Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Q4ipvxDEOQXR2R2otc4IsEs-RDE.roa
File: Q4ipvxDEOQXR2R2otc4IsEs-RDE.roa (raw, json)
Hash identifier: qKwlcKK3IV7yVXp6ve6jUdCjExtOSpiW5uBBVSRdDHg=
Subject key identifier: 43:88:A9:BF:10:C4:39:05:D1:D9:1D:A8:B5:CE:08:B0:4B:3E:44:31
Certificate issuer: /CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Certificate serial: 01A0EC3C1FB15EEDECB953D4E4D6CA3B39C3
Authority key identifier: E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Q4ipvxDEOQXR2R2otc4IsEs-RDE.roa
Signing time: Tue 29 Sep 2026 08:15:58 +0000
ROA not before: Tue 29 Sep 2026 08:15:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397423
IP address blocks: 5.172.37.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.mft
rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 23:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:3c:1f:b1:5e:ed:ec:b9:53:d4:e4:d6:ca:3b:39:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e9713ef25277e13dd73f44196fda5cec0fd9ce16
Validity
Not Before: Sep 29 08:15:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4388a9bf10c43905d1d91da8b5ce08b04b3e4431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:a7:7b:91:12:dd:3c:ff:42:a7:5d:0e:00:cd:
26:d6:41:ae:8c:11:97:4b:ec:20:27:9a:82:66:c6:
1e:5d:6c:74:9b:7b:6b:c6:33:62:80:d5:4a:4f:84:
98:9a:a5:ee:b4:57:cc:b4:fa:a6:9c:cb:66:9b:3d:
4d:5e:d3:bb:6f:c3:91:93:66:9c:c9:2d:e8:3f:b3:
42:9c:58:59:e5:fb:1d:ca:10:dd:36:00:88:0d:bc:
5e:76:1e:a3:7f:3c:7b:e3:f2:7a:e9:03:5e:10:26:
27:cd:b1:df:bf:b8:bd:4e:f9:c9:6a:b5:b3:53:8c:
83:f9:72:28:5a:6e:79:b4:93:5c:75:a5:1f:bb:3b:
67:96:ba:74:12:6e:28:4f:a3:dc:9d:58:8b:2d:51:
6f:5b:c7:a7:e8:31:5c:30:3d:fb:94:5a:7e:f4:14:
b5:25:dc:41:cd:c0:fa:a2:3d:73:83:a0:74:f9:ea:
4f:d7:02:cf:01:7e:fa:af:dc:8b:81:53:43:d6:a9:
46:a6:51:84:0c:7c:ff:9e:f9:13:0a:db:fd:fb:9c:
27:dc:1f:b6:a6:ce:2b:b9:9a:7b:1a:57:41:16:59:
2d:d8:c2:ee:b1:33:4f:77:4b:44:9c:10:89:31:27:
8e:88:45:1f:ed:8d:bd:63:44:80:fa:19:ed:79:ad:
cf:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:88:A9:BF:10:C4:39:05:D1:D9:1D:A8:B5:CE:08:B0:4B:3E:44:31
X509v3 Authority Key Identifier:
keyid:E9:71:3E:F2:52:77:E1:3D:D7:3F:44:19:6F:DA:5C:EC:0F:D9:CE:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/Q4ipvxDEOQXR2R2otc4IsEs-RDE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/e176eb-56f2-4807-b101-0f66c1887916/1/6XE-8lJ34T3XP0QZb9pc7A_ZzhY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.172.37.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:96:b7:1c:6e:ba:9e:f1:f1:89:36:db:dc:22:bb:ba:09:23:
83:cd:04:85:5f:02:6a:13:21:d0:4b:2b:26:d8:1d:bc:fc:e7:
25:da:a3:37:55:9c:d8:b2:ba:80:ca:b4:8a:b6:d3:96:b7:1f:
d0:4d:70:b7:92:05:0d:09:08:8e:60:46:31:e5:b6:11:92:9d:
ca:18:69:74:4f:d6:44:01:ea:17:e0:85:07:37:ef:f8:c9:3e:
be:7d:fb:9b:1f:c4:8c:37:18:cc:cb:14:99:48:28:f1:63:81:
4c:fc:a9:42:d8:12:7c:7f:01:b5:14:d1:a9:49:86:ed:91:cb:
f9:be:55:2a:0d:12:79:c4:ab:e4:ba:ef:a2:f8:d4:a8:47:ae:
19:2b:be:cd:90:0e:ba:56:61:6a:84:b2:ae:0e:53:b5:34:24:
00:1e:50:3e:b6:4a:01:a1:34:95:d8:92:99:60:0e:85:d7:cf:
fb:ec:be:2b:16:2b:f9:9a:87:20:54:e8:ce:8c:0d:e1:e6:3e:
aa:32:69:b6:70:eb:b8:78:1d:bb:9b:29:51:6e:d5:10:21:de:
ed:d8:f0:a7:18:c3:be:f2:77:d9:c8:65:2f:0b:1f:09:1a:ad:
30:ef:e0:45:ca:e7:9c:eb:cf:64:be:df:66:88:6a:12:1c:b1:
fa:d8:3c:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Oct 9 09:21:50 2026 by rpki-client