Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/Q3nFX73VKi0Vl_kjfWg3qpEjvYA.roa
File: Q3nFX73VKi0Vl_kjfWg3qpEjvYA.roa (raw, json)
Hash identifier: YbA668dsjAkvdtrqQOYf2BjBJdawIlBwU7MeAIFgD44=
Subject key identifier: 43:79:C5:5F:BD:D5:2A:2D:15:97:F9:23:7D:68:37:AA:91:23:BD:80
Certificate issuer: /CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Certificate serial: 01A049F907A30C933F29E6CBF8360064C7DD
Authority key identifier: 52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/Q3nFX73VKi0Vl_kjfWg3qpEjvYA.roa
Signing time: Fri 28 Aug 2026 20:04:12 +0000
ROA not before: Fri 28 Aug 2026 20:04:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402916
IP address blocks: 69.161.197.0/24 maxlen: 24
107.182.112.0/23 maxlen: 24
107.182.114.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.mft
rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Sep 2026 19:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:f9:07:a3:0c:93:3f:29:e6:cb:f8:36:00:64:c7:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52dc9c218b510c07bc6659b09fbd32afe68abfd2
Validity
Not Before: Aug 28 20:04:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4379c55fbdd52a2d1597f9237d6837aa9123bd80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:b9:ec:57:2b:9c:0e:39:11:9b:ce:6c:37:a0:
47:a8:92:1a:7b:da:ce:6a:1e:65:54:c8:29:7b:26:
03:b0:2f:8b:fa:a9:62:8b:44:8d:fb:00:de:86:a5:
06:3a:dd:ad:ea:cd:05:e8:52:4c:12:cb:26:41:6e:
81:3d:31:c5:24:cd:26:56:69:0f:bd:c2:7c:fa:a6:
da:5e:8b:73:3a:e5:d6:e3:55:22:b7:01:ea:c9:c1:
b2:98:fa:2b:99:93:ea:79:1e:d6:a3:12:c9:61:2b:
0d:b0:69:40:1e:81:cd:71:43:23:26:03:61:00:cf:
5e:de:f8:b8:69:85:32:ae:c7:10:18:eb:b9:7d:a4:
e6:8e:26:7b:c7:b7:74:0e:e2:ed:a6:28:0a:eb:f3:
cc:66:e5:5b:ac:76:47:7b:5a:35:73:5e:95:c4:ee:
48:86:27:34:69:c3:5f:d6:db:5f:4e:e0:32:1c:dc:
a0:ae:15:30:4c:ec:68:36:7a:26:49:a4:4b:10:ea:
f6:45:f9:4f:33:02:a1:f6:27:c0:3b:5b:6a:82:fd:
8e:bf:76:ae:66:af:12:a5:e9:80:83:61:fd:0a:c3:
ca:59:3d:fd:89:04:67:5b:ad:d9:ae:23:07:5b:19:
26:ce:af:76:3d:91:5c:58:ca:a9:ed:05:70:50:45:
30:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:79:C5:5F:BD:D5:2A:2D:15:97:F9:23:7D:68:37:AA:91:23:BD:80
X509v3 Authority Key Identifier:
keyid:52:DC:9C:21:8B:51:0C:07:BC:66:59:B0:9F:BD:32:AF:E6:8A:BF:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UtycIYtRDAe8Zlmwn70yr-aKv9I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/Q3nFX73VKi0Vl_kjfWg3qpEjvYA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/409b7e-1275-43ed-af0f-52f97b277d1f/1/UtycIYtRDAe8Zlmwn70yr-aKv9I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
69.161.197.0/24
107.182.112.0/22
Signature Algorithm: sha256WithRSAEncryption
2c:1c:8d:04:45:d4:ac:22:5a:9a:86:e0:1e:bd:a2:73:16:3c:
69:b4:d5:cc:bb:37:09:56:90:d6:6b:c8:83:b2:05:02:0b:03:
4b:f9:db:57:89:c5:0b:9a:d4:b9:8d:2f:91:ae:2a:6a:23:16:
4b:88:35:3d:11:95:ba:71:22:6a:ed:f2:ca:bd:47:63:32:63:
32:fd:50:78:48:9f:db:10:d4:10:72:f1:b9:20:a9:62:77:ad:
a9:12:33:f6:cb:2e:6b:94:10:c8:bf:11:65:ce:e1:ec:48:21:
fc:b2:5c:a3:32:3f:29:64:18:a3:d4:60:9c:f5:d0:7c:27:e6:
ca:38:33:c0:80:d2:65:01:5f:a6:7a:85:f2:10:d7:2a:9c:c5:
cf:00:e1:a8:58:35:e8:77:39:61:c4:23:1f:e3:05:a7:21:19:
c4:62:51:6c:fb:62:1b:19:72:bd:b5:90:ed:18:58:3a:9c:91:
3a:9f:14:74:62:8a:b1:22:ea:f4:37:0c:8d:bd:5c:ec:70:4f:
aa:a8:e5:db:1c:0e:39:b6:63:7d:9b:b6:7f:49:31:f6:c4:cf:
b1:1e:d0:25:f5:3a:dd:70:18:b6:37:f6:f2:f9:82:1a:87:5c:
fe:cf:9d:11:c6:e1:a3:1a:b9:ac:fb:9e:4e:f9:11:41:19:61:
fa:b3:1a:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 1 02:08:29 2026 by rpki-client