Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Qt7A-AQBkzNGgRSmrF8Lj0Q0lv0.roa
File: Qt7A-AQBkzNGgRSmrF8Lj0Q0lv0.roa (raw, json)
Hash identifier: VrUJ+qPSEaeHAejxbST8hM4U9lZID/Lkz3AjPINNStM=
Subject key identifier: 42:DE:C0:F8:04:01:93:33:46:81:14:A6:AC:5F:0B:8F:44:34:96:FD
Certificate issuer: /CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Certificate serial: 01A1CABA2A61E13EA62E485E7D504F1EFE2E
Authority key identifier: 7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Qt7A-AQBkzNGgRSmrF8Lj0Q0lv0.roa
Signing time: Wed 11 Nov 2026 13:09:20 +0000
ROA not before: Wed 11 Nov 2026 13:09:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212238
IP address blocks: 140.225.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:10:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:ba:2a:61:e1:3e:a6:2e:48:5e:7d:50:4f:1e:fe:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7da5d32d5b09c93c1b5e3fc5a2aa20d746fcfed1
Validity
Not Before: Nov 11 13:09:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42dec0f804019333468114a6ac5f0b8f443496fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:a4:13:9c:fd:ee:ab:31:41:0d:94:b0:58:13:
43:da:e0:9d:ba:ac:4b:c3:df:b2:7a:23:ce:10:d1:
94:33:2a:d9:7d:47:bb:c6:0c:dc:cb:be:b8:44:ff:
d7:ad:aa:fa:36:f1:09:1a:be:ed:99:97:c8:98:3a:
6b:5e:79:43:81:c2:90:f4:9c:b0:3a:ef:c6:c8:a9:
8f:2c:1a:10:d2:36:23:bc:2b:0b:22:90:f6:c3:73:
2d:c7:e1:ff:5c:0e:5d:2d:95:95:5d:2b:ab:e8:de:
85:27:c9:d1:9a:28:2c:ec:1d:1a:17:50:38:55:04:
80:99:73:fa:f1:12:46:5d:c3:25:87:5d:dc:1c:51:
c3:6b:2f:de:e7:d2:26:5d:bb:27:d0:4d:b0:5f:8e:
e1:ad:75:9f:c8:6e:d8:89:e8:56:5a:d7:72:58:13:
cf:47:02:48:5f:1e:23:48:c4:fe:1b:68:d4:f9:17:
4c:1f:99:07:3c:0e:f3:a8:da:ae:86:9d:c4:db:2b:
cd:14:e9:5a:29:07:dc:64:14:fe:1c:ee:8e:bf:cc:
c7:f7:a8:60:29:44:ef:50:54:7f:c3:ab:fa:29:2c:
22:88:d7:e9:b5:97:6d:f2:f3:c9:0d:c4:5e:81:5c:
17:5b:1b:1b:42:8a:c6:f3:87:14:b3:da:9a:15:3a:
bf:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:DE:C0:F8:04:01:93:33:46:81:14:A6:AC:5F:0B:8F:44:34:96:FD
X509v3 Authority Key Identifier:
keyid:7D:A5:D3:2D:5B:09:C9:3C:1B:5E:3F:C5:A2:AA:20:D7:46:FC:FE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/faXTLVsJyTwbXj_Foqog10b8_tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/Qt7A-AQBkzNGgRSmrF8Lj0Q0lv0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/4b18fb-d3ed-4b27-9bd0-e5839f43e583/1/faXTLVsJyTwbXj_Foqog10b8_tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
140.225.197.0/24
Signature Algorithm: sha256WithRSAEncryption
6d:8d:1a:42:0a:d4:b6:6c:6a:eb:13:68:4b:ad:bf:d4:e5:4f:
9d:c9:18:b6:9b:cb:7e:67:48:95:f7:92:6e:1d:19:4f:3a:ae:
53:87:20:0e:e2:25:38:74:7f:4b:e9:b8:c1:1b:5f:9c:85:38:
f2:95:bf:45:6a:a1:26:10:62:c8:24:d3:da:59:ff:88:e2:f6:
c6:17:9a:38:85:88:ff:3c:67:13:6b:d4:8a:0a:8f:30:bb:5b:
aa:6c:fc:c8:fc:51:52:a7:fe:a4:94:32:1e:e6:97:2c:bc:eb:
89:f0:1f:73:cd:a8:e2:ba:2b:70:32:b9:88:d2:f8:47:dd:01:
3e:28:75:33:82:91:99:d9:d4:a1:3f:2a:4f:b3:81:6b:1d:c7:
34:ff:40:e7:82:33:31:7b:af:b5:5f:b8:cd:7d:ef:97:95:9e:
c9:1b:c8:3f:8b:49:de:30:a3:05:51:7f:26:07:15:de:bd:7b:
f1:ca:b6:67:7d:5e:11:86:11:19:44:31:15:22:38:0e:7d:a3:
38:e6:9d:09:b2:cd:f3:ef:7b:b5:91:ce:6b:15:64:fe:6c:29:
3e:f7:b6:f2:98:87:0d:01:77:47:64:40:2b:25:e3:a1:fa:d3:
c2:78:99:eb:5c:c5:ae:87:2b:24:81:91:e7:ed:70:82:41:04:
fd:8c:a8:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 21:03:41 2026 by rpki-client