Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/QVx-c0uxJ6cnVv8qqQmJQLhYFMc.roa
File: QVx-c0uxJ6cnVv8qqQmJQLhYFMc.roa (raw, json)
Hash identifier: 1ivrHH9AyHoiLq0LSgel2vvBx7ZH4f17hH99MOdtXDE=
Subject key identifier: 41:5C:7E:73:4B:B1:27:A7:27:56:FF:2A:A9:09:89:40:B8:58:14:C7
Certificate issuer: /CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Certificate serial: 01A0C8B0D5DD11C8081477A0B85970170236
Authority key identifier: 17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/QVx-c0uxJ6cnVv8qqQmJQLhYFMc.roa
Signing time: Tue 22 Sep 2026 10:37:07 +0000
ROA not before: Tue 22 Sep 2026 10:37:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214266
IP address blocks: 2a11:3c80::/29 maxlen: 29
2a12:b880::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.mft
rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 25 Sep 2026 21:08:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:b0:d5:dd:11:c8:08:14:77:a0:b8:59:70:17:02:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=17b5042fc20d9bab1676e09af7ff1ba5bfadae75
Validity
Not Before: Sep 22 10:37:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=415c7e734bb127a72756ff2aa9098940b85814c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:f2:12:7f:69:1e:51:0f:ea:6e:b9:5f:c9:36:
26:31:9f:bf:a1:d8:a3:fb:2a:fa:25:68:2c:b3:cc:
31:1a:18:2b:06:c6:97:57:fa:ed:99:a3:01:23:8a:
c3:63:a1:83:39:b7:a8:be:27:87:5e:0f:7e:90:9d:
07:77:dd:9a:dd:4b:24:34:0c:08:45:d9:b7:07:03:
79:5f:8d:9c:46:c6:18:db:ee:fc:2e:83:68:9b:ac:
26:6c:01:7e:b2:f2:c8:e9:37:57:dc:2b:e7:67:3f:
3c:50:7a:19:b0:e5:d1:23:d9:21:b0:88:6e:80:83:
be:7e:2f:9c:b9:e1:a1:72:b6:4d:9e:25:60:f9:f6:
b9:c9:5f:a9:39:44:a9:ee:2b:c0:82:5f:e2:e9:8b:
b0:ed:1b:89:6d:b4:3c:3d:98:71:8b:81:af:0e:8c:
65:91:e9:c2:a9:11:e6:fc:e6:e1:7c:94:96:3b:13:
82:c4:a0:f5:60:87:f6:5c:1d:e6:06:f2:4e:4a:ca:
b3:ed:07:d1:cd:74:47:e7:5a:5d:69:4c:17:10:db:
6b:ce:9a:97:b6:2e:cd:c2:19:53:3e:e8:4a:ec:10:
c5:84:08:10:cb:f4:c9:a8:25:18:2c:8a:29:37:ad:
c0:6f:19:85:2c:a7:27:de:1a:c4:52:88:a7:8a:46:
d7:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:5C:7E:73:4B:B1:27:A7:27:56:FF:2A:A9:09:89:40:B8:58:14:C7
X509v3 Authority Key Identifier:
keyid:17:B5:04:2F:C2:0D:9B:AB:16:76:E0:9A:F7:FF:1B:A5:BF:AD:AE:75
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/F7UEL8INm6sWduCa9_8bpb-trnU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/QVx-c0uxJ6cnVv8qqQmJQLhYFMc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/65e543-7e7a-4aab-ac74-bc6794e95e5a/1/F7UEL8INm6sWduCa9_8bpb-trnU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:3c80::/29
2a12:b880::/29
Signature Algorithm: sha256WithRSAEncryption
62:7b:8f:09:53:e0:45:a0:53:24:1f:4f:59:0c:c7:d4:9a:16:
10:86:d0:0f:97:6f:46:46:26:50:b2:b1:ea:c0:25:97:ff:c0:
92:c3:64:13:a7:96:c3:72:dd:22:1e:f6:a3:f2:89:cd:d3:f8:
44:bc:a2:02:59:b0:27:67:35:ad:82:bb:66:01:be:24:2a:45:
93:4f:5c:00:f4:8f:5e:58:32:64:eb:30:5b:6c:52:75:c4:12:
f2:d3:57:b4:9a:fc:2f:dc:88:71:16:ed:7b:78:ef:4d:3b:39:
c6:ec:fa:79:de:48:54:eb:e0:bd:a1:9e:fe:70:4f:7e:96:37:
d2:12:7a:e4:0f:2f:e2:e5:50:ba:81:48:e2:cf:9a:4c:50:87:
70:41:19:c3:42:f1:74:f2:8a:91:73:05:25:af:17:f5:82:aa:
bb:d9:8c:ab:0e:20:2b:c5:b9:3b:de:fc:c0:78:89:2d:4b:d7:
c1:f4:03:c8:5b:8a:52:47:af:b1:96:2f:56:79:c8:b5:d4:c0:
81:a0:af:77:39:87:09:81:59:7d:51:55:0f:e7:b9:23:c3:d2:
5d:40:80:c0:01:77:f1:44:44:f6:bf:29:15:95:7e:7d:02:36:
0e:31:8f:84:51:e6:65:87:a8:f4:29:43:8e:83:10:b7:be:70:
51:71:e3:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 07:12:46 2026 by rpki-client