Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/QdsMUlVnLsMvAdw7ewc8SUwieSc.roa
File: QdsMUlVnLsMvAdw7ewc8SUwieSc.roa (raw, json)
Hash identifier: X2HS7Y9LD/hB1Jxjzd/iV3vbsuHNru/ctbOWx/7dWNg=
Subject key identifier: 41:DB:0C:52:55:67:2E:C3:2F:01:DC:3B:7B:07:3C:49:4C:22:79:27
Certificate issuer: /CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Certificate serial: 01A1A62C37E90ADCA55D404954C8DA0A916E
Authority key identifier: 49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/QdsMUlVnLsMvAdw7ewc8SUwieSc.roa
Signing time: Wed 04 Nov 2026 10:47:58 +0000
ROA not before: Wed 04 Nov 2026 10:47:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 130.183.0.0/16 maxlen: 16
134.104.0.0/16 maxlen: 16
134.107.0.0/16 maxlen: 16
139.19.0.0/16 maxlen: 16
141.5.0.0/16 maxlen: 24
149.217.0.0/16 maxlen: 16
192.68.254.0/24 maxlen: 24
2a02:d480::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:a6:2c:37:e9:0a:dc:a5:5d:40:49:54:c8:da:0a:91:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49f7c1a4677eb7826dae69de01a699b6201d6244
Validity
Not Before: Nov 4 10:47:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41db0c5255672ec32f01dc3b7b073c494c227927
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:bd:12:18:95:2b:37:78:6c:e7:79:3c:dd:f6:
5e:ad:87:a8:aa:77:b2:29:42:ac:43:bd:49:2e:99:
55:ba:fb:3a:0c:6c:0d:9f:12:15:6e:e7:a5:ab:19:
46:e3:a1:c5:46:03:99:36:7a:99:52:f3:78:45:55:
97:7a:f8:8d:8f:7f:61:72:6c:cd:e0:10:da:fb:ff:
5f:34:9c:41:f9:c6:fd:22:da:ae:5f:6b:6c:bc:ad:
c7:ce:bb:ef:a5:59:bc:3d:f3:20:cb:25:3a:15:29:
41:31:8c:87:23:91:60:89:7e:3e:b8:90:ea:96:c6:
31:4b:d3:78:16:5e:ef:0c:80:c0:c6:c3:5c:f2:02:
47:5d:20:90:ab:8f:ab:7e:fa:e1:43:ac:dc:bf:9d:
33:9e:34:c1:af:39:03:b8:ee:fa:ac:b9:c4:ca:81:
1a:cb:35:82:bb:2f:46:b1:4b:60:21:ee:83:07:75:
2c:ea:d2:90:d0:7e:38:b9:d3:70:c0:45:ce:fe:e5:
df:8f:f9:63:28:a5:53:0c:07:d1:3f:d5:24:b3:67:
24:f9:29:01:24:06:aa:c7:49:c2:95:c2:d2:cd:a7:
61:f7:f8:0c:a8:93:44:64:e9:60:1d:be:a0:d9:79:
2f:56:5a:11:8a:a0:46:2a:d6:32:d8:98:ff:93:89:
84:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:DB:0C:52:55:67:2E:C3:2F:01:DC:3B:7B:07:3C:49:4C:22:79:27
X509v3 Authority Key Identifier:
keyid:49:F7:C1:A4:67:7E:B7:82:6D:AE:69:DE:01:A6:99:B6:20:1D:62:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SffBpGd-t4JtrmneAaaZtiAdYkQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/QdsMUlVnLsMvAdw7ewc8SUwieSc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/4dbd63-76b1-4b03-9dea-50c16bdd5c24/1/SffBpGd-t4JtrmneAaaZtiAdYkQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.183.0.0/16
134.104.0.0/16
134.107.0.0/16
139.19.0.0/16
141.5.0.0/16
149.217.0.0/16
192.68.254.0/24
IPv6:
2a02:d480::/32
Signature Algorithm: sha256WithRSAEncryption
7b:48:f3:6d:00:4c:85:a1:74:38:af:6f:24:f5:c7:d1:21:d2:
03:02:23:bc:ae:19:c6:87:d8:2d:a2:ef:7a:70:f0:0a:b8:e0:
0f:1f:08:54:4d:90:07:02:17:d8:46:a8:eb:bd:f7:b3:9c:f5:
0e:97:b6:c1:28:e5:e3:74:6c:4f:c1:6b:36:29:1e:e6:73:c3:
58:01:c5:fb:81:7c:17:1b:29:ba:78:fa:41:18:2f:08:5b:02:
07:58:25:01:b7:48:30:2d:61:90:19:d0:ed:23:5e:3d:80:b4:
6f:74:4a:f3:5b:7c:f8:85:c2:61:36:ce:ff:58:d8:5f:91:d5:
89:c9:59:b2:f3:e7:f9:d2:bb:1e:33:01:65:0c:58:09:01:e8:
7e:c1:1d:03:0c:31:96:59:2e:70:e8:b4:50:e2:ca:37:e6:20:
b4:c0:67:10:6b:18:ca:9b:2f:fa:93:01:4c:89:e1:16:07:de:
a4:fe:8e:ea:3b:3f:8e:16:9d:2e:fd:b7:04:e7:28:80:bf:b3:
ec:8b:4e:8d:5f:5c:ca:7e:86:bb:97:2d:f6:a9:e4:ad:bb:dc:
76:af:05:a9:bc:a7:c7:4b:bb:ac:39:41:a2:3c:90:04:d4:ed:
3d:c8:aa:ad:0f:fe:eb:09:fa:fa:e3:4b:bd:f2:d1:96:35:64:
0e:40:e3:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 12:39:47 2026 by rpki-client