Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Qksnm_y5lqIcSHeBIpcgRUJ3rwI.roa
File: Qksnm_y5lqIcSHeBIpcgRUJ3rwI.roa (raw, json)
Hash identifier: 3fUsryWT14shN/gInWGdRDElyrQ7lWtXMTYyQ3Cfvcw=
Subject key identifier: 42:4B:27:9B:FC:B9:96:A2:1C:48:77:81:22:97:20:45:42:77:AF:02
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019EFE25405BD4169B9C9408C86F2EC4BF1D
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Qksnm_y5lqIcSHeBIpcgRUJ3rwI.roa
Signing time: Thu 25 Jun 2026 09:38:34 +0000
ROA not before: Thu 25 Jun 2026 09:38:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 45.151.3.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 27 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:fe:25:40:5b:d4:16:9b:9c:94:08:c8:6f:2e:c4:bf:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Jun 25 09:38:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=424b279bfcb996a21c487781229720454277af02
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:78:c0:2f:3c:52:a7:bc:0d:ce:ad:6f:5a:06:
9f:29:a7:f7:74:66:66:cb:4a:44:13:12:6c:11:fd:
35:27:5d:89:9c:2e:fb:37:10:d4:84:eb:91:0b:33:
ac:64:d8:c9:77:ed:62:2a:60:18:1c:43:5a:7d:6b:
f6:35:10:d5:58:6d:c0:5c:3c:75:a4:74:47:f2:0f:
34:90:88:4a:1f:70:59:c3:23:de:50:b6:bc:87:83:
d4:ef:48:75:7e:e9:b0:62:50:d8:6e:6e:83:78:a5:
23:2f:3c:5a:fd:95:89:bf:4c:39:a2:e4:ef:2f:94:
12:0e:0a:cc:db:24:d9:fc:3a:b7:25:dc:a9:ba:4a:
5e:91:5e:7e:96:f0:c2:24:b1:d7:a3:4a:cc:eb:d6:
65:20:4b:88:fd:ff:ff:35:6c:2b:23:bd:3e:f8:68:
b0:b7:af:34:82:cf:47:2a:d7:c4:2e:21:71:c1:78:
85:de:7f:f5:04:ea:9e:3d:8f:43:2d:a9:af:9e:d8:
4d:d7:10:59:11:b6:9b:da:0e:75:3f:22:86:27:dd:
16:f3:59:80:f1:b2:a4:fd:4e:9c:19:47:0a:21:8d:
09:2f:d9:4d:97:69:59:47:e8:79:ef:cf:b7:f1:ba:
a2:b3:43:38:e1:31:e6:bf:8b:23:9f:53:42:25:5a:
4e:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:4B:27:9B:FC:B9:96:A2:1C:48:77:81:22:97:20:45:42:77:AF:02
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/Qksnm_y5lqIcSHeBIpcgRUJ3rwI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.151.3.0/24
Signature Algorithm: sha256WithRSAEncryption
54:e2:2d:4d:55:50:4b:35:b2:57:3f:ab:6b:a3:6d:3a:c6:7c:
12:63:47:b7:74:0d:65:0c:ba:a6:61:ba:2d:a2:5a:ba:ec:48:
03:3e:12:ca:04:55:e2:81:31:2b:50:38:ac:2a:37:3a:ab:a8:
13:15:2b:46:17:08:07:05:9c:71:23:a2:d5:dc:12:17:75:5a:
42:61:d3:2f:4d:54:96:f8:39:68:4a:70:8d:7c:52:7d:8f:a9:
8b:b2:b9:9b:8e:a8:ca:c9:88:cb:58:14:c6:58:de:70:15:0a:
fe:70:dd:58:1d:2a:43:b9:fb:b4:00:b8:cc:24:dc:61:74:d2:
8a:48:73:67:93:be:95:c7:52:80:a2:e8:a8:6f:26:6f:3a:2d:
28:fa:c7:51:53:79:6a:e9:f4:ab:49:75:eb:c5:2b:2d:cf:27:
f1:9e:0e:52:1a:f5:d9:d9:38:50:c3:c9:2d:48:77:02:32:8f:
e9:ef:cc:da:0d:d7:a1:03:3f:b7:15:30:65:3d:b0:f5:f1:54:
96:96:c1:67:06:f9:00:ad:d0:80:a1:91:5d:68:6a:31:ad:f8:
ea:45:5f:15:5d:4c:aa:8d:a2:98:db:56:d0:00:f5:85:67:28:
1d:cc:2f:5f:73:d1:9f:7b:29:5e:2e:8d:53:3b:9a:fd:7e:0e:
b3:70:31:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jun 26 08:59:28 2026 by rpki-client