Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/QPE9lzngCgIXzXP0-DGWEUAfi9M.roa
File: QPE9lzngCgIXzXP0-DGWEUAfi9M.roa (raw, json)
Hash identifier: GMLzLsjh3ns47O4M7QAsAZ5/IVsZ3QFoDk3rfZ3NKV0=
Subject key identifier: 40:F1:3D:97:39:E0:0A:02:17:CD:73:F4:F8:31:96:11:40:1F:8B:D3
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F6B3CAEB3D595D82D97C82A5D392D5EE6
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/QPE9lzngCgIXzXP0-DGWEUAfi9M.roa
Signing time: Thu 16 Jul 2026 14:02:46 +0000
ROA not before: Thu 16 Jul 2026 14:02:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 138860
IP address blocks: 201.3.231.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6b:3c:ae:b3:d5:95:d8:2d:97:c8:2a:5d:39:2d:5e:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 16 14:02:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40f13d9739e00a0217cd73f4f8319611401f8bd3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:19:88:03:cd:0d:0c:58:3f:8f:75:c7:68:86:
ba:dd:31:ec:18:d2:7c:0d:c8:71:5a:87:81:6e:38:
6d:cb:ea:dc:3f:39:cc:93:8c:a9:d2:6e:0c:3c:4e:
a0:ce:05:ae:ca:da:7a:3d:a0:b7:e6:85:31:8b:48:
73:50:ff:29:a3:d6:c2:53:94:61:00:3f:cd:74:fa:
2b:8f:7a:39:e0:64:1f:0b:0a:20:a5:b9:fe:cb:f5:
d8:fd:42:65:3d:0f:77:ba:71:28:87:d1:90:01:13:
5d:8a:15:f1:dd:28:a2:40:76:81:02:77:c2:1f:b2:
bf:1b:b5:e1:ca:18:0d:5f:b1:98:8a:ba:e7:7c:3b:
9d:6f:8c:3a:3e:58:2a:61:b8:87:06:d9:6f:77:5e:
14:fc:df:d2:09:7a:0f:05:c0:14:3d:d1:ca:97:8c:
13:27:7c:f6:8a:d7:83:1b:b6:4c:6f:a1:a0:e9:66:
5d:c2:d8:57:45:9d:87:f0:5e:77:37:ae:2e:38:d3:
1f:42:45:e6:63:cc:fa:0d:a6:ff:8f:40:73:85:8d:
f0:18:ea:a6:d4:31:f1:01:ce:1c:71:5b:71:e9:98:
d0:c2:f6:a0:fb:46:e5:b3:bd:2d:a7:cf:3b:bb:b3:
bc:1a:fa:7b:10:da:ba:b3:aa:79:c8:3a:18:3c:35:
4a:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:F1:3D:97:39:E0:0A:02:17:CD:73:F4:F8:31:96:11:40:1F:8B:D3
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/QPE9lzngCgIXzXP0-DGWEUAfi9M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.231.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:05:1a:6a:85:0a:a1:ce:ec:92:be:7b:6a:48:d2:36:e9:94:
b0:91:99:b0:27:64:82:88:50:74:9c:77:ff:ca:69:2a:32:b3:
07:3d:91:67:e3:6e:51:32:25:ee:e4:52:83:9b:4d:1c:a6:2e:
b4:a7:df:06:fe:63:16:f2:04:d1:eb:1b:87:7d:0c:ac:cb:37:
57:00:23:9b:02:24:ef:89:8d:cb:73:da:44:ae:98:75:ca:a7:
ff:4f:cf:39:76:e9:9c:63:16:06:14:23:70:45:2a:ce:45:23:
2b:77:4e:90:9b:c4:86:c5:b3:85:b3:8e:74:5a:65:b4:25:55:
9b:d4:09:5a:fd:b5:4d:6c:83:a9:2b:06:21:ed:e1:01:ea:cb:
42:3c:ea:10:33:a3:ea:6a:fe:ee:72:b5:41:87:af:6f:44:80:
d1:d1:50:d0:cb:94:e8:0d:45:f1:49:5d:45:f3:79:97:1b:88:
52:34:8a:6f:45:91:93:8c:5d:58:b4:e3:75:db:f4:08:fe:75:
68:96:3b:59:f9:d4:b7:59:15:51:71:bb:98:d5:46:aa:a8:24:
23:3c:b8:dc:2f:9e:b3:e5:02:bc:b0:56:1e:fa:c5:c4:dd:d0:
41:d2:21:a2:e0:a6:4f:0c:66:62:b4:fa:13:bf:f4:be:26:5e:
92:72:99:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:29 2026 by rpki-client