Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6a/d26efa-4b50-406a-9ad3-0ede2b8e416a/1/QhPoitJGGsLihPAk8EatJ2_7MiM.roa
File: QhPoitJGGsLihPAk8EatJ2_7MiM.roa (raw, json)
Hash identifier: uluWwxRgXG5oY8fbSsgEEq/rzoKJ5moGou6WGrU387w=
Subject key identifier: 42:13:E8:8A:D2:46:1A:C2:E2:84:F0:24:F0:46:AD:27:6F:FB:32:23
Certificate issuer: /CN=5f38b8ba758be2723b8ef02f50bf33d38a877063
Certificate serial: 01A0BEFD020C6C4975DA5E180EFA843F9134
Authority key identifier: 5F:38:B8:BA:75:8B:E2:72:3B:8E:F0:2F:50:BF:33:D3:8A:87:70:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xzi4unWL4nI7jvAvUL8z04qHcGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/d26efa-4b50-406a-9ad3-0ede2b8e416a/1/QhPoitJGGsLihPAk8EatJ2_7MiM.roa
Signing time: Sun 20 Sep 2026 13:24:07 +0000
ROA not before: Sun 20 Sep 2026 13:24:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 185.239.173.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/d26efa-4b50-406a-9ad3-0ede2b8e416a/1/Xzi4unWL4nI7jvAvUL8z04qHcGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/d26efa-4b50-406a-9ad3-0ede2b8e416a/1/Xzi4unWL4nI7jvAvUL8z04qHcGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xzi4unWL4nI7jvAvUL8z04qHcGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 18:27:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:be:fd:02:0c:6c:49:75:da:5e:18:0e:fa:84:3f:91:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f38b8ba758be2723b8ef02f50bf33d38a877063
Validity
Not Before: Sep 20 13:24:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4213e88ad2461ac2e284f024f046ad276ffb3223
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:4e:1e:b6:0d:6b:05:48:0f:98:00:cc:d5:32:
8c:66:b9:fd:26:8f:43:8b:05:4b:96:9c:8b:81:fc:
11:66:40:65:78:87:e6:f7:1d:8e:0b:4a:0a:ef:92:
c6:2d:e0:22:a7:92:d2:15:b3:ea:15:03:bf:ab:9b:
19:27:b3:45:e2:22:08:72:7a:08:c8:d9:cf:89:8c:
7b:db:d9:c4:af:d4:2b:d9:8a:36:ea:6d:4d:a5:17:
57:fd:ef:88:15:85:2c:1e:1c:dc:6f:bc:5a:ee:11:
9e:62:f3:37:5d:14:6b:a6:92:cc:3a:fd:2e:8d:75:
86:63:32:82:8b:f9:bf:53:e9:d7:d1:20:26:82:ab:
9a:41:66:51:c3:ed:13:04:fa:23:f2:b9:4b:2c:32:
e3:d9:e1:2a:79:3d:c7:aa:50:63:ef:83:6c:2a:7e:
77:fd:34:c8:72:bd:65:cb:99:44:92:8c:5b:b0:48:
6d:de:de:9f:3a:e1:fc:a1:b5:79:bb:f7:f4:0c:c9:
95:d8:8c:b0:c1:8c:98:a5:4a:05:11:e9:f2:13:e2:
5a:95:90:c5:9b:30:c1:47:e3:e9:5d:ae:ed:a7:dd:
ff:95:21:14:7e:1a:5d:05:33:bb:87:f2:d4:4f:ce:
48:c4:4e:d0:2e:b1:d3:c4:67:70:1e:70:2b:32:b5:
36:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:13:E8:8A:D2:46:1A:C2:E2:84:F0:24:F0:46:AD:27:6F:FB:32:23
X509v3 Authority Key Identifier:
keyid:5F:38:B8:BA:75:8B:E2:72:3B:8E:F0:2F:50:BF:33:D3:8A:87:70:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xzi4unWL4nI7jvAvUL8z04qHcGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d26efa-4b50-406a-9ad3-0ede2b8e416a/1/QhPoitJGGsLihPAk8EatJ2_7MiM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/d26efa-4b50-406a-9ad3-0ede2b8e416a/1/Xzi4unWL4nI7jvAvUL8z04qHcGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.239.173.0/24
Signature Algorithm: sha256WithRSAEncryption
6a:f4:70:af:b0:6a:ad:18:a0:ed:11:a2:4a:9b:83:0b:4e:73:
74:97:f9:c9:ea:db:9b:38:fb:c2:fd:1f:d1:b8:cb:bc:e4:b8:
f3:ac:7b:89:67:c4:aa:6d:3b:dc:1e:10:d5:a0:91:66:22:c8:
b9:50:ff:95:9a:ab:3a:5c:d6:71:fe:05:d0:60:35:04:02:66:
21:4d:1c:f7:ca:9e:8c:55:06:45:66:9c:4e:45:4f:b7:58:ee:
75:f9:7b:f1:22:50:bd:e2:d9:7a:67:4e:45:7c:8d:f2:fb:0c:
df:0f:d3:09:57:c4:3a:1a:0e:4c:b2:1e:cd:4a:1c:22:e3:9f:
47:c3:2f:2d:7a:09:ef:c1:e5:db:7f:da:ac:e8:5c:d4:cf:c1:
d9:bc:9b:79:43:f7:ba:4c:d2:d4:67:53:f2:06:1b:6d:30:f3:
90:6e:ad:bb:fe:d8:7f:71:6c:4b:b4:d3:87:21:83:5b:ab:2a:
9c:81:a4:e7:4b:2e:cf:63:72:09:47:80:e6:13:58:af:5f:14:
63:3e:4b:a8:db:26:43:c5:2a:26:0f:64:d5:11:51:2a:43:9f:
68:59:34:b8:f2:bb:59:6e:67:35:3c:d8:e2:97:bf:73:12:f2:
5c:03:8d:89:a5:34:9f:f6:e5:1a:f9:64:8c:41:90:df:ae:59:
64:21:51:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 24 04:49:56 2026 by rpki-client