Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Q_4EORhY_KWR9YyDo6XiBY7vpag.roa
File: Q_4EORhY_KWR9YyDo6XiBY7vpag.roa (raw, json)
Hash identifier: mDBMCHjZ9W2fDSSZE7RbG6NKVkovNxiGhyHY8D4gmRk=
Subject key identifier: 43:FE:04:39:18:58:FC:A5:91:F5:8C:83:A3:A5:E2:05:8E:EF:A5:A8
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019F5F28EAAC43757D165F4432BB9F151F0C
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Q_4EORhY_KWR9YyDo6XiBY7vpag.roa
Signing time: Tue 14 Jul 2026 05:45:44 +0000
ROA not before: Tue 14 Jul 2026 05:45:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 14618
IP address blocks: 5.231.121.0/24 maxlen: 24
94.249.236.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 05:27:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:28:ea:ac:43:75:7d:16:5f:44:32:bb:9f:15:1f:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Jul 14 05:45:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43fe04391858fca591f58c83a3a5e2058eefa5a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:a4:08:ff:35:ec:51:4c:50:c3:92:39:8e:a0:
8e:2b:7e:70:02:58:19:43:92:c7:3f:9e:27:72:1a:
bf:77:55:4d:da:8c:93:17:a7:5d:d7:44:3d:ea:92:
c9:34:f6:5c:ed:bc:2a:2f:32:05:37:ff:a0:61:75:
59:ed:1c:e8:d9:8a:d1:21:2b:e1:b2:38:e6:4a:e5:
f3:f4:01:de:76:33:26:b7:8d:96:35:f2:d2:f9:cb:
5a:e8:24:f6:4a:1c:ff:83:dd:61:0b:db:30:5d:09:
77:af:80:f5:9a:8c:41:06:3c:6a:f0:f9:3f:5e:52:
24:66:b9:56:d8:20:38:a1:e1:1f:b7:30:fb:b4:81:
60:7a:ac:83:a7:78:b6:ab:63:1d:b6:6b:32:6f:12:
92:f5:0a:80:41:2d:4c:1a:59:42:44:5e:42:8a:30:
72:72:ae:52:de:67:67:92:91:87:61:67:92:86:97:
e3:2c:ba:cd:6f:1f:54:41:4d:af:1f:55:3f:d2:3f:
e5:42:5b:58:ba:c7:e1:7b:e7:76:75:5b:65:77:76:
7a:1f:14:e2:37:de:3a:1e:6f:78:5a:a7:3c:f4:d7:
7c:6c:42:f1:3b:c3:ce:9c:38:46:1f:93:c6:47:cf:
78:73:ee:2b:f3:a1:f5:74:87:9c:ad:bb:bd:6e:41:
63:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:FE:04:39:18:58:FC:A5:91:F5:8C:83:A3:A5:E2:05:8E:EF:A5:A8
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/Q_4EORhY_KWR9YyDo6XiBY7vpag.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.121.0/24
94.249.236.0/24
Signature Algorithm: sha256WithRSAEncryption
58:da:5c:43:7e:42:36:d1:9a:75:e8:79:a8:08:09:54:a0:38:
8d:c7:fb:27:54:51:dc:e5:23:0f:10:1d:2f:1e:58:e8:91:1d:
ae:bb:21:1a:7c:e3:fd:ae:8e:c3:b5:8f:93:33:58:0c:c6:b4:
22:9d:7d:95:0b:86:75:d7:17:f3:de:07:8a:d2:8d:17:9a:f2:
18:7c:32:bd:1a:b3:ec:12:12:7f:93:a1:9c:8a:90:df:f3:cf:
cf:d5:fc:de:ee:c5:02:87:66:2d:99:3c:27:b5:70:aa:a6:b8:
9c:e4:97:82:d0:38:1e:30:94:7b:49:79:27:1f:ff:f3:b8:3f:
07:74:d4:3e:6e:c2:e0:d0:84:9b:c3:19:9e:24:d5:ac:fa:d9:
d5:40:d3:cb:60:1d:07:54:01:de:93:26:6c:5d:57:33:5d:b9:
f6:57:f1:d0:5e:72:94:b8:86:17:63:fb:7b:23:43:69:77:8e:
73:8a:e7:ab:6a:2e:c5:28:88:0b:9c:ba:c1:73:db:9c:af:6f:
b7:04:7d:69:e3:98:d2:4c:00:4d:c0:62:58:dc:1a:99:8a:37:
a7:7f:1d:6b:0c:8b:1c:57:38:00:dd:50:20:32:64:3b:e1:d1:
ab:62:59:4e:e0:88:88:a8:28:f9:79:f3:03:72:84:b6:96:76:
d6:44:92:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 11:53:17 2026 by rpki-client