Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QH_BUCXIDcRnmYQuwQBNMuwe7QE.roa
File: QH_BUCXIDcRnmYQuwQBNMuwe7QE.roa (raw, json)
Hash identifier: PsEpCrBAU6PjmtRg3h2HPywX2OUrzrtg280xcnnNXaI=
Subject key identifier: 40:7F:C1:50:25:C8:0D:C4:67:99:84:2E:C1:00:4D:32:EC:1E:ED:01
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0E3C246118571A196C693CD9F55CA23F1
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QH_BUCXIDcRnmYQuwQBNMuwe7QE.roa
Signing time: Sun 27 Sep 2026 16:45:55 +0000
ROA not before: Sun 27 Sep 2026 16:45:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215828
IP address blocks: 5.231.116.0/24 maxlen: 24
77.90.25.0/24 maxlen: 24
94.249.138.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e3:c2:46:11:85:71:a1:96:c6:93:cd:9f:55:ca:23:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 27 16:45:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=407fc15025c80dc46799842ec1004d32ec1eed01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:08:26:2b:d9:85:48:ee:d9:d4:26:b7:3c:4b:
6b:b9:2e:27:a2:57:39:d9:02:42:c6:4a:25:b0:cc:
2b:32:4e:fb:36:b1:76:f0:ca:4a:9a:97:25:dc:22:
59:e8:37:95:e7:cf:81:34:d6:08:bd:f9:df:b0:94:
1d:84:ce:7f:38:21:6a:18:08:25:08:47:7e:70:1d:
3a:82:47:74:5b:25:54:8a:65:c5:6d:4a:58:f5:93:
60:31:bf:70:cf:2b:9e:81:39:7b:db:d8:2c:8c:e7:
84:e7:d5:eb:32:20:64:c2:46:04:7d:db:ae:d2:e5:
3d:b4:53:e2:4f:95:af:c6:62:1d:0f:cf:be:5d:e4:
47:5d:e9:d7:96:64:ca:61:8e:29:6c:f2:36:38:19:
db:7a:4c:72:dc:6b:20:d3:59:72:63:44:25:21:e7:
f3:74:59:86:6d:50:bb:0a:cb:f7:a8:df:8b:46:90:
3c:e4:74:73:e9:88:f0:54:4a:1a:15:c0:e9:71:d6:
a5:5b:ea:8a:d1:c0:aa:6b:15:9d:e5:72:6d:4b:b9:
7e:3e:c6:f1:41:22:f9:57:db:71:bb:5e:68:da:73:
ea:ee:90:0e:48:f7:99:66:76:8b:15:64:f6:9b:17:
a9:1d:b7:cc:2f:3b:34:3a:e0:05:04:6e:3e:e0:15:
90:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:7F:C1:50:25:C8:0D:C4:67:99:84:2E:C1:00:4D:32:EC:1E:ED:01
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QH_BUCXIDcRnmYQuwQBNMuwe7QE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.116.0/24
77.90.25.0/24
94.249.138.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:cf:a2:01:06:6e:1f:5a:0f:85:53:02:b6:50:bb:88:b5:e0:
fd:39:ea:b4:13:28:9d:41:a9:00:af:eb:38:3e:2a:61:d1:e2:
df:8f:5a:04:45:7f:4e:6f:18:7f:e7:fc:ab:a6:72:ff:8c:7c:
3c:34:7e:ff:cd:bd:03:fa:b0:31:28:c3:d2:b5:da:24:39:2f:
d7:c4:ac:3b:d8:bb:a9:e3:4f:ae:a8:67:c4:d6:fe:84:38:ae:
62:92:cc:bd:e5:36:5e:a0:af:0f:ba:ab:7f:d0:85:76:23:d3:
ec:e3:79:b6:7f:24:ab:fe:2e:d7:56:61:db:93:d9:29:6e:cf:
87:2c:b8:29:aa:f2:02:7a:b9:a7:c9:40:1f:cc:75:47:5f:4b:
15:55:ba:de:90:f9:d9:d4:14:1c:36:83:95:b9:3d:3f:50:d2:
0e:22:76:27:e3:27:49:35:38:e4:c6:36:2b:4f:ed:80:a6:7a:
5b:b7:61:f2:91:a1:9a:79:90:da:0b:38:f6:80:ea:57:c6:88:
de:e3:a1:62:2f:d6:4b:de:a5:51:93:69:aa:80:85:7d:5e:22:
cc:d2:59:5c:a9:60:f1:89:09:74:d1:28:8d:b6:37:fb:59:08:
d4:23:a3:b6:dd:ff:bc:b0:58:2b:bd:91:a0:a8:e7:61:ed:b7:
33:c7:2a:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 02:12:35 2026 by rpki-client