Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/QQY3SWRrXup-_zkT3Gbw9FFRQlc.roa
File: QQY3SWRrXup-_zkT3Gbw9FFRQlc.roa (raw, json)
Hash identifier: 0GM2+GTDgd58laj3Kz5WGhz4s+lbWgBE5w52zgeY8xw=
Subject key identifier: 41:06:37:49:64:6B:5E:EA:7E:FF:39:13:DC:66:F0:F4:51:51:42:57
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A13200DA443FA7C22ECC59A9A139D5F342
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/QQY3SWRrXup-_zkT3Gbw9FFRQlc.roa
Signing time: Mon 12 Oct 2026 21:24:38 +0000
ROA not before: Mon 12 Oct 2026 21:24:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 64457
IP address blocks: 191.44.82.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 20 Oct 2026 13:52:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:32:00:da:44:3f:a7:c2:2e:cc:59:a9:a1:39:d5:f3:42
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Oct 12 21:24:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41063749646b5eea7eff3913dc66f0f451514257
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:49:c8:fd:79:dd:8f:0f:84:31:13:0b:8e:a3:
ee:34:a6:70:6f:b0:3d:51:c4:9d:c4:49:6f:a0:68:
57:13:89:b4:5b:e2:a1:ca:ae:3d:26:6b:db:b4:f2:
b9:1a:e7:b0:34:93:da:f5:c0:80:0a:fa:5d:a1:af:
d0:fb:29:0d:1b:09:64:92:64:b3:13:4d:f4:65:be:
11:c7:c4:8b:55:79:1c:88:38:00:2e:95:a4:c0:a4:
50:bc:55:b4:01:7e:44:f1:5c:3d:81:c1:b4:a9:58:
5b:a4:3e:8f:21:35:e1:99:c4:5e:fb:32:d7:c7:7b:
f0:62:33:38:92:62:3e:e8:39:f1:da:80:78:bc:48:
18:8c:22:e6:b6:0d:45:a1:a6:30:26:59:97:8d:79:
29:8e:be:22:75:e0:25:0f:97:d8:a0:2f:0c:02:23:
6f:dd:2d:a5:44:95:7b:41:1c:05:f3:8e:75:64:c7:
07:0b:de:89:55:ce:45:61:c7:c7:36:94:15:b3:ce:
0a:ef:41:cc:85:c3:6f:c5:8b:c2:17:b3:bb:60:41:
fe:3f:27:10:02:d0:60:29:48:f3:c1:63:ff:6d:d8:
99:f4:2c:a9:88:25:70:20:f5:b2:7c:d7:2e:8e:de:
9f:70:91:bd:2e:8c:ca:ca:80:43:0e:3a:9e:19:01:
eb:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:06:37:49:64:6B:5E:EA:7E:FF:39:13:DC:66:F0:F4:51:51:42:57
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/QQY3SWRrXup-_zkT3Gbw9FFRQlc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.82.0/24
Signature Algorithm: sha256WithRSAEncryption
82:13:63:2a:e1:ad:b0:7c:e1:c5:41:a7:96:8c:d9:82:dc:8a:
f6:6f:63:a3:c3:59:34:03:77:93:7c:03:e9:c2:7d:03:d3:81:
52:00:25:e2:53:33:71:2c:21:6f:86:ce:a7:1d:1b:3b:2b:b7:
64:ad:71:64:4b:94:9c:24:bb:b1:a5:46:52:0b:d2:53:cd:10:
1c:d5:aa:c4:b8:af:61:1c:29:06:76:82:cc:e1:9b:20:59:dc:
d1:91:3f:e5:41:76:e3:03:30:cc:70:5d:54:fd:6d:db:ad:da:
b3:7d:60:b3:31:7a:6f:07:b3:80:e7:e9:6e:a3:0e:85:fe:67:
4b:ef:5b:9f:08:af:97:3d:dc:ee:66:ab:fa:6d:9f:24:7b:00:
7e:90:41:ab:e9:61:f1:f3:c0:a9:89:f7:59:f7:50:c8:54:97:
3a:e8:7a:d9:b8:86:5d:db:ef:98:70:59:b6:99:3e:de:5c:83:
93:60:e6:da:22:2b:76:b1:f8:db:41:a0:f5:4d:79:b9:3f:01:
b1:1f:a8:4c:d3:50:a3:28:94:72:7a:52:d0:a0:a1:31:45:a5:
1a:42:2e:9d:8b:bc:30:f0:51:9d:f7:d5:c8:f1:5d:b6:3a:28:
4f:68:85:a9:00:dd:a9:3d:7e:f6:89:42:9d:fe:30:20:c6:56:
64:31:96:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 19 22:21:12 2026 by rpki-client