Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/QdVHGKO0SlWeVvroRWYbAz9yMzc.roa
File: QdVHGKO0SlWeVvroRWYbAz9yMzc.roa (raw, json)
Hash identifier: UvSVmsaX8SRd16lwRSXuttdOK34oOi3O1r2WoIb6pRU=
Subject key identifier: 41:D5:47:18:A3:B4:4A:55:9E:56:FA:E8:45:66:1B:03:3F:72:33:37
Certificate issuer: /CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Certificate serial: 019F3348D73F98E889C1B25D566D06562525
Authority key identifier: 56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/QdVHGKO0SlWeVvroRWYbAz9yMzc.roa
Signing time: Sun 05 Jul 2026 17:17:19 +0000
ROA not before: Sun 05 Jul 2026 17:17:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57050
IP address blocks: 212.81.56.0/24 maxlen: 24
212.81.57.0/24 maxlen: 24
212.81.58.0/24 maxlen: 24
212.81.59.0/24 maxlen: 24
2a10:fa80:10::/48 maxlen: 48
2a10:fa80:56::/48 maxlen: 48
2a10:fa80:57::/48 maxlen: 48
2a10:fa80:58::/48 maxlen: 48
2a10:fa80:59::/48 maxlen: 48
2a10:fa80:92::/48 maxlen: 48
2a10:fa80:212::/48 maxlen: 48
2a10:fa80:216::/48 maxlen: 48
2a10:fa80:3000::/36 maxlen: 36
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:33:48:d7:3f:98:e8:89:c1:b2:5d:56:6d:06:56:25:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5659b0ba8407be11cfc911bd31ed140cd1c6046c
Validity
Not Before: Jul 5 17:17:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41d54718a3b44a559e56fae845661b033f723337
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:c9:47:4c:ac:65:d9:26:57:29:7f:8b:69:82:
40:57:29:96:76:53:19:f1:70:7a:fa:ff:c8:45:cd:
74:c2:fa:c6:59:14:33:41:9c:5b:f7:f5:81:0e:c3:
c2:84:71:e5:7d:f5:e0:3d:68:91:45:fd:cf:b6:17:
98:a6:40:81:fb:79:bc:e6:0a:69:ed:99:33:f2:7f:
14:01:70:60:03:66:b9:d0:25:c4:60:50:c3:59:2f:
e6:9e:20:fc:bf:b9:d2:f1:a3:92:bf:c4:66:29:cb:
22:6e:cc:ca:17:07:2d:26:02:74:b0:c6:20:c8:48:
51:6c:aa:a5:f9:65:bd:0e:07:7d:f0:94:94:8a:5c:
58:91:5b:16:35:db:d9:99:6c:51:b7:c8:19:eb:e6:
84:eb:47:c5:61:36:c4:4b:06:06:c9:77:05:1b:93:
d6:8d:8f:48:ac:f1:96:f9:40:ea:ea:e2:19:0e:d7:
3e:39:17:dd:7c:28:13:5e:7f:35:d3:67:fd:15:ec:
83:a0:0d:2b:53:07:61:52:97:f4:24:01:10:48:5e:
f2:c8:6c:c2:e3:94:63:a2:9c:89:58:d5:95:ab:6a:
1e:3b:77:69:48:e7:69:b6:f3:a6:8d:e0:87:3d:14:
00:47:77:84:15:55:51:00:77:df:10:64:ec:68:e0:
c9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D5:47:18:A3:B4:4A:55:9E:56:FA:E8:45:66:1B:03:3F:72:33:37
X509v3 Authority Key Identifier:
keyid:56:59:B0:BA:84:07:BE:11:CF:C9:11:BD:31:ED:14:0C:D1:C6:04:6C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VlmwuoQHvhHPyRG9Me0UDNHGBGw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/QdVHGKO0SlWeVvroRWYbAz9yMzc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/dd8e31-00b5-4212-9e01-2394c6600022/1/VlmwuoQHvhHPyRG9Me0UDNHGBGw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
212.81.56.0/22
IPv6:
2a10:fa80:10::/48
2a10:fa80:56::-2a10:fa80:59:ffff:ffff:ffff:ffff:ffff
2a10:fa80:92::/48
2a10:fa80:212::/48
2a10:fa80:216::/48
2a10:fa80:3000::/36
Signature Algorithm: sha256WithRSAEncryption
45:77:f6:02:68:4c:a1:cf:f7:b0:af:55:71:17:79:e6:5f:a1:
3e:13:d2:8e:55:c3:c2:de:49:20:c1:34:1e:8a:b0:9b:ae:51:
21:b6:b6:b7:7b:e8:cc:6a:87:97:04:00:02:e2:ef:75:5b:20:
48:a5:a5:7c:ca:8e:66:a5:79:09:8a:7f:7a:fc:f7:64:91:ab:
a7:e9:d5:b7:74:ca:c6:7a:63:91:50:b8:7f:b7:fb:04:3a:dc:
c8:67:b6:ca:7b:d7:cd:bb:73:e0:40:f2:7a:76:a6:49:4e:05:
68:87:e6:f3:a3:a3:76:ce:d8:fe:0b:50:d2:dc:61:24:c5:c1:
ad:57:1c:95:e0:43:f2:e5:c9:1c:15:8e:e0:82:78:30:ef:0c:
00:e4:d9:6f:ea:62:57:be:45:fb:05:1a:b2:99:a8:8b:72:bd:
6b:c5:03:5a:24:12:4b:c7:b5:c5:66:35:c5:c3:df:a5:82:ab:
d8:6a:3d:70:94:4a:3b:8a:a3:81:75:b7:73:a6:26:95:f9:9d:
b7:92:4d:a2:32:4a:fd:ac:00:79:ec:82:5a:2f:8b:30:c6:c8:
5a:df:ef:ae:44:0a:c6:f6:a2:12:a8:a3:a1:68:85:73:de:e3:
bd:cd:d9:41:dd:2a:98:70:76:30:b4:60:83:e9:4a:9b:eb:60:
54:ca:c3:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 21:26:49 2026 by rpki-client