Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Q3xAijESeYdlTPBRNmpFnCp3SeM.roa
File: Q3xAijESeYdlTPBRNmpFnCp3SeM.roa (raw, json)
Hash identifier: YwvuP8Q0rR+0UvPl0hG/coqtl5YgB8mhSubSAs1dCWg=
Subject key identifier: 43:7C:40:8A:31:12:79:87:65:4C:F0:51:36:6A:45:9C:2A:77:49:E3
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 01A049BBB171D675A444AAC8B237F914CA14
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Q3xAijESeYdlTPBRNmpFnCp3SeM.roa
Signing time: Fri 28 Aug 2026 18:57:12 +0000
ROA not before: Fri 28 Aug 2026 18:57:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206092
IP address blocks: 158.173.77.0/24 maxlen: 24
158.173.116.0/24 maxlen: 24
158.173.120.0/24 maxlen: 24
158.173.122.0/24 maxlen: 24
158.173.124.0/24 maxlen: 24
158.173.126.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 09 Sep 2026 13:57:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:49:bb:b1:71:d6:75:a4:44:aa:c8:b2:37:f9:14:ca:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Aug 28 18:57:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=437c408a31127987654cf051366a459c2a7749e3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:c1:cd:03:e0:0b:09:0b:b9:07:11:d1:b9:25:
4f:65:cb:b2:60:06:63:a9:ac:38:54:61:f5:11:70:
c2:dc:ca:7d:cf:61:a9:7c:08:11:14:a9:16:11:c2:
4d:96:aa:8e:ad:3e:92:89:d3:5d:2d:ba:12:09:8b:
3c:5b:99:11:2d:e7:b3:d1:ac:36:47:9e:46:25:88:
ba:67:4a:16:ba:f9:17:24:9d:da:d5:0c:2a:c0:41:
1b:61:30:98:ee:7a:af:eb:3e:44:28:49:17:3b:1e:
a8:0e:cd:06:ef:22:ef:b9:9b:ba:ad:ad:5f:9b:01:
54:e7:58:80:24:18:ea:9f:ea:99:1a:1c:48:f1:7e:
fb:25:d2:46:5e:61:79:9c:10:c3:66:02:18:1c:72:
d6:9c:b8:a1:d8:a7:8e:8b:58:cf:2d:00:59:48:6b:
31:96:bc:ce:85:dd:42:c1:85:20:61:82:27:bd:f4:
ae:f1:8d:3f:37:2b:75:25:f1:cf:18:cf:22:4a:fa:
a1:c4:b5:1b:14:e4:4b:09:ab:c0:51:af:ca:c5:18:
50:51:9a:30:88:fb:b1:57:ee:ca:f9:6b:73:d7:26:
a2:7d:64:a1:a3:b4:a0:16:f4:01:53:85:1d:f4:a3:
37:c8:b3:a7:38:ff:b6:12:85:bd:9d:88:9a:86:e1:
27:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:7C:40:8A:31:12:79:87:65:4C:F0:51:36:6A:45:9C:2A:77:49:E3
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Q3xAijESeYdlTPBRNmpFnCp3SeM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.77.0/24
158.173.116.0/24
158.173.120.0/24
158.173.122.0/24
158.173.124.0/24
158.173.126.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:2e:e1:28:3c:80:04:55:b2:c0:25:ed:f4:92:53:d4:60:b8:
75:dd:c8:77:54:94:2a:96:34:05:52:21:70:07:45:92:a5:bc:
53:b6:32:5c:6e:46:6c:03:15:53:92:a7:e0:a9:b1:68:67:ee:
89:67:85:00:17:40:ac:2e:a4:73:6f:e9:64:ad:e1:55:46:dd:
af:d7:28:81:43:9f:63:44:23:58:3f:e8:17:c6:15:97:2f:eb:
8f:85:62:09:75:55:00:1c:c5:f8:9a:0a:59:f3:6a:75:1e:29:
a1:b9:3b:39:2f:44:f5:c4:50:4d:a3:2c:2f:65:3c:4d:25:8f:
af:aa:ee:62:f2:7b:c5:7a:99:e7:95:dd:da:8c:38:d6:08:fa:
fb:56:82:42:0e:e0:0a:63:4a:d3:22:81:af:96:27:0a:5e:13:
b7:43:b2:b7:5b:d8:ca:bc:4f:8f:46:a1:93:fc:a9:90:b9:19:
17:e2:b3:ed:70:2c:bb:d5:c2:19:a7:06:0c:56:e4:15:fd:7f:
32:b8:ff:16:9b:70:a0:b4:e9:84:8c:3a:fd:4d:0d:08:e3:46:
79:26:64:eb:fa:c0:9f:f3:60:05:00:a0:e7:af:23:dc:91:90:
e0:4d:40:20:40:94:38:9e:03:89:00:59:59:96:49:08:4f:73:
60:a9:05:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 8 21:25:44 2026 by rpki-client