Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/CqrhoF06nwsXnfV60coFB8opnX4.roa
File: CqrhoF06nwsXnfV60coFB8opnX4.roa (raw, json)
Hash identifier: lOteqrV4Oa0iffAmsFcrvzSwfCFljDUJVec5YEQXKlA=
Subject key identifier: 0A:AA:E1:A0:5D:3A:9F:0B:17:9D:F5:7A:D1:CA:05:07:CA:29:9D:7E
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A08BC34F4148C89718568E20371C695EDF
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/CqrhoF06nwsXnfV60coFB8opnX4.roa
Signing time: Thu 10 Sep 2026 14:40:27 +0000
ROA not before: Thu 10 Sep 2026 14:40:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 148996
IP address blocks: 79.182.19.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 02:16:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:8b:c3:4f:41:48:c8:97:18:56:8e:20:37:1c:69:5e:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 10 14:40:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=0aaae1a05d3a9f0b179df57ad1ca0507ca299d7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:06:50:49:4b:61:62:3e:e3:e1:1c:d8:c0:a9:
71:b4:ab:c8:1a:68:30:e1:a1:1e:c7:0e:49:ef:e1:
4f:64:77:46:ab:30:cd:63:09:ef:44:4a:f7:d4:f2:
18:5f:1d:2a:4d:a5:b4:18:d2:83:03:20:da:44:18:
fb:18:5a:e6:f9:7a:d9:96:6b:11:1c:77:09:8f:89:
69:25:1d:3c:9d:a2:b2:1c:37:09:19:ee:7a:68:3a:
9c:6b:e3:0b:a3:79:4b:d8:0d:e1:35:97:cd:88:d2:
06:ec:ca:ea:c9:c9:3c:9f:5f:ae:0a:e4:30:b6:a9:
f0:06:47:a2:2f:5c:01:13:58:69:8e:c9:d2:8d:b7:
31:28:8c:40:1b:67:ae:ed:d1:5d:87:d2:7a:9b:ba:
f7:5f:18:62:bf:27:10:35:22:9a:04:43:c7:a3:fb:
b3:2b:a1:c3:3c:4c:12:19:6f:04:47:22:d8:a3:77:
fd:5b:78:0e:02:f1:b5:8a:54:4b:3f:61:36:6c:75:
b8:c6:dd:96:50:89:22:44:34:7f:53:d0:c4:fb:45:
fa:f0:7e:08:7b:ee:0d:72:b4:70:21:2f:4f:ee:d5:
aa:aa:b7:3b:77:79:51:08:da:87:57:22:96:97:81:
8a:63:5a:f4:20:33:b2:7a:63:53:08:ea:6f:24:00:
34:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:AA:E1:A0:5D:3A:9F:0B:17:9D:F5:7A:D1:CA:05:07:CA:29:9D:7E
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/CqrhoF06nwsXnfV60coFB8opnX4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.19.0/24
Signature Algorithm: sha256WithRSAEncryption
04:b3:0f:3a:8b:fd:31:78:4c:77:1a:17:5e:e6:31:22:ea:6c:
d0:aa:0a:b1:12:0d:2b:62:7d:a0:6c:d8:1d:27:bf:a8:c7:9e:
d0:a3:04:f4:a2:e8:3b:b9:09:78:e4:76:a0:8b:f4:a9:f2:f8:
0c:b4:a2:97:96:14:15:99:dc:8a:9d:ab:8a:33:50:3d:ef:c0:
17:07:dd:b8:57:fc:9b:f3:56:14:df:0f:a4:62:66:e9:9c:15:
3b:8c:a7:92:83:6d:cd:57:10:f4:fb:a7:1b:58:36:0f:1c:0f:
43:22:10:c2:26:8e:b8:a3:41:7d:0d:bd:4b:f2:9c:8a:ad:09:
7e:5f:f8:30:1a:1d:dd:b3:91:aa:22:c7:2d:bc:a8:3b:30:20:
f5:d6:9d:96:92:22:fb:b1:d8:bc:fb:75:ff:39:42:7b:66:6d:
e0:9b:b3:b9:e0:bb:5a:b2:4d:31:d4:7d:be:6a:7d:90:f6:2f:
da:af:97:f2:b5:ea:b5:e8:20:dc:b1:d0:5d:e9:63:87:52:78:
8d:b5:fb:87:d1:94:05:f2:fa:73:bc:8e:a5:04:3c:30:83:89:
86:7e:08:98:28:ef:40:bb:f2:75:2b:59:20:a3:32:d5:07:c4:
84:2d:cd:67:c5:ce:c4:46:9a:97:92:7f:5c:65:08:39:da:f0:
af:8e:66:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Sep 13 08:48:25 2026 by rpki-client