Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/QdihrKmCE1Rh70UAqVYhEifd0TQ.roa
File: QdihrKmCE1Rh70UAqVYhEifd0TQ.roa (raw, json)
Hash identifier: GFJCZGicC3djRWfTbGFC1Be0jS8YAjHvnwA28XAg/XU=
Subject key identifier: 41:D8:A1:AC:A9:82:13:54:61:EF:45:00:A9:56:21:12:27:DD:D1:34
Certificate issuer: /CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Certificate serial: 019DA9FCA7D39E2EDC40E43A0DBAEF6FFBAC
Authority key identifier: 5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/QdihrKmCE1Rh70UAqVYhEifd0TQ.roa
Signing time: Mon 20 Apr 2026 08:23:20 +0000
ROA not before: Mon 20 Apr 2026 08:23:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206987
IP address blocks: 178.214.209.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 21:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:a9:fc:a7:d3:9e:2e:dc:40:e4:3a:0d:ba:ef:6f:fb:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5c6b0c001a99ab6296e242173bf7e7fdcf03c019
Validity
Not Before: Apr 20 08:23:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41d8a1aca982135461ef4500a956211227ddd134
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:ed:62:c0:f1:7a:68:92:8b:d6:84:91:7d:e0:
4d:d8:e7:ee:b3:56:0f:cf:43:08:22:59:be:3d:6e:
09:67:40:a0:d6:98:da:b9:52:36:2f:8c:41:4d:bf:
11:8f:17:9e:e4:2d:ec:74:b7:4d:a3:e8:8f:39:a8:
a5:e5:7e:84:61:fe:b1:54:53:32:1a:23:23:b9:45:
a2:d8:ec:86:54:89:6d:ce:01:72:9e:92:32:f6:b5:
95:a2:b8:61:f1:f5:32:0b:58:44:5a:1f:74:8d:03:
6b:6f:82:d5:a0:ae:bf:1e:94:3a:14:f4:3c:0d:00:
06:1a:e6:07:31:c9:cd:ad:f0:7a:d7:22:14:ee:76:
0a:e6:f0:9a:73:c1:6c:a8:9b:7d:b0:bf:e2:06:a1:
99:59:92:19:38:bc:13:5b:26:49:c4:b4:0b:2b:0a:
d1:29:84:af:ae:16:f8:d4:e2:b6:05:41:6f:1d:92:
03:b2:80:2a:94:22:a4:0a:6d:8f:d9:fc:82:aa:c6:
d7:97:13:4e:42:98:c4:ed:13:52:c2:1e:bc:03:ac:
73:63:41:4a:53:19:50:4b:48:0c:0c:45:0b:62:ec:
a5:91:56:c7:2f:2f:7a:71:f7:81:38:fa:cf:98:c2:
39:25:e2:ba:19:3b:d5:d7:e6:c8:52:59:01:bf:b1:
7c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D8:A1:AC:A9:82:13:54:61:EF:45:00:A9:56:21:12:27:DD:D1:34
X509v3 Authority Key Identifier:
keyid:5C:6B:0C:00:1A:99:AB:62:96:E2:42:17:3B:F7:E7:FD:CF:03:C0:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XGsMABqZq2KW4kIXO_fn_c8DwBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/QdihrKmCE1Rh70UAqVYhEifd0TQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/c89677-1d9a-418d-8593-c18e3ccc742b/1/XGsMABqZq2KW4kIXO_fn_c8DwBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.214.209.0/24
Signature Algorithm: sha256WithRSAEncryption
b6:06:78:1b:21:01:41:3c:a5:13:f4:1e:de:f1:bb:f3:55:33:
46:e5:7b:d3:8c:f2:7e:10:0e:29:e0:51:df:23:c0:d3:90:f0:
9f:e9:18:d3:41:ad:71:ab:d4:f8:7b:40:0a:11:1b:3e:11:08:
76:b4:b2:c8:e9:ff:71:7c:fd:e7:5f:b8:a9:34:d7:a2:86:0f:
93:da:cd:fa:7c:e1:a2:43:ab:d8:fa:1d:7d:9e:9d:79:4c:1c:
a7:66:80:b5:d4:0a:d9:54:55:b8:1b:88:d7:b3:cc:21:38:21:
40:50:5c:d4:ec:58:9a:96:f7:9e:f4:ab:f2:94:c3:d8:fa:f5:
16:a0:a8:4b:68:64:98:62:48:ed:6b:46:de:8b:cf:99:60:92:
6e:64:c4:20:e2:32:d8:11:56:ec:5b:5c:7b:1b:85:bb:93:ab:
5d:f2:7e:06:2a:39:a4:7d:9a:48:e7:a5:da:27:c7:31:3f:17:
32:2d:11:90:af:d4:ab:3c:0c:89:fb:cf:56:d9:07:d6:e8:05:
8c:b2:e4:e0:ad:5d:28:10:65:60:49:79:b4:4e:e7:84:cb:ee:
48:c2:fc:1b:25:10:0d:d6:45:28:33:c3:f2:fc:a2:69:07:ce:
77:5e:82:24:7a:06:0f:f0:f1:5c:2c:4c:cf:03:21:dc:bb:de:
4e:3f:17:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 08:28:13 2026 by rpki-client