Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/Q3L-LgTqDK7r9fzV5MtomjFHC-M.roa
File: Q3L-LgTqDK7r9fzV5MtomjFHC-M.roa (raw, json)
Hash identifier: 4q7SFetay5ZZBxJneCd88Uuz+q4qTer9+zcAOeE6uTQ=
Subject key identifier: 43:72:FE:2E:04:EA:0C:AE:EB:F5:FC:D5:E4:CB:68:9A:31:47:0B:E3
Certificate issuer: /CN=040c6496edb2c7ed76981805e954d72baf2d8e82
Certificate serial: 01A0D7E3A3586DA817DFE90CE09B4858D638
Authority key identifier: 04:0C:64:96:ED:B2:C7:ED:76:98:18:05:E9:54:D7:2B:AF:2D:8E:82
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BAxklu2yx-12mBgF6VTXK68tjoI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/Q3L-LgTqDK7r9fzV5MtomjFHC-M.roa
Signing time: Fri 25 Sep 2026 09:26:54 +0000
ROA not before: Fri 25 Sep 2026 09:26:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 46606
IP address blocks: 176.74.24.0/21 maxlen: 24
185.184.152.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.mft
rsync://rpki.ripe.net/repository/DEFAULT/BAxklu2yx-12mBgF6VTXK68tjoI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 21:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:d7:e3:a3:58:6d:a8:17:df:e9:0c:e0:9b:48:58:d6:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=040c6496edb2c7ed76981805e954d72baf2d8e82
Validity
Not Before: Sep 25 09:26:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4372fe2e04ea0caeebf5fcd5e4cb689a31470be3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:73:74:e5:82:71:be:db:80:3d:aa:a7:ad:2f:
70:5b:61:f1:d4:7f:5b:d2:05:21:85:2b:dc:16:47:
fb:87:f7:f2:d7:95:e7:7c:5f:d0:c0:0b:e0:11:a2:
b3:e4:9d:9b:65:0c:91:bb:83:b6:50:02:51:a9:57:
7d:3a:aa:1f:41:d9:81:bf:34:85:4c:d8:9c:75:f2:
63:06:65:2e:32:38:31:17:25:79:de:1b:0d:2d:a7:
9b:c6:9e:e5:16:81:0a:e1:6a:a2:99:3f:ea:6c:e9:
ab:67:01:c2:a5:52:57:52:3f:d6:84:01:23:5b:c3:
44:57:fc:99:4e:dd:2f:5e:a8:a1:0e:e8:53:05:a0:
11:ce:89:d1:6a:e0:4a:d2:3e:6a:45:83:d3:be:74:
11:2a:1a:f5:89:e2:35:c0:42:84:a1:5b:12:f3:fe:
07:cc:a0:1e:01:73:2e:c3:ee:25:87:00:0c:97:b4:
c8:1b:01:f8:9c:49:b6:89:99:a0:4c:e5:1f:d0:84:
56:89:a2:18:f8:b3:b3:2d:9a:a9:30:bb:40:34:11:
a4:b4:b6:60:e9:e3:d6:a0:b8:b4:d6:70:2e:b9:a0:
25:a6:22:d5:56:cd:b8:de:b9:2f:9e:6a:21:b2:ec:
8b:06:f7:c5:cb:e3:f9:2a:59:ee:12:e0:03:e1:ee:
7e:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:72:FE:2E:04:EA:0C:AE:EB:F5:FC:D5:E4:CB:68:9A:31:47:0B:E3
X509v3 Authority Key Identifier:
keyid:04:0C:64:96:ED:B2:C7:ED:76:98:18:05:E9:54:D7:2B:AF:2D:8E:82
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BAxklu2yx-12mBgF6VTXK68tjoI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/Q3L-LgTqDK7r9fzV5MtomjFHC-M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/428325-203e-41f8-9a9f-e2065dc0b122/1/BAxklu2yx-12mBgF6VTXK68tjoI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.74.24.0/21
185.184.152.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:9a:50:07:c6:e4:e2:a4:40:44:d0:c9:69:ea:a2:d4:11:84:
5e:46:17:2c:9f:78:68:43:da:70:e4:81:bc:11:16:9a:ae:fb:
55:47:48:ef:96:98:09:b4:a0:40:30:61:96:65:5f:32:32:5e:
32:d7:a3:93:3d:63:54:e9:16:14:85:0c:18:fb:f7:e1:29:df:
71:b3:8b:a2:75:ca:b8:64:9d:44:8d:f1:cd:1d:c8:f3:e3:78:
a4:56:e7:30:8a:27:bf:c3:a3:78:90:74:b2:1c:8a:0e:53:5d:
32:bc:a8:0e:8c:5e:11:f8:05:a2:21:33:13:27:9b:7d:22:68:
6d:c5:24:52:a1:45:38:f7:ed:62:40:67:01:41:23:9f:8f:cc:
24:64:19:88:b6:18:e0:b7:87:cf:17:52:21:5a:e6:60:63:ca:
9d:f4:85:bf:8b:d0:39:3d:b6:53:26:0d:aa:78:5b:82:b4:0e:
a5:1f:13:5e:05:af:c7:99:0b:1e:a7:a9:60:4b:94:c6:09:56:
fe:05:21:8d:28:3c:fc:6b:2d:7c:08:c9:88:cc:ad:7d:56:dd:
40:0f:a8:a9:62:43:a4:db:84:94:46:73:1b:3d:e0:77:0f:a9:
23:90:79:87:5c:7d:93:9e:7d:66:71:2b:ee:a0:81:fb:23:f1:
61:78:f4:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 12 03:58:06 2026 by rpki-client