Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/QWA_uofXGCzsKuc_5MjZ-9Iqapo.roa
File: QWA_uofXGCzsKuc_5MjZ-9Iqapo.roa (raw, json)
Hash identifier: Myntq/jB052ssuyNq1wrshjSxF8NHJKposHtJoioXmQ=
Subject key identifier: 41:60:3F:BA:87:D7:18:2C:EC:2A:E7:3F:E4:C8:D9:FB:D2:2A:6A:9A
Certificate issuer: /CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Certificate serial: 01A0FAD1AACE027373A81B6C774DAF0E821F
Authority key identifier: 42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/QWA_uofXGCzsKuc_5MjZ-9Iqapo.roa
Signing time: Fri 02 Oct 2026 04:13:59 +0000
ROA not before: Fri 02 Oct 2026 04:13:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 194.53.202.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 18 Oct 2026 23:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fa:d1:aa:ce:02:73:73:a8:1b:6c:77:4d:af:0e:82:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=42ce759320195b9cc18ccfcb1b532aea949258f1
Validity
Not Before: Oct 2 04:13:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41603fba87d7182cec2ae73fe4c8d9fbd22a6a9a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:91:a5:03:44:84:2a:fc:12:72:27:0e:44:99:
9e:28:cd:68:70:74:4e:5e:8e:2f:46:a8:0a:5a:09:
4d:73:9f:36:51:a2:29:fe:f3:58:2f:09:b5:a7:e7:
10:21:65:bb:9e:5f:6e:b8:fb:2e:93:c1:92:8d:5a:
4a:4b:1d:bb:53:f7:d1:47:39:5f:e3:7e:57:4e:e8:
4e:ca:16:6f:b0:f4:55:6b:40:f7:93:28:d0:ee:58:
e2:54:6b:ca:d0:26:40:bf:fb:3c:c7:ff:c5:c4:ed:
3e:e0:56:fe:a6:27:63:b3:09:97:d4:d4:1f:e0:5c:
46:56:75:96:92:10:83:ed:32:6f:22:5d:9f:89:1a:
91:e9:85:ef:56:c9:73:ab:56:cf:33:69:b9:02:39:
b4:da:13:8a:9b:80:f1:57:60:83:2a:6e:87:70:31:
73:b0:0a:9d:3a:12:78:f7:40:d8:16:fe:cc:8e:51:
d9:37:b9:bd:0b:5b:7e:15:fe:08:a1:7d:6d:2b:ab:
8b:16:1d:87:3e:32:60:6c:58:b2:79:c1:c4:f2:19:
da:f8:9a:ba:1c:8b:52:3d:fb:e6:14:7e:ce:7f:51:
0c:b8:04:f7:98:c9:c8:26:d0:55:81:a9:2c:d5:fd:
1d:3f:bc:42:24:25:9f:1e:f6:29:e7:98:a5:81:0c:
dc:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:60:3F:BA:87:D7:18:2C:EC:2A:E7:3F:E4:C8:D9:FB:D2:2A:6A:9A
X509v3 Authority Key Identifier:
keyid:42:CE:75:93:20:19:5B:9C:C1:8C:CF:CB:1B:53:2A:EA:94:92:58:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/QWA_uofXGCzsKuc_5MjZ-9Iqapo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/24/a52048-12ca-4a03-95be-697948ea71f5/1/Qs51kyAZW5zBjM_LG1Mq6pSSWPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.53.202.0/24
Signature Algorithm: sha256WithRSAEncryption
37:99:9c:1a:7d:e8:e4:d5:0b:6e:24:1f:16:51:f4:f0:07:62:
fe:75:de:97:89:74:da:05:f2:fa:ae:a1:0f:0a:d2:6f:e1:07:
fc:68:68:8b:5e:c1:81:7a:fd:87:b0:c5:ff:41:f4:30:47:97:
1a:e7:07:24:75:2e:d7:59:bb:78:c1:0b:08:b7:7f:b5:5d:49:
78:86:41:78:4b:cb:f9:87:02:7a:ff:60:09:85:0e:d6:22:d1:
7f:85:c9:16:b1:f0:1f:ec:dd:15:b6:ea:6e:20:8a:31:43:5e:
b0:75:0c:ca:57:0b:61:b3:4e:e1:1b:39:6c:cd:f5:b1:6a:24:
4c:42:ac:7b:fa:cb:6d:fe:e7:90:51:69:01:b3:ca:12:9f:6e:
ae:a9:ed:d3:52:f0:12:02:85:3d:99:ba:c0:79:4e:22:67:f2:
e0:39:d3:b3:21:64:97:51:8b:2a:00:15:6c:4e:0d:48:d1:5f:
77:f0:5f:cc:b5:42:d1:85:ba:3b:e7:4c:6a:81:e3:c6:13:ec:
ab:cc:74:8e:96:20:96:80:ab:42:55:c7:70:c0:be:bf:11:cb:
ed:3d:fb:43:5d:8d:3d:b5:d2:e6:fa:25:ed:e3:cc:dc:1a:6c:
44:9c:0e:b6:a4:66:8a:60:d4:e5:75:7e:66:fe:95:1c:9b:1f:
54:a4:e8:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 18 07:25:05 2026 by rpki-client