a4:
cb:bf:6e:a3:fd:09:15:e5:51:f7:08:09:a4:4f:66:a5:17:8e:
f3:6c:e8:0b:8d:78:bc:4a:a4:da:7a:59:ae:a9:b4:ae:da:2e:
cd:56:47:0f:d9:b5:6a:bd:29:62:7e:fa:44:8a:83:b5:37:27:
cb:f4:ef:30:ac:4f:39:6c:51:9f:8f:e3:75:a5:23:cc:c6:6b:
b1:c1:66:65:03:b1:14:5b:a4:94:0e:c4:85:ca:38:86:42:80:
f1:74:66:c6:d9:be:c9:9c:6e:10:5e:c0:11:4c:b5:dd:5f:aa:
9a:70:3e:cb:23:f7:5b:5c:27:61:83:0c:96:fb:60:79:c1:36:
e7:fd:97:8b:94:f3:4e:c3:98:ec:02:b4:a9:2a:d0:a6:49:40:
8a:de:6a:e4:19:75:41:7c:9d:b9:5e:f2:8d:ad:e8:9a:ec:90:
ed:13:18:81:af:c1:da:c1:c1:3f:4a:4c:ed:7a:9c:7f:20:b4:
75:18:05:fd:c4:53:83:21:51:cf:96:26:50:73:1a:3f:b3:1f:
71:f0:5e:d8:2a:bb:fd:b0:8b:55:b0:8f:48:6d:8b:9c:ba:e2:
b6:6d:bb:cc:a6:2c:ef:be:55:44:e7:46:3f:f5:2f:11:67:e9:
c9:8f:dd:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 15:26:02 2026 by rpki-client