Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/QcwY7QRBfg0U1vYTD3tEyK1tCIk.roa
File: QcwY7QRBfg0U1vYTD3tEyK1tCIk.roa (raw, json)
Hash identifier: C8EnG7j+HGwDjJjN4fPZ3xTluNmlPd7Cuxa75PRIy0I=
Subject key identifier: 41:CC:18:ED:04:41:7E:0D:14:D6:F6:13:0F:7B:44:C8:AD:6D:08:89
Certificate issuer: /CN=0d0874b333e35df14fd970e189581da093bc8093
Certificate serial: 019F45D178535026919D98EF6066FCCC7026
Authority key identifier: 0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/QcwY7QRBfg0U1vYTD3tEyK1tCIk.roa
Signing time: Thu 09 Jul 2026 07:39:43 +0000
ROA not before: Thu 09 Jul 2026 07:39:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199496
IP address blocks: 95.129.248.0/21 maxlen: 32
185.13.76.0/22 maxlen: 32
185.65.156.0/22 maxlen: 32
185.165.252.0/22 maxlen: 32
185.165.254.0/24 maxlen: 24
185.165.255.0/24 maxlen: 24
185.235.220.0/22 maxlen: 32
185.249.76.0/22 maxlen: 32
2a00:83e0::/32 maxlen: 64
2a02:f4c0::/29 maxlen: 64
2a09:d00::/29 maxlen: 64
2a0a:5600::/29 maxlen: 29
2a0c:c0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:45:d1:78:53:50:26:91:9d:98:ef:60:66:fc:cc:70:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d0874b333e35df14fd970e189581da093bc8093
Validity
Not Before: Jul 9 07:39:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41cc18ed04417e0d14d6f6130f7b44c8ad6d0889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:ea:f6:31:61:e3:fb:e0:81:a9:bc:f1:1a:e2:
a8:68:6d:e4:15:32:0f:a6:b5:21:85:1e:71:5f:a2:
d9:1b:10:2b:d1:df:36:ac:72:4e:28:0f:43:8c:3b:
a5:f7:32:74:2d:01:cd:ed:6c:41:07:a5:77:31:2e:
54:d7:69:9b:35:e8:fa:f5:0c:cb:b3:00:d6:80:cd:
4f:b2:bd:39:b6:2c:4e:4b:4d:7f:e8:9d:79:15:05:
92:81:b9:06:91:6a:68:86:b8:8b:ce:95:9a:4b:92:
23:85:44:5a:bf:71:b4:6b:8a:47:3c:aa:1c:f1:a2:
52:8f:00:75:f3:93:be:d8:be:03:20:69:b4:3b:5f:
b8:53:e8:d2:71:76:fd:65:66:ea:c3:7b:20:9f:37:
25:e8:3f:e3:00:19:59:0e:e4:c2:95:6c:83:89:56:
52:80:87:6f:54:8d:3c:26:93:1e:36:7b:4a:df:05:
b2:83:db:ac:d4:72:47:dc:8c:72:2e:51:23:05:1d:
ef:3c:7a:93:68:68:26:28:4e:62:76:c8:c4:84:b4:
f3:8a:13:54:31:ae:c8:da:61:ff:2d:b7:a0:ea:26:
18:5e:b5:22:d7:39:9c:e9:68:07:76:2e:e9:b4:28:
db:bf:77:80:51:36:2a:ee:3d:b1:1e:cd:02:19:04:
21:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:CC:18:ED:04:41:7E:0D:14:D6:F6:13:0F:7B:44:C8:AD:6D:08:89
X509v3 Authority Key Identifier:
keyid:0D:08:74:B3:33:E3:5D:F1:4F:D9:70:E1:89:58:1D:A0:93:BC:80:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DQh0szPjXfFP2XDhiVgdoJO8gJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/QcwY7QRBfg0U1vYTD3tEyK1tCIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/b039bc-213b-457c-96ae-3181db911a13/1/DQh0szPjXfFP2XDhiVgdoJO8gJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.129.248.0/21
185.13.76.0/22
185.65.156.0/22
185.165.252.0/22
185.235.220.0/22
185.249.76.0/22
IPv6:
2a00:83e0::/32
2a02:f4c0::/29
2a09:d00::/29
2a0a:5600::/29
2a0c:c0::/29
Signature Algorithm: sha256WithRSAEncryption
07:d3:3f:79:2a:7c:3b:fc:2d:53:91:86:fb:bc:7a:4f:69:f8:
c5:d5:a6:52:c1:65:ba:ca:dd:15:c6:e5:60:3a:d3:c9:47:6d:
73:ce:54:e3:47:ba:2a:83:e0:84:21:1a:a6:ec:a8:2b:95:1a:
14:61:a9:ed:21:62:81:a1:bf:97:cc:53:bb:4f:3c:36:66:f4:
6e:84:cc:3d:69:61:0d:ed:1b:e5:b7:2e:a3:c0:2a:ab:fc:69:
d9:57:9f:cc:22:73:11:2d:72:35:c8:01:ed:1e:b7:0e:f0:6a:
b8:27:2a:67:f0:8c:de:e6:e5:3b:44:3a:b1:9c:ee:0d:32:6a:
a0:39:12:26:b7:38:b1:5b:1b:79:f3:86:d5:d0:39:31:aa:a0:
c6:2b:47:bc:d5:fa:cd:46:f2:88:63:ec:2b:9f:8a:6e:2b:bb:
cb:5a:7d:0b:4b:5c:2f:9d:4d:5e:ea:8a:17:3e:f5:ab:71:d3:
a9:39:80:9d:ff:22:15:53:d9:7f:4f:61:e9:ce:d4:30:37:88:
96:59:2d:44:de:74:98:10:c1:4f:42:a8:13:91:de:5f:ff:a9:
1e:f5:ee:af:23:52:9b:37:be:d3:ae:d7:83:18:55:90:d2:4b:
4b:05:6b:02:14:86:c6:09:b3:5f:45:f2:f4:be:50:77:27:41:
49:15:5b:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:35:15 2026 by rpki-client