Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/QVnjWF9wgJA5M4MFDyVAP5psvxY.roa
File: QVnjWF9wgJA5M4MFDyVAP5psvxY.roa (raw, json)
Hash identifier: vV2/z+y3NP1o0zHFV50djtlKYwkLxxVOvNRRHnw/fUU=
Subject key identifier: 41:59:E3:58:5F:70:80:90:39:33:83:05:0F:25:40:3F:9A:6C:BF:16
Certificate issuer: /CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Certificate serial: 01A0C8CD366E40406F156CAAA1C5DA93A412
Authority key identifier: 97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/QVnjWF9wgJA5M4MFDyVAP5psvxY.roa
Signing time: Tue 22 Sep 2026 11:08:07 +0000
ROA not before: Tue 22 Sep 2026 11:08:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 147281
IP address blocks: 82.206.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.mft
rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 20:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:cd:36:6e:40:40:6f:15:6c:aa:a1:c5:da:93:a4:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9799140b42db6cb6bf8c6dd413747fcf4a6fd9b5
Validity
Not Before: Sep 22 11:08:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4159e3585f708090393383050f25403f9a6cbf16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:59:31:94:b5:8a:3a:c4:fa:60:20:41:e0:fe:
72:1b:0b:9e:2c:44:53:a7:86:70:21:a7:a5:da:27:
59:fb:73:7a:09:c2:3e:b4:1a:9a:3e:68:b8:8a:d2:
25:a1:f0:8c:de:e8:1b:77:e4:54:46:98:df:68:a4:
7c:fe:9f:68:0f:f4:c5:d4:82:83:b2:bf:32:4c:0d:
d9:f7:e4:7e:54:0b:44:dd:f5:17:53:83:92:92:54:
9d:7c:a0:25:b3:92:cf:c3:ae:d3:fb:38:e2:19:d0:
48:b3:87:bf:fd:20:3f:15:c1:a9:d0:fe:df:a1:7e:
c3:18:f4:59:01:9b:55:64:11:0a:db:66:ef:c8:a6:
c0:04:30:3e:f0:0c:6c:9e:b0:31:9b:b8:a6:bc:9e:
f8:be:eb:27:be:e2:4e:6d:83:0b:55:2e:4b:da:29:
fe:7d:a4:94:da:5c:6a:80:b6:96:24:39:71:dd:63:
7f:8d:5b:a8:f4:a4:64:14:1f:ec:c6:4b:69:9e:57:
6b:b6:2f:a7:ef:e5:8a:22:ff:56:9a:92:0c:11:7c:
69:c8:45:fb:dd:10:ec:ab:d2:8d:b2:a1:c9:b6:11:
c2:e4:da:a4:cb:83:b5:0c:4f:bd:53:bd:9c:2e:4e:
ab:c0:fb:2c:fa:b1:8c:04:0e:41:b5:4f:ed:7e:8f:
15:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:59:E3:58:5F:70:80:90:39:33:83:05:0F:25:40:3F:9A:6C:BF:16
X509v3 Authority Key Identifier:
keyid:97:99:14:0B:42:DB:6C:B6:BF:8C:6D:D4:13:74:7F:CF:4A:6F:D9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l5kUC0LbbLa_jG3UE3R_z0pv2bU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/QVnjWF9wgJA5M4MFDyVAP5psvxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/4eef03-91fe-445a-a7cd-595919be0f52/1/l5kUC0LbbLa_jG3UE3R_z0pv2bU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.206.17.0/24
Signature Algorithm: sha256WithRSAEncryption
04:7a:73:3e:c7:cd:fe:22:79:11:87:20:27:75:ff:fa:09:c2:
10:24:eb:d9:d4:55:93:8b:8c:54:fa:ca:e1:77:8e:b0:fc:99:
3b:96:62:5f:05:26:32:82:1a:c8:6d:b7:bd:07:70:9c:6e:67:
25:41:e3:1c:f9:08:bc:9e:cb:86:8d:26:f1:e4:96:9d:9e:3f:
fe:4a:c1:f7:b7:5e:c8:35:f8:80:1e:05:6f:73:b5:de:fa:54:
81:0f:3f:08:e3:90:fa:67:59:e7:a1:c1:72:29:69:a9:00:bb:
7c:fa:3f:ca:b6:7c:8d:3e:48:0e:bd:f3:b0:f8:d8:4a:58:52:
e6:ed:51:78:1f:a8:39:79:69:6d:d0:8e:45:a5:23:16:f6:e3:
81:05:32:ae:71:b4:b5:c7:29:9c:55:9e:d8:c7:8b:5d:58:36:
ac:ce:70:8c:a8:7e:d3:94:60:2c:3d:a8:d9:71:bb:ca:fa:92:
87:06:e2:88:ad:30:07:71:21:07:d9:6f:a1:3a:a7:66:c7:bf:
8a:29:41:cb:76:af:56:6f:d5:28:1d:c2:d5:d6:ab:5d:b2:c6:
05:a5:a3:09:5c:e4:86:33:24:d2:46:19:1c:55:82:65:e6:8c:
2a:8b:44:92:d8:b5:dd:84:5d:36:bc:c5:4c:11:1b:c5:4f:f4:
b9:9b:18:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 07:13:58 2026 by rpki-client