Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/QZywUSO8_jrXJ0WW9xyPaE_CGC4.roa
File: QZywUSO8_jrXJ0WW9xyPaE_CGC4.roa (raw, json)
Hash identifier: G1edv0qqbRacY+z7YkK088C60r0xo0XAMMQqbmfvmxw=
Subject key identifier: 41:9C:B0:51:23:BC:FE:3A:D7:27:45:96:F7:1C:8F:68:4F:C2:18:2E
Certificate issuer: /CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
Certificate serial: 019F2368BF89C03F72DB1576E57D04441A4B
Authority key identifier: F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/QZywUSO8_jrXJ0WW9xyPaE_CGC4.roa
Signing time: Thu 02 Jul 2026 15:18:15 +0000
ROA not before: Thu 02 Jul 2026 15:18:15 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 195.38.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:bf:89:c0:3f:72:db:15:76:e5:7d:04:44:1a:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f99b28f8f97df09ac4fd7701e9330d4f45b1e25e
Validity
Not Before: Jul 2 15:18:15 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=419cb05123bcfe3ad7274596f71c8f684fc2182e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:1c:d7:28:c8:cd:e8:eb:4a:88:92:bb:de:05:
36:23:91:ba:0f:4a:36:15:04:de:d5:cc:3e:86:92:
2a:fa:db:aa:cd:4a:b6:9f:0c:5f:aa:be:3d:5b:e1:
2a:9f:34:c0:fe:00:ae:fc:e9:1d:de:83:91:4e:04:
e4:19:7f:e0:3d:a5:fe:ab:e8:43:d0:1d:16:45:e8:
84:20:63:eb:a4:0f:27:8d:3d:27:11:81:63:fd:af:
a6:cb:76:d7:fd:9b:dc:52:11:79:d3:42:33:b2:1e:
fd:bd:49:c7:2c:b6:f1:f0:9f:1a:6b:3e:ab:b7:0d:
26:d1:fd:32:d7:be:e9:3a:1d:98:37:62:f0:e2:13:
72:db:72:40:bc:e8:a5:70:21:e4:52:58:75:fe:82:
72:e2:ea:be:cf:5c:75:9c:f9:0d:2a:e9:0d:59:5e:
6f:65:47:77:8d:5d:28:5b:43:36:c0:94:15:5a:20:
93:ea:2b:77:19:0e:c4:a0:4d:b5:cd:56:26:7b:21:
9f:21:40:ff:37:23:3a:e4:58:65:e2:b1:65:82:8a:
27:ce:9c:74:6c:27:9d:72:11:e5:c3:ed:b6:06:6a:
c0:e2:07:39:6c:4d:ed:d6:25:bb:e5:0a:45:4c:fa:
94:37:8e:37:8e:03:b2:5b:40:bd:b7:b7:76:5f:45:
58:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9C:B0:51:23:BC:FE:3A:D7:27:45:96:F7:1C:8F:68:4F:C2:18:2E
X509v3 Authority Key Identifier:
keyid:F9:9B:28:F8:F9:7D:F0:9A:C4:FD:77:01:E9:33:0D:4F:45:B1:E2:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/QZywUSO8_jrXJ0WW9xyPaE_CGC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/2f5f22-7439-4208-8b39-7d11fcf17123/1/1-Zso-Pl98JrE_XcB6TMNT0Wx4l4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.38.19.0/24
Signature Algorithm: sha256WithRSAEncryption
25:a7:e8:9e:cc:b4:c2:32:24:36:1b:13:34:15:e7:1e:fc:17:
18:dc:10:fa:8e:47:bb:f2:3a:e5:89:6a:cb:e0:b1:c9:2c:ac:
ab:4f:47:bf:2f:fe:62:b6:d4:ba:73:21:4c:6f:5c:0b:b5:eb:
ba:4b:ae:4d:10:f1:64:7c:ca:cf:01:da:1d:40:e2:a7:aa:db:
5e:22:ed:26:74:b4:fa:f7:83:01:5a:ea:77:91:5e:64:e6:83:
9c:5e:63:4d:1d:03:b1:1e:5a:93:2e:de:06:be:02:e9:7b:e4:
41:f1:7d:9b:31:c7:93:7d:ef:2d:17:8c:45:28:4e:cf:76:73:
19:c7:eb:83:30:8d:c3:6d:d5:46:5b:3f:e8:5c:b4:a6:07:c1:
f3:12:d3:9f:13:a6:fb:b5:50:67:78:16:6f:e4:1a:08:79:ab:
f1:77:d4:d2:ae:99:bf:37:6c:6d:6b:cb:d7:e5:7d:94:13:66:
e0:86:a4:69:08:b9:b2:18:ad:e0:32:49:89:86:03:63:dd:88:
59:4b:6a:44:f4:8c:26:ec:9d:d5:60:c8:1f:7a:5a:cb:f3:66:
2d:7d:e1:ef:ce:72:e6:34:bc:cf:76:12:a9:d8:0c:a2:e5:02:
28:c9:ac:22:47:f3:e2:d5:98:06:fa:59:5c:55:e1:5a:df:db:
71:82:0d:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 11:43:27 2026 by rpki-client