Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/QgFdATsvrgbsJj49HHo4tl4nbPU.roa
File: QgFdATsvrgbsJj49HHo4tl4nbPU.roa (raw, json)
Hash identifier: zQkaM7ICrJYrsSA5tGYcvoQJxzWPMlsbuGXzLOcN5kM=
Subject key identifier: 42:01:5D:01:3B:2F:AE:06:EC:26:3E:3D:1C:7A:38:B6:5E:27:6C:F5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A140ABC018EAEB11011724F0F651D424B3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/QgFdATsvrgbsJj49HHo4tl4nbPU.roa
Signing time: Thu 15 Oct 2026 17:45:59 +0000
ROA not before: Thu 15 Oct 2026 17:45:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3223
IP address blocks: 201.58.152.0/24 maxlen: 24
201.58.154.0/24 maxlen: 24
201.58.155.0/24 maxlen: 24
201.58.156.0/24 maxlen: 24
201.58.157.0/24 maxlen: 24
201.58.158.0/24 maxlen: 24
201.58.160.0/24 maxlen: 24
201.58.161.0/24 maxlen: 24
201.58.162.0/24 maxlen: 24
201.58.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:40:ab:c0:18:ea:eb:11:01:17:24:f0:f6:51:d4:24:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 15 17:45:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42015d013b2fae06ec263e3d1c7a38b65e276cf5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:5f:a5:0c:51:4e:76:86:f7:81:5c:b0:78:5d:
d9:8a:61:97:fa:e8:f6:75:e7:ac:a6:f4:ad:55:9d:
fe:b9:45:40:7f:f5:84:de:b9:bd:34:64:f4:6e:63:
74:ce:fb:81:39:b6:1d:93:59:99:ef:7d:62:1b:2c:
31:54:ec:8f:50:45:c7:91:04:de:35:fb:db:8f:4d:
97:4e:4b:2d:af:67:26:2f:36:87:eb:61:f1:ff:24:
a0:2d:d7:70:d3:7e:42:20:c9:3a:87:c9:c8:4c:5a:
d7:9f:e9:05:de:3a:d4:2d:83:d5:56:c8:fd:cd:cc:
4d:5a:8e:9a:9a:03:78:32:cc:8f:ac:5d:08:56:4d:
42:af:41:8e:5f:b0:92:af:3b:6e:c8:ef:5d:11:08:
eb:6f:69:de:23:30:2b:51:94:f0:42:7a:03:b4:fc:
ed:82:64:8f:ae:a6:3d:00:00:c9:bb:7c:89:d4:6a:
c4:88:01:b7:fb:7d:5f:35:49:a1:ed:88:22:2d:c4:
1d:6f:7d:40:b7:45:d2:da:7e:17:ed:06:4a:cb:0c:
8f:10:d0:df:60:ac:1f:5a:04:e4:a2:70:e7:77:9b:
53:0c:68:7b:46:e0:8d:ee:e4:64:d0:00:c6:42:cb:
8e:3d:c3:50:eb:b0:2e:19:46:99:86:cd:a8:9d:25:
44:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:01:5D:01:3B:2F:AE:06:EC:26:3E:3D:1C:7A:38:B6:5E:27:6C:F5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/QgFdATsvrgbsJj49HHo4tl4nbPU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.58.152.0/24
201.58.154.0-201.58.158.255
201.58.160.0/22
Signature Algorithm: sha256WithRSAEncryption
60:48:99:f0:32:56:80:ff:1a:b3:e1:16:1f:94:e1:1e:5c:19:
59:73:dd:80:32:a1:2d:a0:18:3d:b0:b0:0a:cc:8c:fd:64:04:
01:6a:37:a1:43:4b:8a:55:66:de:3a:6d:c5:76:df:dd:f9:8f:
11:8b:be:f4:b0:a3:9f:f7:0f:c5:ec:c6:6d:d9:83:99:95:8e:
46:d6:69:ad:dc:a7:1b:17:88:12:60:fa:2d:6c:e2:41:91:ed:
82:55:26:42:84:93:8e:6d:ff:be:c7:8f:b5:92:20:03:06:72:
d7:97:ea:86:6c:ab:33:13:6d:97:fd:5f:5e:c0:2a:e6:95:f3:
2f:ee:8d:45:80:f4:9d:18:3a:87:95:0a:d2:ff:2d:e1:49:d2:
de:42:b9:1a:67:9b:e9:d1:c3:35:7b:97:fc:05:84:8c:aa:18:
51:0c:23:54:84:b2:ce:34:d2:a1:dc:22:53:a1:e5:48:a4:d9:
bd:f6:58:92:61:7c:35:bb:77:c0:6e:d8:90:f0:8a:4f:ce:a9:
ab:5b:70:a3:a0:7a:6b:81:27:1f:f7:c6:6a:a2:16:c6:a5:cf:
47:66:16:ed:e0:9f:5f:82:af:c4:c8:15:d3:47:d6:8b:ea:e6:
be:cc:01:10:1a:70:41:5a:1b:e5:2e:3b:38:bb:a5:6b:68:2f:
a8:8b:37:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 00:17:35 2026 by rpki-client