Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/q-i3uWimDEseYfaTppHSTUfVFHk.roa
File: q-i3uWimDEseYfaTppHSTUfVFHk.roa (raw, json)
Hash identifier: 83IJxRiLcz6XmhKiryP4Do1l4ISCQrwCouFMLxW599A=
Subject key identifier: AB:E8:B7:B9:68:A6:0C:4B:1E:61:F6:93:A6:91:D2:4D:47:D5:14:79
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019DF46763A2BB601D1646972C3A877B48EA
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/q-i3uWimDEseYfaTppHSTUfVFHk.roa
Signing time: Mon 04 May 2026 19:11:49 +0000
ROA not before: Mon 04 May 2026 19:11:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48207
IP address blocks: 193.124.45.0/24 maxlen: 24
194.135.34.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 22:00:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:f4:67:63:a2:bb:60:1d:16:46:97:2c:3a:87:7b:48:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: May 4 19:11:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abe8b7b968a60c4b1e61f693a691d24d47d51479
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:2c:0d:98:b7:26:70:b6:84:f4:65:bc:a6:18:
76:0f:90:7f:fb:39:57:21:8a:6a:ae:d0:b6:25:9f:
e9:a1:e3:df:82:b8:7c:13:cd:7f:9f:bd:38:0c:08:
e2:3f:00:de:66:5d:d8:bf:36:60:e6:5f:c1:ee:f8:
39:08:d1:3a:3b:80:ef:8f:b5:ff:67:34:7e:a4:8c:
24:c6:18:0c:37:04:e9:4a:4b:08:96:9e:4b:ed:9d:
23:7f:5b:e6:0a:98:05:a4:06:6c:29:9e:55:a8:55:
5f:0c:8d:e1:9e:8e:73:84:6d:6d:5f:2d:18:4b:6f:
e0:b4:a4:e9:e6:34:5d:2b:fa:57:32:93:67:59:62:
15:24:14:68:93:ec:87:a3:f9:6c:e6:21:f7:fe:60:
08:62:a4:56:b2:9d:56:46:25:9c:37:e4:5a:d1:31:
ba:fc:20:35:bc:e7:e2:2d:67:b5:fb:75:ac:00:4d:
d7:42:1a:d1:6d:f3:24:82:41:58:0a:2a:63:f6:02:
fe:ad:c8:9f:d9:3b:cb:47:62:9f:0c:8c:51:0b:0b:
ff:fc:81:3c:0d:75:5a:06:ac:96:b0:a8:c6:74:70:
37:0b:c9:45:68:cd:da:c7:da:2f:dc:9f:ea:64:a4:
3e:af:73:b5:2b:2b:1f:33:7e:44:65:60:3e:84:6b:
9e:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:E8:B7:B9:68:A6:0C:4B:1E:61:F6:93:A6:91:D2:4D:47:D5:14:79
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/q-i3uWimDEseYfaTppHSTUfVFHk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.124.45.0/24
194.135.34.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:5e:a9:c2:a4:52:c9:99:51:b1:43:c2:4e:a6:4d:ae:2e:b7:
9c:f1:66:b2:a7:17:60:97:2e:8f:e0:0e:7e:c8:b0:a5:86:4e:
91:2e:2e:73:d2:6a:41:bd:ad:a5:a8:15:28:80:f8:a5:b1:62:
43:20:bb:6c:79:a4:f3:8e:1f:61:7d:38:d6:aa:16:71:7b:dd:
63:61:2e:6b:63:2e:58:a2:e9:83:37:67:86:df:d1:d8:2e:27:
26:a7:b5:b7:62:e2:bd:25:56:94:d8:62:6b:e2:12:ee:59:f7:
a3:7b:40:55:06:c1:54:41:66:82:88:a0:a4:24:0c:d9:3c:d5:
3a:d2:95:de:ed:18:11:6b:6e:61:e0:c3:8d:3e:6e:0e:31:c8:
22:0b:51:e8:32:67:e6:bd:ad:4b:aa:2f:f6:cd:e9:e1:22:38:
9a:61:e1:6d:5a:f8:e9:1a:4c:ef:90:46:e6:d4:7d:0a:d1:de:
89:63:7b:6a:c0:88:13:44:36:23:9d:55:71:77:51:6e:45:57:
be:26:a7:99:a9:77:7a:e6:51:08:64:d5:35:dd:eb:1c:33:68:
de:7f:e5:b2:06:e9:ab:d1:f7:b1:12:1a:12:54:2d:c6:9c:f7:
ea:49:4c:2f:71:33:e8:b3:7a:67:0f:ba:fa:45:4b:92:eb:43:
8a:a1:31:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed May 6 05:35:25 2026 by rpki-client