Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QZrF2ouSjSspUYdgbSGZR5E0MfI.roa
File: QZrF2ouSjSspUYdgbSGZR5E0MfI.roa (raw, json)
Hash identifier: 4dETljiCbzvLRD7S6kbPs5tu6jlroUuhdERDcTTlBpg=
Subject key identifier: 41:9A:C5:DA:8B:92:8D:2B:29:51:87:60:6D:21:99:47:91:34:31:F2
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D1B624DBC909BBF6D38BAA5B7C08F4822
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QZrF2ouSjSspUYdgbSGZR5E0MfI.roa
Signing time: Mon 23 Mar 2026 15:48:40 +0000
ROA not before: Mon 23 Mar 2026 15:48:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 80.240.88.0/24 maxlen: 24
81.168.123.0/24 maxlen: 24
82.152.122.0/24 maxlen: 24
89.31.234.0/24 maxlen: 24
217.145.73.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 22:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1b:62:4d:bc:90:9b:bf:6d:38:ba:a5:b7:c0:8f:48:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 23 15:48:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=419ac5da8b928d2b295187606d219947913431f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:7b:cd:5c:9f:76:6b:c7:c2:ab:a6:e4:25:ca:
d1:a0:29:00:0c:d7:32:7c:bd:9e:5a:c1:cb:15:2d:
29:41:b3:e5:24:9e:e4:93:bd:48:25:a8:16:20:23:
bc:0d:59:fa:45:30:ec:ef:2e:46:a2:d3:0e:7b:a2:
49:8c:7b:ae:32:ee:ec:46:d7:39:05:5c:ab:68:94:
c1:cc:5e:9f:bd:17:f8:76:e6:b7:4e:3b:b5:c8:92:
c3:92:84:86:89:f9:32:bc:2b:d1:17:eb:a8:f2:1f:
f5:93:a0:b0:73:cf:e6:33:87:4e:6f:1a:07:ac:56:
c6:5c:95:de:ff:91:49:87:e6:c4:73:8e:1f:27:46:
8e:e7:a6:4f:93:bc:27:72:17:a2:8b:fa:a3:74:ef:
87:b5:46:4c:62:a2:86:29:68:67:6c:eb:45:c4:86:
7b:09:dd:f0:1d:c8:9b:c1:70:ce:e0:94:6e:5f:2c:
a3:f9:dd:f0:1b:7a:66:d4:3d:63:0c:f0:57:46:3e:
9a:46:d8:6d:ed:e7:7c:c7:40:cb:75:c5:d8:c4:e1:
83:80:7a:09:ae:fe:cb:d6:32:ac:a1:35:a1:65:0d:
2e:3d:73:d5:90:b5:af:4c:b0:a7:0d:e7:9e:70:48:
fc:0a:f9:35:0c:96:73:89:b4:f2:00:77:d4:5c:11:
ad:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:9A:C5:DA:8B:92:8D:2B:29:51:87:60:6D:21:99:47:91:34:31:F2
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QZrF2ouSjSspUYdgbSGZR5E0MfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.88.0/24
81.168.123.0/24
82.152.122.0/24
89.31.234.0/24
217.145.73.0/24
Signature Algorithm: sha256WithRSAEncryption
14:1d:c5:5e:9c:bd:ce:0c:d9:27:4b:42:c0:fa:b0:0e:0e:90:
90:77:05:c6:c2:e1:df:cb:ab:60:40:78:42:2f:e0:b9:27:61:
c1:1f:65:77:ab:8a:0d:6e:b3:e4:58:8d:a0:b6:dd:88:56:8e:
fb:5f:a5:af:fd:a9:a8:f2:dc:3c:e0:ab:75:29:ca:78:fa:fb:
f0:ce:3c:03:8d:f2:28:54:5c:ed:44:06:7b:d2:9d:79:1b:87:
89:26:f3:93:b5:d7:aa:64:ac:56:39:68:81:1c:31:11:66:c6:
0b:39:2b:49:71:1a:49:a1:0f:c0:ae:fe:ed:fd:18:e5:57:e7:
f1:39:d4:29:ed:72:50:1d:80:77:c3:b4:29:4c:9c:04:0d:8e:
72:10:ab:ec:42:2c:61:02:fe:22:34:78:76:22:5f:a3:3b:6d:
ef:8e:3a:d7:6c:81:c6:f6:dd:f4:fb:93:4f:dd:78:7a:e4:a1:
c5:ab:78:96:4f:d9:e8:d7:b7:fb:34:eb:b2:f0:e1:1c:16:06:
49:e1:0c:4d:2d:fa:75:8b:25:f7:2b:f6:08:56:17:9c:7d:c8:
b9:ac:46:67:48:19:9e:68:cd:d1:63:89:53:c6:75:cf:5f:e2:
48:f7:53:7d:40:30:a2:4f:a1:f4:32:ab:d7:ac:16:29:5c:66:
6a:bd:e2:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 08:37:10 2026 by rpki-client