Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/QG5DFr6piY7-9vaaVhpr5PmFziU.roa
File: QG5DFr6piY7-9vaaVhpr5PmFziU.roa (raw, json)
Hash identifier: azODlTEeVfmyD9EHvQMxn8h5bi9MvzrkVrf2cKim+E0=
Subject key identifier: 40:6E:43:16:BE:A9:89:8E:FE:F6:F6:9A:56:1A:6B:E4:F9:85:CE:25
Certificate issuer: /CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Certificate serial: 019DF2E5F275C7AC1F1091EA5E0674F9F4FB
Authority key identifier: 6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/QG5DFr6piY7-9vaaVhpr5PmFziU.roa
Signing time: Mon 04 May 2026 12:10:49 +0000
ROA not before: Mon 04 May 2026 12:10:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207743
IP address blocks: 188.74.140.0/22 maxlen: 22
188.119.156.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f2:e5:f2:75:c7:ac:1f:10:91:ea:5e:06:74:f9:f4:fb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b233d75508b4e85cccf44349a7cb703198d1d26
Validity
Not Before: May 4 12:10:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=406e4316bea9898efef6f69a561a6be4f985ce25
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:42:c8:98:77:6a:d3:8a:9c:66:1f:f6:b1:c0:
a7:d6:2e:e3:27:de:3e:c5:c4:3c:84:2e:4e:e9:5a:
10:b3:4f:51:f1:fb:e8:88:1a:5f:18:df:8d:6a:27:
54:66:b2:a0:db:f1:44:4c:0b:e1:85:33:4e:eb:62:
75:da:ff:c3:b3:51:81:3a:4b:ef:de:57:43:1c:1a:
c9:76:04:4f:89:ee:97:9a:ee:5b:c6:47:59:3f:1d:
a6:34:ad:91:98:8a:d5:7c:87:ba:d3:27:4e:67:cf:
20:12:c3:2b:40:36:e2:cb:1d:7e:1b:5c:c1:3e:1d:
48:7b:8c:df:26:20:43:3f:92:6c:14:fa:7f:e9:82:
da:7b:d0:c0:21:a1:bb:00:7c:0a:a3:e9:3a:70:f7:
25:c9:f2:48:1b:85:e2:f5:50:01:6e:e6:bc:bf:b9:
5a:91:16:3e:81:09:a4:80:c4:90:72:36:92:cc:ad:
3f:0e:e7:26:bd:b8:43:c5:ea:7d:fa:72:ce:bc:cd:
a5:6f:0a:b9:d7:63:39:6a:57:66:fa:4a:07:22:30:
c0:ae:3d:78:b7:93:4c:5c:66:03:e9:87:bc:05:99:
81:45:66:34:05:4a:10:17:01:1c:f9:97:6d:e8:c1:
10:f8:9c:c0:4a:06:af:5f:cf:9e:9b:eb:0e:23:e1:
54:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6E:43:16:BE:A9:89:8E:FE:F6:F6:9A:56:1A:6B:E4:F9:85:CE:25
X509v3 Authority Key Identifier:
keyid:6B:23:3D:75:50:8B:4E:85:CC:CF:44:34:9A:7C:B7:03:19:8D:1D:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ayM9dVCLToXMz0Q0mny3AxmNHSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/QG5DFr6piY7-9vaaVhpr5PmFziU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/9d9192-273c-4ca9-b2ba-fa9cb51cd0f1/1/ayM9dVCLToXMz0Q0mny3AxmNHSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.74.140.0/22
188.119.156.0/23
Signature Algorithm: sha256WithRSAEncryption
7c:4d:55:8e:59:b6:a6:b2:ed:7a:0f:92:4c:e6:9a:c4:5f:4f:
22:11:f0:f9:a8:26:e0:c4:71:4d:9d:0a:ac:e7:ae:29:62:ed:
f3:06:83:fd:ab:7e:82:e6:10:24:67:06:1d:de:51:0e:1a:c4:
b3:fb:29:c9:99:08:e7:c1:7e:37:15:21:54:3e:74:30:12:50:
4c:72:81:ff:19:79:fd:61:f1:e9:b1:62:31:01:18:6d:6c:ea:
3e:e2:dd:62:10:93:b1:f7:c3:31:ef:02:90:10:17:16:33:a8:
2c:9c:cb:94:db:e7:d8:bb:0b:4a:d3:69:99:7f:73:03:05:11:
c5:a2:9c:4a:a5:c2:96:b1:97:90:e5:fa:6c:9d:f1:83:57:e6:
5b:59:e2:8a:84:46:9b:ea:b6:1a:6d:6e:ad:3a:38:f7:ae:4d:
b5:cf:3a:03:56:d6:77:8c:29:6f:23:af:80:c2:1a:65:8b:6b:
16:e9:3e:9c:fd:19:61:4a:35:89:c5:91:e3:eb:6d:7e:35:8a:
53:14:42:af:0d:3b:29:22:a4:6b:73:a5:53:b3:7c:00:56:1e:
c3:fe:af:13:d3:e8:42:4e:ec:4b:ec:d4:b1:31:37:57:fc:06:
5f:3f:99:28:c8:7b:0e:8e:62:89:ef:8e:c2:52:06:fd:d3:ad:
e5:89:e3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 13 01:42:17 2026 by rpki-client