Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/QEGryiURhVI85Y_iwFPpO1kjb3E.roa
File: QEGryiURhVI85Y_iwFPpO1kjb3E.roa (raw, json)
Hash identifier: f7QZn8PJdOvgT/DCDoEpmb1SfJG64+IFdudonB3DpJU=
Subject key identifier: 40:41:AB:CA:25:11:85:52:3C:E5:8F:E2:C0:53:E9:3B:59:23:6F:71
Certificate issuer: /CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Certificate serial: 019DE7A95D22D32E0C9FCF85FD4B5640AF3E
Authority key identifier: F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/QEGryiURhVI85Y_iwFPpO1kjb3E.roa
Signing time: Sat 02 May 2026 07:48:49 +0000
ROA not before: Sat 02 May 2026 07:48:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198550
IP address blocks: 2a10:ab80:3e2::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.mft
rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:e7:a9:5d:22:d3:2e:0c:9f:cf:85:fd:4b:56:40:af:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f00bdcc444173f5994de34a3bf63f3ad9764c6d1
Validity
Not Before: May 2 07:48:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4041abca251185523ce58fe2c053e93b59236f71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:03:6d:45:01:d0:f8:6b:14:50:8b:d5:80:de:
5a:e2:38:dd:59:a5:ca:18:92:9b:6d:09:60:17:d1:
1a:44:ed:31:bc:f1:a4:e1:48:29:39:c3:63:f6:f4:
14:4f:78:66:fc:6e:6d:1e:0e:d4:c7:a0:92:30:b9:
d1:14:28:6a:2d:3a:65:99:ae:ad:0f:01:29:39:a2:
e0:3f:bd:1c:3e:61:42:15:66:8a:9e:50:e0:64:20:
1c:38:a8:24:11:e5:98:03:e1:5e:34:d8:e7:e4:23:
55:69:6d:e7:63:60:f1:17:85:d3:31:bd:cd:9e:10:
dd:7d:46:1e:29:2f:38:06:85:e5:de:26:e5:7e:b6:
39:0d:83:43:d0:e7:07:85:be:72:75:c4:23:5b:ea:
39:7e:37:e4:4e:aa:aa:26:37:51:37:0a:cf:58:40:
66:f5:0a:c8:d5:26:98:32:cf:86:da:16:b9:76:4c:
3b:51:e7:0a:53:9a:77:c7:59:b1:2e:10:02:14:fe:
26:38:46:ec:3c:0f:ba:d4:d9:78:89:02:d6:a6:8c:
f2:76:4d:a1:40:d5:7a:c4:94:f7:af:c1:c7:d7:09:
6f:f1:d3:48:39:9f:3f:01:c2:95:35:99:90:4d:3d:
f2:f3:d5:7d:90:4f:d6:a4:59:40:a0:9e:bb:cb:0b:
eb:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:41:AB:CA:25:11:85:52:3C:E5:8F:E2:C0:53:E9:3B:59:23:6F:71
X509v3 Authority Key Identifier:
keyid:F0:0B:DC:C4:44:17:3F:59:94:DE:34:A3:BF:63:F3:AD:97:64:C6:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8AvcxEQXP1mU3jSjv2PzrZdkxtE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/QEGryiURhVI85Y_iwFPpO1kjb3E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/d62de1-1173-488d-af16-cfa5a4b8986b/1/8AvcxEQXP1mU3jSjv2PzrZdkxtE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:ab80:3e2::/48
Signature Algorithm: sha256WithRSAEncryption
15:2f:ae:3d:8c:e8:fa:fe:77:2f:83:be:0f:41:05:60:ca:bb:
d6:93:c8:aa:ad:47:f7:19:d2:3a:c4:e5:d8:4f:aa:40:5e:22:
14:fa:96:7d:f0:21:fd:b8:70:f9:4d:ca:53:38:52:b5:19:66:
dd:df:d6:4a:42:db:f1:fd:f3:fe:aa:db:2a:52:fe:1c:21:82:
9f:81:d6:9b:8d:fb:bb:9c:1c:00:42:cb:92:e9:e4:01:af:cd:
25:8c:e0:a3:a0:f2:1c:01:75:54:60:cc:60:b6:69:60:46:3b:
2f:f2:f2:e0:2c:40:fa:fc:05:63:13:6e:43:ca:d6:36:86:2f:
ed:f6:38:93:53:63:2a:94:fe:4b:8b:20:aa:36:6b:d0:f7:72:
e6:71:fe:07:a1:55:25:64:10:95:5e:ce:92:48:2e:b4:07:f1:
a7:5b:a2:a9:34:0d:4e:21:6b:25:ae:5d:62:d4:7b:ba:a7:3c:
26:7e:68:9e:72:3b:71:bf:be:2f:d4:8b:70:10:5e:f0:35:ff:
d0:3c:8c:c6:37:bb:c7:c2:ac:7b:73:6f:99:2c:3d:22:ed:7a:
f9:a0:b6:90:0c:27:30:0b:52:c8:d1:d1:40:fa:45:83:8a:ab:
8a:4b:3e:f9:13:07:34:3e:b4:3f:55:f7:fe:fe:dd:0f:9b:88:
d7:99:4d:13
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 09:09:23 2026 by rpki-client