Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QqzgWNCLZcWDVRL_QsU7E8-_X1s.roa
File: QqzgWNCLZcWDVRL_QsU7E8-_X1s.roa (raw, json)
Hash identifier: FN56Wp3Nh5vHGPFpqkfCLZ2cOlMjeraDkevCQ9ofCZ8=
Subject key identifier: 42:AC:E0:58:D0:8B:65:C5:83:55:12:FF:42:C5:3B:13:CF:BF:5F:5B
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D05925AB7EA159FEB4301D1528B33B0AD
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QqzgWNCLZcWDVRL_QsU7E8-_X1s.roa
Signing time: Thu 19 Mar 2026 10:09:30 +0000
ROA not before: Thu 19 Mar 2026 10:09:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135391
IP address blocks: 109.176.252.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:05:92:5a:b7:ea:15:9f:eb:43:01:d1:52:8b:33:b0:ad
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Mar 19 10:09:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42ace058d08b65c5835512ff42c53b13cfbf5f5b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:a1:fb:a2:53:fd:40:72:be:00:b9:b5:0f:a3:
ef:65:6a:4d:11:28:bb:4e:e8:13:7c:6b:b1:91:d7:
a7:0f:d5:20:a8:db:1f:21:09:69:9b:44:d6:55:ee:
a1:84:ad:42:65:a1:f4:0a:68:b0:61:bc:fb:e3:4e:
45:70:30:3d:f9:f2:fb:c2:cf:49:ed:6b:30:83:ca:
b2:9e:01:98:f6:f6:c8:cc:64:d2:f6:01:78:5e:b7:
69:c9:fc:a6:44:cf:43:56:45:b8:0a:bd:87:f9:56:
a0:be:a8:db:72:5f:bd:dd:c2:4c:c7:ae:99:38:01:
16:c8:c3:cb:1b:48:98:b2:10:28:dc:87:64:14:47:
75:32:d3:87:d8:5f:be:52:19:8c:3b:13:ee:59:5d:
82:56:1e:cf:ed:e5:0f:d9:dc:47:6f:89:00:d7:e0:
71:c5:ec:6d:47:3c:8c:81:28:78:2a:e9:4b:04:7f:
33:ab:17:5e:45:c8:cf:58:6b:ab:c1:5e:c0:5f:2a:
29:08:23:c4:33:87:6c:6c:03:7c:45:9f:44:d7:16:
7c:d5:20:52:7d:79:e2:1f:92:85:83:de:20:52:88:
ae:a8:c6:c6:27:a8:47:a7:e8:af:11:40:a4:08:d6:
34:ba:3c:2d:b3:30:d8:22:68:28:6b:46:a6:56:cf:
1c:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:AC:E0:58:D0:8B:65:C5:83:55:12:FF:42:C5:3B:13:CF:BF:5F:5B
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/QqzgWNCLZcWDVRL_QsU7E8-_X1s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.176.252.0/24
Signature Algorithm: sha256WithRSAEncryption
a6:62:cd:21:a8:f5:f2:67:d9:ac:bb:25:87:51:55:58:60:62:
d0:66:dc:87:2b:fa:d6:fa:ab:db:93:35:61:a7:b5:b2:b9:85:
0c:71:41:b8:25:2d:45:c5:4b:82:90:24:a3:8a:46:0c:fe:18:
88:a5:dd:72:d9:5e:35:3c:22:95:82:ac:a6:a0:c0:db:4e:a6:
cc:43:de:c5:86:be:96:52:c4:0a:3c:fe:4e:9f:f6:98:e0:33:
f4:2a:cc:7f:1f:7e:b3:3a:8e:da:4b:e2:a4:f5:4c:00:ca:3e:
e5:93:0e:ff:12:6d:c6:af:a5:dd:3a:58:db:be:6c:69:02:62:
39:bf:f8:75:e8:4b:ef:85:8a:44:96:36:ef:82:88:58:9a:09:
2b:f8:f2:7e:8d:af:4b:7d:c7:d7:03:f3:45:c7:0b:68:13:5b:
fe:b4:88:66:aa:2c:22:a0:ee:67:4e:f3:37:3b:d2:3c:d4:ee:
4e:64:2a:95:98:a1:d1:74:f6:f9:b7:7e:fa:1d:c1:d9:5c:36:
b8:a2:1b:ba:ea:be:98:de:cb:9b:ba:fb:6a:bb:8a:e5:d4:84:
32:72:42:50:29:97:df:fe:05:5d:4a:ed:3a:a0:54:44:a6:55:
c4:5f:70:55:ff:50:ad:8d:f9:f6:8e:c9:08:e9:3b:af:1a:01:
50:40:78:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 20:06:39 2026 by rpki-client