Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/qnKA4P9Y0o3PCf0X-NnPP-XQubQ.roa
File: qnKA4P9Y0o3PCf0X-NnPP-XQubQ.roa (raw, json)
Hash identifier: h4Zj+c7CCxstNRc4i2wkIhxueUPfu+uBKup4NH+NuGk=
Subject key identifier: AA:72:80:E0:FF:58:D2:8D:CF:09:FD:17:F8:D9:CF:3F:E5:D0:B9:B4
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019DAA3977A825AE05E0EDFD198CD299F346
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/qnKA4P9Y0o3PCf0X-NnPP-XQubQ.roa
Signing time: Mon 20 Apr 2026 09:29:46 +0000
ROA not before: Mon 20 Apr 2026 09:29:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203156
IP address blocks: 45.88.144.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:aa:39:77:a8:25:ae:05:e0:ed:fd:19:8c:d2:99:f3:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Apr 20 09:29:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa7280e0ff58d28dcf09fd17f8d9cf3fe5d0b9b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:17:5d:56:7c:52:24:1f:a3:b9:c8:5b:1a:2c:
86:47:c0:3a:38:36:3c:88:46:37:4b:03:a8:89:51:
c4:32:6e:8f:ae:bd:b7:5d:55:d9:25:0c:82:12:0f:
d3:29:9a:9f:87:56:ff:b3:d8:22:55:bb:02:ca:ba:
c3:4e:e6:cd:05:17:b5:5c:37:64:b0:62:13:97:2d:
1e:28:33:f1:47:9e:cf:5c:82:72:43:db:5a:eb:5a:
a5:36:ac:d1:9d:6f:94:1f:e1:c5:c1:ca:a8:f8:af:
0e:ac:57:f8:6e:94:96:94:41:03:60:aa:53:ac:b5:
05:0f:68:6f:0f:83:18:bb:87:65:20:e2:60:bf:ef:
ca:5f:7a:19:8b:a2:a8:12:da:f7:e9:e6:5f:c9:44:
9c:0e:42:c1:36:d8:7f:3b:d4:56:a2:c6:e0:10:c2:
33:1d:6a:5e:b1:5a:eb:c3:dd:e9:0c:2c:79:5e:a8:
b2:29:b6:60:d8:03:9e:35:76:4d:d3:fa:2f:bf:a0:
25:40:89:54:59:d7:c3:1b:88:c9:08:d1:f6:a1:92:
4e:3d:08:92:a8:11:74:da:65:ab:8d:d2:0b:e1:31:
e9:72:05:76:e4:90:5a:99:1d:e1:83:78:94:e2:f4:
e9:6e:1b:11:ba:f5:b1:86:3a:8b:ba:a1:61:f3:0d:
ef:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:72:80:E0:FF:58:D2:8D:CF:09:FD:17:F8:D9:CF:3F:E5:D0:B9:B4
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/qnKA4P9Y0o3PCf0X-NnPP-XQubQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.88.144.0/24
Signature Algorithm: sha256WithRSAEncryption
78:f7:68:e3:66:38:29:cd:26:a2:19:02:92:e9:5e:ea:af:2a:
39:35:5a:4d:9f:47:f0:59:3e:ca:dc:90:a3:65:b0:3b:64:6d:
2d:5a:6f:18:7e:dd:f2:ed:e1:8b:83:a9:82:90:55:de:a4:d0:
00:e6:b9:94:98:22:04:86:85:89:8b:8b:f5:93:a3:42:1d:91:
03:88:7e:bf:39:fe:3e:78:bc:08:cf:4f:d7:66:05:be:d9:c9:
ec:54:aa:42:37:61:e2:e0:5d:a1:fc:3a:ac:12:9d:37:01:7b:
ef:3d:0a:1f:1f:a3:46:4a:4f:b7:4f:b7:74:70:90:cd:66:3b:
24:c9:bf:97:f1:61:17:14:eb:84:b1:5b:21:19:07:b7:0b:10:
d0:4a:93:37:04:45:5f:10:6b:82:ed:4d:75:3e:f2:48:e2:6f:
d1:d6:07:af:31:58:cd:24:fb:e3:f0:4c:ab:18:1e:fd:e5:68:
d5:05:44:b0:be:a2:9e:ae:d0:af:fa:33:5d:36:62:e5:e5:fb:
66:fc:c4:3a:88:2b:36:d0:b8:54:60:38:36:bd:0a:71:4d:0a:
31:5b:59:8f:e4:33:ef:ca:e4:a9:67:a5:bb:2d:e6:2e:d4:b3:
9c:c5:0f:69:32:38:07:c0:71:f1:76:bf:21:c1:8d:42:91:1b:
1f:9e:40:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 20 14:02:32 2026 by rpki-client