Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/1d00ff-3264-4619-990b-90d30dc56b3c/1/QmWp_GTIS7liHO5m8L9fWsVQbys.roa
File: QmWp_GTIS7liHO5m8L9fWsVQbys.roa (raw, json)
Hash identifier: weLuZVN3GIVtGzx5X3Yqda+dDcKXiyNzRhBD++gYWIk=
Subject key identifier: 42:65:A9:FC:64:C8:4B:B9:62:1C:EE:66:F0:BF:5F:5A:C5:50:6F:2B
Certificate issuer: /CN=5d4ef82b82045af9d3510615ed03376b6314fdee
Certificate serial: 019C9A00A6DF886EB52413D0286176A50C27
Authority key identifier: 5D:4E:F8:2B:82:04:5A:F9:D3:51:06:15:ED:03:37:6B:63:14:FD:EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XU74K4IEWvnTUQYV7QM3a2MU_e4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/1d00ff-3264-4619-990b-90d30dc56b3c/1/QmWp_GTIS7liHO5m8L9fWsVQbys.roa
Signing time: Thu 26 Feb 2026 12:50:59 +0000
ROA not before: Thu 26 Feb 2026 12:50:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197920
IP address blocks: 91.228.100.0/24 maxlen: 24
185.50.124.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/1d00ff-3264-4619-990b-90d30dc56b3c/1/XU74K4IEWvnTUQYV7QM3a2MU_e4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/1d00ff-3264-4619-990b-90d30dc56b3c/1/XU74K4IEWvnTUQYV7QM3a2MU_e4.mft
rsync://rpki.ripe.net/repository/DEFAULT/XU74K4IEWvnTUQYV7QM3a2MU_e4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9a:00:a6:df:88:6e:b5:24:13:d0:28:61:76:a5:0c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5d4ef82b82045af9d3510615ed03376b6314fdee
Validity
Not Before: Feb 26 12:50:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4265a9fc64c84bb9621cee66f0bf5f5ac5506f2b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:3a:9e:38:ec:cd:a5:ab:7b:a6:0f:89:3e:ea:
35:14:25:90:50:91:15:9a:63:e7:fc:2f:b9:60:f1:
fe:5a:f5:50:f4:6d:71:d4:18:d0:c9:0b:7f:41:be:
81:5f:d6:42:55:69:53:ed:26:d2:9b:de:9f:df:4b:
da:f5:51:4d:4b:c5:be:fb:93:4f:a1:92:9c:46:5a:
c6:d9:4d:91:c0:cf:5c:2a:a4:2b:a6:e9:79:33:64:
ba:c3:f6:f1:8f:a5:9d:a1:7a:74:4d:9f:0b:df:f9:
2a:12:e0:03:9c:94:73:32:3a:40:65:3b:b6:b5:b8:
1b:2d:1b:bf:97:1d:36:cf:30:8f:79:f2:37:5e:02:
e4:33:6e:49:32:20:33:97:c4:66:54:cb:33:6d:0d:
99:0d:c3:3b:ae:c5:dd:b8:36:ad:fa:c1:d6:32:ce:
83:f2:00:2b:79:5d:53:8f:8f:f3:72:ec:fd:0c:e1:
a4:1f:d9:2c:0b:f2:82:c0:f2:7e:f8:b3:a4:36:b2:
6e:c4:22:5d:25:fb:e1:82:68:b6:c3:2a:fa:8d:e4:
04:28:1d:5b:2d:43:5a:ee:0a:9e:a9:db:b2:1a:37:
e8:32:15:03:ff:51:2d:ef:85:9f:f9:30:db:d9:56:
36:b4:ba:a5:b5:52:73:f2:f5:64:5a:be:1c:e5:59:
50:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:65:A9:FC:64:C8:4B:B9:62:1C:EE:66:F0:BF:5F:5A:C5:50:6F:2B
X509v3 Authority Key Identifier:
keyid:5D:4E:F8:2B:82:04:5A:F9:D3:51:06:15:ED:03:37:6B:63:14:FD:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XU74K4IEWvnTUQYV7QM3a2MU_e4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1d00ff-3264-4619-990b-90d30dc56b3c/1/QmWp_GTIS7liHO5m8L9fWsVQbys.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/1d00ff-3264-4619-990b-90d30dc56b3c/1/XU74K4IEWvnTUQYV7QM3a2MU_e4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.228.100.0/24
185.50.124.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:b1:52:46:28:a8:52:3e:72:a8:04:fa:d6:dc:37:d1:91:f4:
aa:ae:63:18:9d:fc:71:f9:1b:8e:16:17:6f:3f:19:f9:61:7c:
5e:d2:c8:a8:70:fc:dd:03:60:cf:74:1e:1c:6b:35:ce:ab:aa:
35:48:6b:a1:2d:86:ef:f1:5d:28:c6:df:4b:bc:b6:ad:16:67:
19:fc:2b:74:dd:01:12:bb:8f:3a:f9:46:27:5d:91:45:61:a4:
3c:5b:fc:54:58:63:67:ae:38:06:8e:f3:68:70:6e:96:1b:9e:
a1:40:9f:56:85:89:22:72:d1:ec:f7:68:eb:7b:fc:1a:1d:e5:
a4:52:47:f2:5a:54:e0:4a:ad:36:1e:76:93:2e:8d:16:c1:7a:
5c:f9:9b:96:1e:29:0b:d1:65:70:c7:10:8f:9a:0c:6a:4c:36:
25:6d:2f:f0:e7:ff:5a:84:6d:c7:ae:89:4e:de:f4:9f:d9:ee:
f3:ea:e8:02:ac:1f:fd:3c:9d:1d:2d:28:e7:f2:fc:3d:9f:62:
66:30:93:24:0d:f2:68:dd:c6:0d:a8:46:6f:24:78:f0:c0:b8:
28:e1:a2:0d:e5:d4:e7:09:33:1a:0e:43:4b:a0:9e:a4:20:27:
0b:d9:f6:18:c8:80:e0:da:30:ce:97:8c:c3:a4:2f:c5:c6:70:
dc:de:d6:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Mar 28 13:20:59 2026 by rpki-client