Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/sQplr-AwbR_8RYI_FgYOZ178ZrI.roa
File: sQplr-AwbR_8RYI_FgYOZ178ZrI.roa (raw, json)
Hash identifier: qt7B9tBIkTrdehiRfoggQYOaAs6JsLoSpAJd9A7A7Xg=
Subject key identifier: B1:0A:65:AF:E0:30:6D:1F:FC:45:82:3F:16:06:0E:67:5E:FC:66:B2
Certificate issuer: /CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Certificate serial: 01A05828040DBEE642DC7F20B0EB01BB793A
Authority key identifier: 42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/sQplr-AwbR_8RYI_FgYOZ178ZrI.roa
Signing time: Mon 31 Aug 2026 14:10:12 +0000
ROA not before: Mon 31 Aug 2026 14:10:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218916
IP address blocks: 103.251.158.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 11 Sep 2026 08:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:58:28:04:0d:be:e6:42:dc:7f:20:b0:eb:01:bb:79:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4292b5da4b4ffeaf720649518fbaaa10c5cb2811
Validity
Not Before: Aug 31 14:10:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=b10a65afe0306d1ffc45823f16060e675efc66b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:da:3b:9c:85:28:d9:48:d2:48:20:a5:3c:4f:
0e:55:39:72:4c:4a:15:68:4a:50:ff:ff:d0:72:f0:
34:6b:87:fa:9d:c5:10:b4:52:2a:2a:39:ea:43:77:
22:8e:53:34:ab:c2:e3:05:38:1b:d2:04:05:08:d0:
a9:30:61:0c:a6:dc:43:71:5f:65:8c:bf:a8:18:51:
9f:9e:86:6f:fc:ca:d4:3d:fd:11:e0:18:8c:84:9b:
10:40:44:5d:e7:f1:2b:26:49:e4:a3:66:b4:2f:49:
24:63:46:69:cf:dc:60:49:15:38:f6:d1:cf:67:f6:
91:20:51:83:29:81:86:fd:55:a7:96:68:3b:43:7f:
92:a5:54:7d:96:85:aa:63:44:5b:54:8d:96:5b:69:
94:ed:4f:e7:fa:88:22:2d:93:fe:71:1e:9a:e5:50:
3f:38:cd:68:80:0e:06:18:bf:9f:17:80:d1:64:06:
46:54:09:52:28:ad:0f:12:bf:35:95:56:b8:7b:77:
55:ab:d9:2a:b7:c4:7b:82:47:8a:88:f3:c4:cf:2d:
e1:57:f6:d1:c0:d5:d8:07:a6:85:5e:7d:d0:d3:9a:
8e:4a:6a:f0:8a:d3:e8:82:8c:38:8d:18:a8:53:89:
c5:bf:3c:0a:27:26:a3:59:c9:1d:fb:b7:89:58:57:
99:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:0A:65:AF:E0:30:6D:1F:FC:45:82:3F:16:06:0E:67:5E:FC:66:B2
X509v3 Authority Key Identifier:
keyid:42:92:B5:DA:4B:4F:FE:AF:72:06:49:51:8F:BA:AA:10:C5:CB:28:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QpK12ktP_q9yBklRj7qqEMXLKBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/sQplr-AwbR_8RYI_FgYOZ178ZrI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/4522fb-c1da-4ccc-a7c7-a043e1b67b94/1/QpK12ktP_q9yBklRj7qqEMXLKBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
103.251.158.0/24
Signature Algorithm: sha256WithRSAEncryption
2b:23:74:6d:0e:81:75:b0:ae:0d:2c:e6:7d:0f:0e:f4:7c:3e:
2f:50:f6:a9:02:c8:53:cb:f2:f5:b7:11:f6:b4:fa:fe:1c:cd:
48:cb:e2:97:3b:3d:85:e6:d3:f8:12:e9:5c:22:a9:fc:98:d3:
e4:3c:58:a0:02:16:7a:73:99:a7:c9:de:93:76:e4:2d:ce:e0:
be:20:7a:a9:43:3f:25:1d:bd:22:95:cc:7e:8b:95:f3:67:90:
bf:fb:f5:df:3d:fa:32:33:a2:02:11:80:bc:c3:fa:84:2b:17:
93:6e:df:f1:7b:75:48:64:b7:67:44:e5:07:43:04:be:d4:3b:
de:01:dd:a2:a7:7c:a0:64:05:8e:2a:e3:15:ad:37:03:c8:9f:
73:b8:cb:82:22:b2:b8:00:38:9c:5f:0f:96:01:6c:a8:c8:38:
e4:8b:7e:55:ca:65:b6:c9:65:63:d4:cd:5c:02:9c:8b:b8:ba:
3d:3f:4b:48:ef:0a:01:a4:b3:dc:b5:86:1a:02:3a:3a:55:a0:
19:1b:37:a8:43:9e:dc:9d:b8:ca:91:8c:b2:fd:a0:46:a7:6e:
b2:aa:2a:14:11:ed:c0:fd:0e:c7:f8:26:62:35:f3:96:7a:33:
9d:59:51:36:de:08:c9:09:2f:40:fd:b0:ff:c0:21:7b:a0:15:
6a:70:1a:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Sep 10 17:41:03 2026 by rpki-client