Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mqxAbuP0T38R6yMLxrQTjO_rqbg.roa
File: mqxAbuP0T38R6yMLxrQTjO_rqbg.roa (raw, json)
Hash identifier: ouETZOBYB2uvpZPgbJ0sAZkAJkKOQmHC/9ke6HxE7Bw=
Subject key identifier: 9A:AC:40:6E:E3:F4:4F:7F:11:EB:23:0B:C6:B4:13:8C:EF:EB:A9:B8
Certificate issuer: /CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Certificate serial: 01A0DC84B61DB3CB576DFF78239C2428E343
Authority key identifier: 63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mqxAbuP0T38R6yMLxrQTjO_rqbg.roa
Signing time: Sat 26 Sep 2026 07:01:19 +0000
ROA not before: Sat 26 Sep 2026 07:01:19 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56755
IP address blocks: 45.131.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 18:01:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:dc:84:b6:1d:b3:cb:57:6d:ff:78:23:9c:24:28:e3:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=63e916717ab11cccf11ef1fb5c12ee41950fad9b
Validity
Not Before: Sep 26 07:01:19 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9aac406ee3f44f7f11eb230bc6b4138cefeba9b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b7:4f:35:19:4c:93:6e:6b:b0:e6:db:02:a4:
3c:70:cc:ef:c3:8f:ee:33:4d:5a:eb:f0:e6:ee:7f:
cc:de:7a:7e:c8:c2:e8:28:89:ca:f6:53:a5:52:d2:
9c:e7:88:20:7a:e7:98:62:42:d4:52:88:af:3c:6e:
a8:84:52:a9:8a:47:94:6d:ce:3a:40:f2:9e:4d:db:
8b:11:8d:ed:fe:14:ca:8e:52:3c:ba:35:68:b3:6d:
ee:f7:77:a7:93:36:e9:78:84:47:c5:73:08:63:d3:
2f:34:93:dc:40:16:4f:10:9e:04:aa:37:54:15:ca:
e3:d2:3f:69:4e:de:a8:62:dc:c9:13:65:f4:65:fd:
b6:73:1a:15:bb:1d:0f:bb:64:2d:2f:2f:d2:d5:40:
35:a8:f5:51:1a:bb:9a:ae:68:c9:1c:48:e5:72:9b:
70:52:96:09:f5:c1:c9:0a:c1:67:33:56:d3:d7:76:
58:fd:c2:74:ac:ee:6c:5f:db:be:01:52:29:30:e1:
2c:39:89:ab:bf:2f:38:98:fc:94:9a:96:e4:4b:17:
a9:b9:31:63:43:8d:5b:bf:99:93:9e:81:65:a5:d5:
93:ca:3e:8e:b4:b2:6b:4b:9f:7d:bf:16:9e:2e:89:
bc:5b:c5:47:79:64:00:77:e1:0f:2e:85:32:f6:36:
fe:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:AC:40:6E:E3:F4:4F:7F:11:EB:23:0B:C6:B4:13:8C:EF:EB:A9:B8
X509v3 Authority Key Identifier:
keyid:63:E9:16:71:7A:B1:1C:CC:F1:1E:F1:FB:5C:12:EE:41:95:0F:AD:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/mqxAbuP0T38R6yMLxrQTjO_rqbg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/4957a4-ce59-4315-9976-dc5ec748f6a5/1/Y-kWcXqxHMzxHvH7XBLuQZUPrZs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.131.184.0/24
Signature Algorithm: sha256WithRSAEncryption
8f:76:bc:0b:ee:28:30:ba:ae:1f:00:37:cd:19:77:cb:47:0c:
1c:7f:e4:e8:fc:7d:84:de:57:12:d4:2b:86:4a:91:ee:e4:a5:
92:8a:45:81:30:f9:aa:b4:b5:e7:18:f0:ae:ad:7c:bc:30:34:
80:4c:c2:8e:c3:3c:51:18:bb:47:c4:ef:82:be:86:52:26:bd:
f7:98:90:f2:99:6c:8c:51:fa:9c:28:3a:99:81:50:88:4f:5e:
a6:74:2c:f8:b7:28:cf:40:40:84:b6:3b:fd:ef:ac:39:ac:c3:
e7:40:fc:bc:45:35:7e:be:f2:56:1f:38:0f:e2:f3:f5:10:f0:
03:e4:5e:b2:6c:a3:14:b2:40:30:4d:8f:99:e1:a8:ab:3c:8e:
40:5a:76:25:95:cf:e6:13:a0:be:78:86:01:8a:94:02:64:ab:
ee:58:35:94:3d:34:7e:f8:98:23:df:0e:6b:d2:99:22:c4:89:
23:68:3d:d9:f7:fb:e3:27:34:18:ed:7a:68:37:7b:e1:f6:43:
13:5a:34:43:71:5d:c2:7d:5c:6a:de:a4:86:0e:c5:00:28:a2:
cd:14:89:c1:73:73:e2:7d:c0:64:8c:e0:2f:0e:f2:c7:d8:98:
d9:54:5d:da:ca:24:5e:bd:6e:91:c1:1a:95:47:0a:12:c9:ec:
9b:66:3c:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Sep 29 02:03:48 2026 by rpki-client