Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/qpYQo3kblbWomPwFmEhdi-yU3Ws.roa
File: qpYQo3kblbWomPwFmEhdi-yU3Ws.roa (raw, json)
Hash identifier: TeIBrPWRZVXfPEfWweP/JAjqy2VRwcKRY0wXngW8UGg=
Subject key identifier: AA:96:10:A3:79:1B:95:B5:A8:98:FC:05:98:48:5D:8B:EC:94:DD:6B
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019E59C6BB5EE753A7C25A39A296AAE2244C
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/qpYQo3kblbWomPwFmEhdi-yU3Ws.roa
Signing time: Sun 24 May 2026 11:37:36 +0000
ROA not before: Sun 24 May 2026 11:37:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207343
IP address blocks: 141.98.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 05 Jun 2026 03:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:59:c6:bb:5e:e7:53:a7:c2:5a:39:a2:96:aa:e2:24:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: May 24 11:37:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa9610a3791b95b5a898fc0598485d8bec94dd6b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:1b:a5:53:2c:04:c5:b0:92:f1:1d:40:09:4e:
e7:f3:3c:f5:a5:63:55:0d:3a:3b:5b:ee:e0:10:f1:
56:1e:7f:15:7f:a4:25:72:de:10:1b:64:b4:bf:08:
15:b2:a5:90:2f:13:c3:b3:d8:f4:a2:84:e1:72:64:
f5:8d:92:06:97:25:b9:4b:ee:03:3e:3d:1a:6d:86:
96:f0:e6:b9:16:ca:5c:9b:83:fd:80:92:3b:d4:81:
eb:4a:af:50:84:44:ce:97:b4:31:a9:f0:f6:31:3c:
c5:a7:cf:3e:b8:e8:06:1b:a2:15:ff:d4:94:87:76:
f0:e9:37:48:0e:55:e6:e8:50:a8:ce:81:5c:23:59:
0f:4c:18:00:00:2e:c3:52:38:28:4c:06:a1:38:37:
ed:f9:d0:6d:91:74:88:09:e5:fa:8a:17:10:3c:e2:
7e:21:3d:4e:9a:40:05:68:e2:7b:08:8f:c6:95:fd:
9e:83:7b:56:87:b1:2e:6f:13:6c:74:77:ea:f5:e9:
f0:a6:18:22:c2:75:0b:46:c1:4c:05:7b:c0:c0:22:
e9:71:ce:34:2a:ec:6f:ec:ac:b5:60:fc:9d:6f:94:
85:1e:b3:ff:42:30:67:98:cf:12:ff:33:3b:4f:72:
cf:14:6d:f3:e4:3e:d3:68:9f:7f:4d:d2:58:a2:9c:
52:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:96:10:A3:79:1B:95:B5:A8:98:FC:05:98:48:5D:8B:EC:94:DD:6B
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/qpYQo3kblbWomPwFmEhdi-yU3Ws.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.151.0/24
Signature Algorithm: sha256WithRSAEncryption
1c:17:45:14:09:00:e6:8c:9f:c5:85:33:63:e7:b1:fb:22:2a:
bc:d8:08:0c:8f:70:d3:f4:35:04:04:c1:ff:23:1d:ec:78:e4:
e9:88:6d:53:fa:3f:5f:07:a7:54:ef:17:74:97:cd:fb:54:7d:
ed:bc:1c:a5:46:cc:15:b7:b7:73:90:ef:bb:69:87:11:1f:74:
95:a5:4b:82:3d:b8:5b:3a:5d:a6:f0:bf:48:46:7f:2d:65:38:
45:57:13:c0:1c:42:32:cf:fc:f6:8a:fc:19:5f:13:64:8f:e5:
e9:23:ac:eb:5f:d8:0b:bb:67:f1:e3:9f:08:8f:35:25:41:7e:
06:9a:0c:b3:1f:a6:ea:40:10:63:f8:91:a2:15:7e:a6:7e:75:
e1:67:54:80:a0:28:16:04:a0:7f:84:38:a5:dd:60:48:e8:d1:
0a:0f:45:3a:62:35:0e:7c:e1:16:00:51:8a:e8:a3:02:71:48:
41:f9:77:b1:cf:8e:a5:24:85:db:a9:d7:f7:38:2c:cd:37:ed:
db:7d:04:1f:e3:d0:7e:b0:62:96:da:8f:dc:86:12:aa:37:b7:
d4:e4:39:4c:5f:ba:11:63:17:97:1b:44:9d:61:12:cf:34:22:
75:58:ad:ef:43:2e:ff:fb:e5:21:4c:ad:fe:78:e3:64:07:6b:
3e:e0:4f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 4 12:00:04 2026 by rpki-client