Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/QuoK3kQiLfxDB9Vn3IVZ9MTELXs.roa
File: QuoK3kQiLfxDB9Vn3IVZ9MTELXs.roa (raw, json)
Hash identifier: acy/62zh/8cBwnSa4bXBmJewCaA1koJ1fIjWjxzZ/1I=
Subject key identifier: 42:EA:0A:DE:44:22:2D:FC:43:07:D5:67:DC:85:59:F4:C4:C4:2D:7B
Certificate issuer: /CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Certificate serial: 019B7F157A34A0838D1853E898B64A0DD573
Authority key identifier: 04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/QuoK3kQiLfxDB9Vn3IVZ9MTELXs.roa
Signing time: Fri 02 Jan 2026 14:21:12 +0000
ROA not before: Fri 02 Jan 2026 14:21:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210572
IP address blocks: 77.93.52.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.mft
rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:15:7a:34:a0:83:8d:18:53:e8:98:b6:4a:0d:d5:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040dd3d3c52d4c6fa51b7a833578cefb3ab26649
Validity
Not Before: Jan 2 14:21:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42ea0ade44222dfc4307d567dc8559f4c4c42d7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b0:ef:59:39:4e:3d:79:3d:36:43:84:c0:5d:
63:32:a5:75:b2:c0:30:03:04:34:d1:13:16:a4:7c:
b7:8d:31:4f:c3:e2:8e:6b:e7:a9:db:5c:18:a6:2c:
72:52:ee:43:16:6d:f1:ee:0a:5d:03:79:af:63:bc:
54:ba:96:be:38:42:07:78:cf:f4:56:03:78:65:6e:
ea:2f:76:f5:2f:38:0d:23:dd:2f:5e:4a:8e:4d:3d:
1f:ee:ab:77:62:81:6b:e9:34:2b:db:89:a7:51:71:
9c:2b:1d:b9:6f:30:0e:19:c2:67:5c:50:d4:36:87:
06:5b:db:58:47:5e:99:a9:d5:d2:86:35:10:32:a4:
b4:15:8e:9c:d8:cf:ee:77:27:b5:93:2d:9d:72:50:
13:dc:26:db:42:42:8f:6a:74:ba:b6:11:bf:70:e5:
42:72:65:c6:a9:ae:42:3d:af:22:88:8e:1d:3d:e5:
68:69:ec:46:e2:09:bd:c5:81:15:4b:0f:33:43:03:
74:a0:4a:b9:69:00:6b:eb:f6:fa:c3:d0:1e:b3:e8:
7a:54:c2:0a:c2:c4:f4:c0:d2:a8:b7:e3:3c:65:a4:
4e:a8:65:ad:9a:a9:b2:ac:9c:24:5e:e2:4b:c5:fa:
dd:3d:81:df:be:2a:e2:c6:77:a7:26:7d:29:35:08:
57:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:EA:0A:DE:44:22:2D:FC:43:07:D5:67:DC:85:59:F4:C4:C4:2D:7B
X509v3 Authority Key Identifier:
keyid:04:0D:D3:D3:C5:2D:4C:6F:A5:1B:7A:83:35:78:CE:FB:3A:B2:66:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BA3T08UtTG-lG3qDNXjO-zqyZkk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/QuoK3kQiLfxDB9Vn3IVZ9MTELXs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/ffc349-f326-4096-bcb3-c2c2acb908bc/1/BA3T08UtTG-lG3qDNXjO-zqyZkk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.93.52.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:f2:37:e1:b8:7a:bc:f2:da:17:6b:c3:59:11:db:a1:89:05:
3b:f4:4f:a4:d5:a1:cc:96:28:8c:7e:64:22:64:17:76:2d:02:
dc:86:ce:c4:5e:af:b9:9b:20:1d:04:c2:72:90:c3:89:ff:cd:
a8:9d:dc:6b:15:a3:ab:d0:e9:4c:37:f1:60:ad:03:89:ff:cb:
f5:b0:bf:62:86:36:b4:4e:ed:4c:57:f2:60:1f:53:d4:5b:b8:
78:11:05:56:96:37:c3:cb:9d:3a:e9:58:f7:58:90:7b:5e:9a:
ba:be:12:6c:f3:8d:63:8f:f4:91:9e:41:7e:4d:3a:f1:29:44:
5b:b0:03:1e:65:c8:0d:8e:80:de:45:a9:60:c7:3f:30:98:99:
ea:2f:ba:a1:6f:50:45:54:8d:df:da:e2:22:54:23:29:0d:fe:
aa:30:d3:f4:25:f8:25:1e:67:43:d1:b1:fb:7c:6d:f7:ca:4d:
68:b3:e9:2c:56:ba:2c:66:ab:85:5a:b8:0d:13:f9:ab:cf:09:
31:6a:ca:05:2a:15:b6:3b:31:12:ae:45:7f:b7:01:39:2b:7c:
7e:a5:97:a1:17:14:d1:4b:83:84:8a:54:66:c0:fa:7c:68:b8:
69:f5:7a:2e:11:9d:a3:39:e2:3f:c4:a0:64:1f:cb:d3:43:d7:
87:0a:f2:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 05:26:37 2026 by rpki-client