Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/QGpEibgpEzzKHJ9Zq6TY1Hl8o-Y.roa
File: QGpEibgpEzzKHJ9Zq6TY1Hl8o-Y.roa (raw, json)
Hash identifier: +vRj62FE8yxCk1o/sYs/sodlZx7km+qb9MSzTq89XM4=
Subject key identifier: 40:6A:44:89:B8:29:13:3C:CA:1C:9F:59:AB:A4:D8:D4:79:7C:A3:E6
Certificate issuer: /CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Certificate serial: 019F8F2E65C12586E5DA74CA852E0EE223F7
Authority key identifier: 18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/QGpEibgpEzzKHJ9Zq6TY1Hl8o-Y.roa
Signing time: Thu 23 Jul 2026 13:33:30 +0000
ROA not before: Thu 23 Jul 2026 13:33:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63023
IP address blocks: 95.215.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.mft
rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:01:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8f:2e:65:c1:25:86:e5:da:74:ca:85:2e:0e:e2:23:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=18a84a8e475f6606e7a12f92b330d63d8f880be0
Validity
Not Before: Jul 23 13:33:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=406a4489b829133cca1c9f59aba4d8d4797ca3e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:00:22:29:2e:80:be:81:32:48:0d:ff:e9:a6:
c7:d9:40:32:61:65:0d:b6:44:5d:a6:cb:c6:ed:a7:
20:07:8e:8c:50:f8:28:72:2e:8e:a6:79:11:77:e9:
0d:4e:9b:41:68:08:a5:85:6f:20:cc:d4:13:22:2f:
7e:7b:6a:f6:04:18:ec:97:31:9a:83:e2:6c:4b:e9:
1a:a9:d1:6d:80:f7:8a:5c:5d:8a:ad:e7:fd:33:83:
cc:bb:34:f6:54:3e:c0:db:9c:14:2c:e7:94:b3:64:
c4:9a:a3:e4:d2:9d:ea:5f:7b:d7:37:29:da:ac:be:
02:a5:d2:6c:c2:6c:0a:93:9b:b6:ba:77:36:62:4b:
62:93:39:47:d3:56:fa:c3:d3:ed:0e:a3:81:53:04:
f3:72:17:c8:c8:59:de:d4:9e:82:bd:06:c7:8c:38:
4e:6e:2b:08:63:c6:23:02:03:d1:01:6d:14:b5:5a:
de:7e:42:35:4a:5e:ef:88:54:34:6b:2c:63:40:fe:
de:60:b4:8f:ba:c9:a4:2c:5e:6c:26:cf:c9:d1:54:
42:64:f6:1e:a2:7c:51:1a:9d:cc:62:d5:0b:eb:8b:
d7:08:a1:1d:aa:44:1c:0f:2a:04:96:45:14:48:9c:
de:e2:13:ae:8f:1d:78:a9:ef:be:7e:5c:d3:e9:e5:
b7:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6A:44:89:B8:29:13:3C:CA:1C:9F:59:AB:A4:D8:D4:79:7C:A3:E6
X509v3 Authority Key Identifier:
keyid:18:A8:4A:8E:47:5F:66:06:E7:A1:2F:92:B3:30:D6:3D:8F:88:0B:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/GKhKjkdfZgbnoS-SszDWPY-IC-A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/QGpEibgpEzzKHJ9Zq6TY1Hl8o-Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/892a27-fdb6-4285-829a-87f5b6479d1e/1/GKhKjkdfZgbnoS-SszDWPY-IC-A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.215.201.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:5f:65:db:bc:4c:3a:a7:ec:21:01:08:11:71:e8:7c:d1:76:
5b:d5:9d:6f:50:06:c0:31:b7:6d:c3:26:3f:e2:b7:78:a2:8c:
4c:4c:8a:5e:2c:92:c7:7b:94:80:89:ef:8f:0c:34:19:68:a5:
ea:61:0b:a9:e9:bb:df:64:fa:f4:00:a4:64:7a:56:4e:7b:cc:
fc:dc:22:f8:d8:e8:28:24:19:82:71:32:15:ea:9f:76:87:a5:
84:89:de:49:1f:3b:0c:33:56:c4:dc:fd:13:58:69:34:4a:17:
fe:9f:6c:27:c1:9d:49:e8:6c:c7:1b:d3:a9:11:b9:89:bd:99:
a3:21:48:bc:4e:74:61:a8:5e:ef:17:75:77:35:c5:af:b8:36:
21:12:e8:6f:c4:3e:65:dc:b0:a2:b9:70:af:c8:c6:09:48:31:
4f:b8:13:60:7e:ad:70:64:93:24:30:1b:81:75:8c:64:72:cf:
ff:8d:fb:53:c9:cb:d8:62:2e:ac:fb:d8:72:d6:ff:71:42:18:
25:08:41:a1:90:ec:78:98:bb:8c:d5:d7:ce:87:73:e0:43:da:
1c:63:44:ef:ce:38:24:05:03:c7:91:7e:60:7b:7e:a6:cb:82:
79:0d:59:f2:a9:18:80:7c:63:4a:a6:79:78:95:12:8d:38:d4:
d1:16:c7:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jul 25 01:56:15 2026 by rpki-client