Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/7f/5e8d1a-dffe-4783-87f3-5ecd05fc99a6/1/QrJnt7Nj3OmaHfyjq-PtVEJtyy0.roa
File: QrJnt7Nj3OmaHfyjq-PtVEJtyy0.roa (raw, json)
Hash identifier: E3QnNjp4V5cy2WTVSsSZqyhPRRSFQuH44knBl/3Gpgk=
Subject key identifier: 42:B2:67:B7:B3:63:DC:E9:9A:1D:FC:A3:AB:E3:ED:54:42:6D:CB:2D
Certificate issuer: /CN=d65e6e13440312b91aa6eecc5721c34df0cac5d3
Certificate serial: 01A0484920AAB33CF66AAC9CF1353E6B42EC
Authority key identifier: D6:5E:6E:13:44:03:12:B9:1A:A6:EE:CC:57:21:C3:4D:F0:CA:C5:D3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1l5uE0QDErkapu7MVyHDTfDKxdM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/5e8d1a-dffe-4783-87f3-5ecd05fc99a6/1/QrJnt7Nj3OmaHfyjq-PtVEJtyy0.roa
Signing time: Fri 28 Aug 2026 12:12:27 +0000
ROA not before: Fri 28 Aug 2026 12:12:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43031
IP address blocks: 85.202.0.0/20 maxlen: 20
2001:67c:2000::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/5e8d1a-dffe-4783-87f3-5ecd05fc99a6/1/1l5uE0QDErkapu7MVyHDTfDKxdM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/5e8d1a-dffe-4783-87f3-5ecd05fc99a6/1/1l5uE0QDErkapu7MVyHDTfDKxdM.mft
rsync://rpki.ripe.net/repository/DEFAULT/1l5uE0QDErkapu7MVyHDTfDKxdM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:48:49:20:aa:b3:3c:f6:6a:ac:9c:f1:35:3e:6b:42:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d65e6e13440312b91aa6eecc5721c34df0cac5d3
Validity
Not Before: Aug 28 12:12:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42b267b7b363dce99a1dfca3abe3ed54426dcb2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:7a:ac:bd:80:0b:01:70:3a:57:42:2b:93:2a:
6d:29:39:ae:d5:9a:58:51:1c:29:e8:89:93:16:42:
21:ae:ba:12:41:61:cc:d9:a0:4d:34:a1:38:1b:a5:
d1:ff:58:af:e2:00:08:d0:e7:f9:92:fd:3d:81:08:
cc:29:60:a0:a0:52:dc:ad:2d:a6:fc:15:04:36:4a:
71:7f:51:a1:e8:6d:c9:0d:39:2d:26:93:2b:72:ac:
fc:75:d6:b3:30:80:ff:de:d5:55:dc:af:ff:14:96:
fb:3c:d2:04:b2:4c:4f:c1:a5:29:e7:92:c7:b5:5f:
80:dd:dd:e3:35:53:ca:ca:47:c7:41:f2:13:1a:a9:
36:d0:0d:1a:a5:bf:2c:7c:7c:bd:46:a3:a3:2a:a9:
a7:36:e6:ae:94:45:c7:51:70:a6:ff:9e:d0:f9:97:
cd:68:3c:0c:3c:4f:63:49:6f:0f:18:a1:f7:50:20:
99:ec:34:3b:e1:86:ed:52:ef:dd:b0:6a:a7:ac:fd:
e3:aa:d4:7e:30:bd:1e:ff:2d:d4:e1:e3:a0:31:09:
5e:6d:cf:67:f5:34:0b:9b:85:1d:41:17:17:2f:e9:
72:e5:9a:a8:73:36:94:58:d9:1a:dd:21:9c:cc:9c:
30:ee:29:ab:8b:68:da:8f:e4:34:d0:1d:07:d4:27:
8d:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:B2:67:B7:B3:63:DC:E9:9A:1D:FC:A3:AB:E3:ED:54:42:6D:CB:2D
X509v3 Authority Key Identifier:
keyid:D6:5E:6E:13:44:03:12:B9:1A:A6:EE:CC:57:21:C3:4D:F0:CA:C5:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1l5uE0QDErkapu7MVyHDTfDKxdM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5e8d1a-dffe-4783-87f3-5ecd05fc99a6/1/QrJnt7Nj3OmaHfyjq-PtVEJtyy0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/5e8d1a-dffe-4783-87f3-5ecd05fc99a6/1/1l5uE0QDErkapu7MVyHDTfDKxdM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.202.0.0/20
IPv6:
2001:67c:2000::/48
Signature Algorithm: sha256WithRSAEncryption
96:81:04:64:44:b0:d2:72:fc:75:e2:51:24:cd:a5:13:01:fa:
72:d1:ba:c2:17:9f:8f:4f:c7:e7:9c:be:25:b2:56:f3:88:66:
6d:84:e1:fa:19:ad:0b:42:65:08:a4:e8:85:39:25:56:01:f5:
56:e8:26:36:dc:a6:e9:80:25:f9:81:9e:42:01:fd:27:eb:08:
c7:a9:17:ba:bb:36:2e:0e:86:14:62:1b:15:48:e6:f3:8e:0f:
f7:7c:dc:fd:ef:0b:88:c5:c9:f2:6e:23:2d:01:50:9a:ab:e6:
8d:76:66:47:91:39:fc:ed:74:42:3e:fd:cc:61:21:e7:e6:36:
7e:05:62:25:82:60:26:db:75:bb:d3:56:e4:d1:4b:15:ed:eb:
6c:ca:9d:53:3f:7f:31:6f:7b:98:15:ee:76:af:a6:95:dd:4f:
0b:23:5a:5c:b0:3b:9d:7f:bf:3e:66:dd:79:63:64:8b:c7:fd:
30:99:8e:cd:3f:b7:f3:c8:4c:d9:df:77:04:a7:36:83:06:e0:
44:a8:e0:2f:dc:07:3c:c1:26:b9:fa:11:26:71:e3:10:64:0f:
fd:c0:43:2b:47:84:30:a5:b0:1b:5f:55:23:69:58:e0:8b:84:
db:a3:1f:d4:20:77:fc:5e:44:18:f0:6b:b6:68:3a:44:72:42:
da:12:25:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 06:49:40 2026 by rpki-client