Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/qzvviQBVoVU_hFhOpu4S7PT4408.roa
File: qzvviQBVoVU_hFhOpu4S7PT4408.roa (raw, json)
Hash identifier: fhKOe7zU90wUc5drpC1s3+xhu9SU1hgJLzdtB+Xk4ZM=
Subject key identifier: AB:3B:EF:89:00:55:A1:55:3F:84:58:4E:A6:EE:12:EC:F4:F8:E3:4F
Certificate issuer: /CN=3b53867284132eeccd56e6b155cf7f627d264f40
Certificate serial: 01A150171EEA1C70F85089ACD86B063B9687
Authority key identifier: 3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/qzvviQBVoVU_hFhOpu4S7PT4408.roa
Signing time: Sun 18 Oct 2026 17:37:34 +0000
ROA not before: Sun 18 Oct 2026 17:37:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209861
IP address blocks: 2a0a:3e45:be00::/40 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.mft
rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:50:17:1e:ea:1c:70:f8:50:89:ac:d8:6b:06:3b:96:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3b53867284132eeccd56e6b155cf7f627d264f40
Validity
Not Before: Oct 18 17:37:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab3bef890055a1553f84584ea6ee12ecf4f8e34f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:68:0f:cf:ef:06:3c:09:2f:dc:9f:91:04:3e:
45:29:09:38:24:8c:c0:b5:b9:e0:d4:40:94:fc:f9:
8c:20:9b:0b:2c:5a:50:24:38:8c:b0:d0:74:ad:a6:
da:e1:19:ec:db:d7:1a:ad:e2:37:51:d6:52:bf:e4:
94:e6:67:80:80:bb:20:af:cb:b1:4a:7e:51:2f:7c:
bb:36:42:a1:b5:2f:03:ff:1c:6e:50:ec:7e:43:06:
5e:16:1e:a3:16:ec:32:8c:b3:fc:f4:75:d6:53:08:
f6:7c:08:1b:36:16:03:2c:cd:2a:80:d0:5b:c0:45:
04:d6:5f:a7:01:37:13:ed:57:f0:91:30:79:d7:a2:
53:81:01:1f:14:eb:58:19:17:5e:d5:af:0e:b0:66:
a9:ea:eb:25:73:0c:65:1e:b8:1e:8b:e4:f7:f1:9a:
8d:03:6f:9e:46:f7:51:4f:ae:81:d8:33:39:7a:d6:
13:cf:6c:06:cd:12:0f:69:48:47:43:4a:b5:84:99:
6d:a5:ab:88:a8:ae:f2:85:8a:ff:cb:0e:40:b8:1c:
23:49:fc:30:f3:2c:57:62:9e:e2:d5:de:bb:5f:18:
15:e6:2c:2e:8a:ab:1c:8c:85:27:e6:18:44:19:a2:
df:1b:2d:56:2e:01:10:78:f8:73:0a:2e:ab:d3:64:
78:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:3B:EF:89:00:55:A1:55:3F:84:58:4E:A6:EE:12:EC:F4:F8:E3:4F
X509v3 Authority Key Identifier:
keyid:3B:53:86:72:84:13:2E:EC:CD:56:E6:B1:55:CF:7F:62:7D:26:4F:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/qzvviQBVoVU_hFhOpu4S7PT4408.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/3ad558-51a0-4800-bbf8-b20858e2993b/1/O1OGcoQTLuzNVuaxVc9_Yn0mT0A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:3e45:be00::/40
Signature Algorithm: sha256WithRSAEncryption
a8:2a:e7:b5:ce:4d:78:97:f0:e8:36:25:28:72:b6:6d:1f:bb:
50:45:5a:c8:a1:e4:b3:82:cd:91:75:c1:d8:24:cb:8c:ea:a8:
e7:ad:cf:74:01:50:ae:dd:ef:51:5d:ca:72:02:98:41:78:ea:
ea:db:87:46:a0:ad:8b:28:85:76:da:9a:14:21:5a:2c:58:e4:
c2:4f:0f:15:a2:19:91:c7:f8:a7:e1:72:28:9c:41:ea:2c:8f:
f8:5b:af:d8:fd:ff:0e:bc:15:81:e3:14:95:b5:70:52:cc:0d:
f1:6c:00:0f:c8:6f:0a:d8:ae:a9:5e:8d:00:e0:b9:ac:0c:74:
9f:b4:49:2d:07:8d:fc:07:ba:68:ce:97:50:9c:87:c3:07:87:
ac:a7:f6:a6:6e:7c:5a:64:eb:dd:60:74:ab:92:21:59:3a:4b:
79:3a:a1:e2:d7:1f:ab:f1:a2:d7:4c:61:48:ce:cb:c9:81:da:
72:81:ae:7b:d1:29:60:02:44:ce:7d:2e:5d:4d:d8:47:bf:41:
3e:0b:8b:4b:52:ed:0f:2d:43:48:80:4b:0d:85:8c:03:b7:bf:
c2:73:6b:fd:61:02:b5:9f:82:70:39:e4:e3:1e:3a:9f:f0:9b:
0b:43:1d:47:c6:b2:c9:ca:a4:4d:79:39:8b:b9:e8:b1:78:7c:
9e:6c:99:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Oct 27 02:53:48 2026 by rpki-client