Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/QFBIL98nhWZihq6X9otfp-26AW8.roa
File: QFBIL98nhWZihq6X9otfp-26AW8.roa (raw, json)
Hash identifier: 7lXr8KdBRuxrgLdmbnp5sqy+5Eu7YOk4bILMk23Cxhg=
Subject key identifier: 40:50:48:2F:DF:27:85:66:62:86:AE:97:F6:8B:5F:A7:ED:BA:01:6F
Certificate issuer: /CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Certificate serial: 019DF9D88E19E5B11FE4C3F205DA183CCB2D
Authority key identifier: 8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/QFBIL98nhWZihq6X9otfp-26AW8.roa
Signing time: Tue 05 May 2026 20:33:32 +0000
ROA not before: Tue 05 May 2026 20:33:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215286
IP address blocks: 188.191.96.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.mft
rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:10:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f9:d8:8e:19:e5:b1:1f:e4:c3:f2:05:da:18:3c:cb:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d1ac83ee3a3f968d66ad2fdf4616e7bb1e4d1d7
Validity
Not Before: May 5 20:33:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4050482fdf2785666286ae97f68b5fa7edba016f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:51:aa:97:9d:b2:78:29:65:13:fa:22:2e:8c:
85:d8:89:79:e4:9a:94:69:bd:0b:27:0c:70:02:76:
3f:1c:43:4a:36:a3:3a:57:86:c4:af:ca:e1:94:89:
e6:e8:70:32:f4:77:ad:f3:37:09:43:6d:7a:db:5c:
88:77:7d:f2:6b:67:40:a0:9e:0e:6a:32:f5:57:88:
e8:79:fd:00:d9:74:d1:d1:0b:42:1d:88:70:d6:80:
cd:13:8f:5c:08:5a:3a:0e:ca:ee:db:59:61:32:81:
af:9d:62:5d:a2:87:dc:f7:be:85:22:05:91:dd:dc:
97:a4:a2:de:8c:0d:ea:40:d8:c1:e3:a2:d5:fb:5b:
b9:96:55:a6:df:be:04:e5:ec:c1:ef:84:e9:0c:58:
f3:fb:7f:44:08:9d:f8:2c:90:7c:87:56:e4:b5:46:
77:42:a0:c3:fe:a5:4f:0c:41:7e:b2:84:35:45:96:
d3:4c:66:c4:1d:90:ee:38:2c:da:c0:89:96:e1:4d:
57:c4:9c:e1:42:48:cc:f1:4b:ab:93:65:0b:7e:c3:
d6:48:d5:13:62:98:26:e5:dd:50:32:8b:aa:c2:ff:
7b:2f:9b:77:a0:c2:06:2c:f1:3a:bf:6c:cb:27:45:
f5:b8:59:b5:ed:54:97:d7:9a:1c:2b:1c:e4:73:85:
a4:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:50:48:2F:DF:27:85:66:62:86:AE:97:F6:8B:5F:A7:ED:BA:01:6F
X509v3 Authority Key Identifier:
keyid:8D:1A:C8:3E:E3:A3:F9:68:D6:6A:D2:FD:F4:61:6E:7B:B1:E4:D1:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jRrIPuOj-WjWatL99GFue7Hk0dc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/QFBIL98nhWZihq6X9otfp-26AW8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/4abf3f-158f-4f62-a9eb-ddf567eded03/1/jRrIPuOj-WjWatL99GFue7Hk0dc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.191.96.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:f2:b9:37:dc:90:80:be:6a:b9:c4:91:c9:f9:89:d5:70:77:
0e:e3:b5:d3:8c:78:23:97:53:3f:bf:7c:47:c6:0a:5e:1b:99:
a2:6b:25:58:a2:ae:03:52:53:b6:49:9e:a9:26:fc:3c:fb:e6:
c2:fe:7d:32:90:f2:76:50:0b:43:3e:08:ff:1a:3b:d0:08:c3:
b9:79:1f:9d:26:d5:25:6a:85:22:61:b5:4e:f9:3d:25:ab:73:
75:2a:a6:c9:74:df:7b:c3:be:91:0c:71:4f:0d:9e:14:be:fb:
c5:a7:97:9b:cf:5f:bb:76:08:34:27:30:e1:60:4e:c1:a8:25:
ff:62:fa:25:98:dc:51:e0:ee:6c:e9:76:cd:8e:48:7f:de:26:
16:fc:9b:c4:62:ed:10:2d:f0:61:4e:39:75:54:fc:2a:d3:03:
d1:87:21:bf:a9:38:73:25:61:55:22:93:29:39:1d:6f:52:ee:
ef:5a:82:88:7a:47:d0:9d:bf:9b:0a:cc:b2:8a:5b:5c:d5:b9:
83:c8:66:7a:f8:e3:d8:ab:54:85:75:55:6f:3a:b4:5b:2a:0d:
8d:f7:08:da:64:4e:fd:ce:87:85:11:3f:b3:f2:bc:45:eb:0f:
9e:32:f5:30:c9:a7:23:e6:88:32:41:3c:29:2f:b0:d3:20:8a:
f8:fd:d8:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 02:38:19 2026 by rpki-client