Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/3GQXCH41_WmygxUWGYVD6PPZY7Y.roa
File: 3GQXCH41_WmygxUWGYVD6PPZY7Y.roa (raw, json)
Hash identifier: uRT9mRoZb1cgpFjgYlyD6iyYlGtKhsjWlVXqKFx/Nhc=
Subject key identifier: DC:64:17:08:7E:35:FD:69:B2:83:15:16:19:85:43:E8:F3:D9:63:B6
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A033BE58F0530890D82550294A41152732
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/3GQXCH41_WmygxUWGYVD6PPZY7Y.roa
Signing time: Mon 24 Aug 2026 12:28:27 +0000
ROA not before: Mon 24 Aug 2026 12:28:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 63199
IP address blocks: 43.240.150.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 10:40:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:33:be:58:f0:53:08:90:d8:25:50:29:4a:41:15:27:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Aug 24 12:28:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=dc6417087e35fd69b2831516198543e8f3d963b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:19:63:5c:28:ee:5a:f6:b0:1c:41:9e:03:1a:
3a:dc:48:f0:10:ab:da:88:b2:1a:44:f4:c3:3b:7f:
4d:02:4f:ec:25:6a:2c:01:19:30:d8:46:ae:73:af:
68:53:96:ca:f5:7d:06:ce:33:13:7a:4a:c7:79:75:
d7:5b:e4:ba:b9:f7:3d:4f:87:29:57:b8:36:a6:26:
9d:00:3f:b4:d3:fe:37:f7:79:12:b2:1b:d7:66:47:
b9:ee:89:17:04:87:63:f7:65:7d:ae:57:83:14:57:
c3:ed:22:c6:0b:5d:52:54:63:50:f0:79:f8:96:0c:
ee:f3:75:33:53:ff:65:fb:c8:b5:86:ed:ef:27:b3:
02:23:bc:73:ab:a1:89:fe:33:35:e8:b4:53:62:fd:
5a:13:bf:6d:4a:ea:75:ad:c2:50:8f:b6:71:c1:0c:
4e:5f:12:f5:1c:93:32:72:05:c3:51:df:9e:7e:c1:
f7:e2:bf:ed:8a:f1:35:d3:02:a6:30:07:75:12:25:
a5:11:49:9f:1f:ed:4c:aa:36:f7:8e:b3:05:e3:13:
b3:0f:3b:5d:38:18:06:a8:d7:78:c9:ad:a8:44:ba:
ad:dd:05:81:45:3b:4b:a7:27:3a:f4:a0:3c:a0:48:
d5:16:ac:f5:d0:de:8b:63:16:b8:e8:2f:bc:ca:21:
c4:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:64:17:08:7E:35:FD:69:B2:83:15:16:19:85:43:E8:F3:D9:63:B6
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/3GQXCH41_WmygxUWGYVD6PPZY7Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
43.240.150.0/24
Signature Algorithm: sha256WithRSAEncryption
61:bd:31:42:fc:6d:34:dd:8a:f4:22:a4:08:ce:8a:20:49:f9:
c5:65:15:ac:d5:d5:39:f5:54:2a:99:50:8e:da:75:1e:7a:08:
c2:67:23:62:f0:3f:84:0a:4e:3a:b2:6a:84:18:04:a7:6f:ad:
f0:50:84:07:68:e3:fb:67:5c:36:6a:02:92:81:8c:ef:76:72:
60:c8:c2:8f:6a:26:f3:ce:ee:e5:7b:32:95:da:64:8a:7a:33:
12:4a:b0:72:7a:9e:28:d1:37:0f:8d:ff:47:c7:71:15:07:1a:
ce:08:de:b3:77:bd:78:61:a8:fa:69:ec:bb:68:11:40:78:10:
eb:7c:bf:87:28:d1:91:fc:1a:1f:c4:28:65:8a:64:fa:c8:d3:
a5:02:8e:51:c4:26:1a:d3:88:97:a0:56:5a:1c:5a:e8:47:0d:
f4:fb:46:f9:84:be:12:78:5e:d2:55:e2:10:d1:df:37:23:8f:
c4:43:22:29:59:62:92:db:04:a4:d5:e6:df:e2:ce:71:a5:14:
12:e6:86:94:4c:aa:eb:05:5f:c3:a7:c3:d3:fe:ac:15:9f:5c:
6f:64:95:3e:ff:4a:9f:a9:d0:1d:6c:6d:41:8e:bc:cc:93:e1:
ef:07:82:e4:0c:db:a9:14:fd:90:fc:60:76:68:6e:84:ee:d9:
39:38:e0:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 3 20:42:32 2026 by rpki-client