Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/QBS0R0WX4CgAouVoy5AWvsIQFiE.roa
File: QBS0R0WX4CgAouVoy5AWvsIQFiE.roa (raw, json)
Hash identifier: E3Diw4Z8AQ6BjMDTeQHhn+VEM0caceCcTyALUIOkuu8=
Subject key identifier: 40:14:B4:47:45:97:E0:28:00:A2:E5:68:CB:90:16:BE:C2:10:16:21
Certificate issuer: /CN=46c213b5b946ded98094ce412c22fffa207e4166
Certificate serial: 01A0C302F90DB7470A54134BA3A73EA16224
Authority key identifier: 46:C2:13:B5:B9:46:DE:D9:80:94:CE:41:2C:22:FF:FA:20:7E:41:66
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RsITtblG3tmAlM5BLCL_-iB-QWY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/QBS0R0WX4CgAouVoy5AWvsIQFiE.roa
Signing time: Mon 21 Sep 2026 08:09:06 +0000
ROA not before: Mon 21 Sep 2026 08:09:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 2a0c:d147:120::/44 maxlen: 48
2a0c:d147:130::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/RsITtblG3tmAlM5BLCL_-iB-QWY.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/RsITtblG3tmAlM5BLCL_-iB-QWY.mft
rsync://rpki.ripe.net/repository/DEFAULT/RsITtblG3tmAlM5BLCL_-iB-QWY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 22:31:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c3:02:f9:0d:b7:47:0a:54:13:4b:a3:a7:3e:a1:62:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46c213b5b946ded98094ce412c22fffa207e4166
Validity
Not Before: Sep 21 08:09:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4014b4474597e02800a2e568cb9016bec2101621
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:c4:e4:eb:9e:dc:7d:72:8e:5a:a1:43:48:90:
c7:79:c9:c8:51:00:4b:d4:68:ba:d2:56:c7:f3:81:
96:cb:bb:04:2b:79:f8:ee:5e:f7:ea:09:85:8e:a0:
4f:ab:2b:8d:28:ea:36:7c:b5:bc:83:64:1a:d6:01:
bf:35:3c:ad:56:16:22:e4:a4:5b:7c:f3:9f:1b:22:
47:2c:73:74:a4:b1:eb:fd:a2:25:0c:61:68:ea:8d:
39:f0:28:a5:1d:55:91:95:1e:c2:be:8b:3f:0f:e8:
ed:9c:90:7e:37:3b:a9:7e:bc:ee:fb:42:f1:7a:b4:
2c:0a:06:26:f4:fc:bc:08:a0:75:6b:e6:db:51:47:
86:80:4e:5b:72:c5:de:f5:4e:38:29:48:19:a4:9e:
02:a5:c5:62:48:42:76:5e:96:48:50:1e:c8:c8:3c:
b7:89:39:e9:66:40:0c:cf:d6:2a:c4:d8:be:5d:b2:
8b:e5:ca:76:33:a0:6a:cb:be:cc:19:91:1a:19:2a:
c7:b9:f5:6e:30:cf:cb:5e:79:0d:a0:87:e4:61:20:
f9:70:11:dc:71:3b:bf:51:20:e6:e7:8b:4c:68:94:
c7:c2:54:7f:9a:34:6a:61:8c:42:d9:62:62:70:3d:
5e:79:eb:28:9d:a8:92:ef:e5:c0:7c:68:86:6c:d0:
e5:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:14:B4:47:45:97:E0:28:00:A2:E5:68:CB:90:16:BE:C2:10:16:21
X509v3 Authority Key Identifier:
keyid:46:C2:13:B5:B9:46:DE:D9:80:94:CE:41:2C:22:FF:FA:20:7E:41:66
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RsITtblG3tmAlM5BLCL_-iB-QWY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/QBS0R0WX4CgAouVoy5AWvsIQFiE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/fea303-4f3a-423e-afd5-28139bd99411/1/RsITtblG3tmAlM5BLCL_-iB-QWY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:d147:120::/43
Signature Algorithm: sha256WithRSAEncryption
08:f6:1d:55:68:3c:7f:1b:90:57:29:2d:a0:fb:3c:ad:93:ff:
a8:73:5c:92:8b:32:e6:d7:24:61:46:09:00:9e:72:21:9f:4c:
61:ba:e0:93:97:0f:76:a9:57:9f:62:20:79:84:d4:65:58:2e:
cb:66:fb:2e:45:d0:8c:d2:5b:79:d1:25:1a:f5:39:5b:ca:9b:
18:ba:00:ed:96:81:66:e5:63:36:4e:0f:a7:0b:44:9e:f6:54:
30:b2:65:fd:89:1b:95:ba:8d:de:0a:81:1a:6d:3f:69:26:88:
df:11:e3:8f:41:dc:ea:03:12:1a:97:52:89:c0:16:e2:db:d1:
13:0a:f8:f0:fd:22:52:1f:c1:26:b5:77:e8:bc:23:63:d1:80:
63:2e:49:bd:b6:ff:81:c3:3c:e4:48:96:18:b1:a8:53:5e:e0:
57:83:ff:d1:9d:6a:bd:71:c4:c5:29:b7:28:1d:20:70:35:3d:
ea:39:83:14:74:7f:77:e8:6c:b7:bc:02:29:c3:3f:74:5f:9b:
27:c8:c1:c7:b8:f3:df:c5:66:d2:c7:be:53:0b:95:c1:7d:15:
82:ce:fc:c1:c6:c8:1d:20:da:d4:6e:72:a9:03:a8:02:17:ee:
ea:52:41:b8:16:42:4c:e7:6b:90:08:0b:da:6f:4e:41:55:90:
77:5a:49:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Sep 23 09:15:40 2026 by rpki-client