Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/QeNQHuDBcjOMaoh5c42weElErSI.roa
File: QeNQHuDBcjOMaoh5c42weElErSI.roa (raw, json)
Hash identifier: reWty+wLZd5dXboJLVZLgFb2tSkYERpR08awgcAGEIY=
Subject key identifier: 41:E3:50:1E:E0:C1:72:33:8C:6A:88:79:73:8D:B0:78:49:44:AD:22
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 01A05366C6C06AEFC66B4ED9EC0D5A62C64E
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/QeNQHuDBcjOMaoh5c42weElErSI.roa
Signing time: Sun 30 Aug 2026 16:00:39 +0000
ROA not before: Sun 30 Aug 2026 16:00:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62563
IP address blocks: 191.44.110.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 16:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:53:66:c6:c0:6a:ef:c6:6b:4e:d9:ec:0d:5a:62:c6:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Aug 30 16:00:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41e3501ee0c172338c6a8879738db0784944ad22
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:d4:29:97:76:fa:40:76:80:89:28:dc:12:89:
19:b3:4e:64:04:2a:b6:04:1f:ab:aa:08:d6:e9:83:
7f:a7:fb:27:df:79:ff:af:6c:4a:82:dd:0b:c8:9b:
40:e0:ed:cb:2b:56:f8:1d:fe:20:61:0f:82:8f:b6:
75:92:95:d2:b4:89:e6:e5:06:d4:40:ba:3f:43:28:
25:e9:ac:40:e2:33:53:5f:2a:8f:72:98:93:a7:bb:
c2:d1:62:3c:bc:3b:60:42:43:86:3a:3a:63:44:a2:
05:1d:2e:2b:e7:d1:5c:5c:8a:c0:59:0b:52:b6:df:
ff:ae:9f:61:ad:b1:83:6e:b8:61:5f:bb:66:2c:74:
a1:ab:f4:e9:b7:cf:b6:5c:68:83:9b:8e:e6:bf:07:
a4:12:3d:7e:1a:57:6e:a7:60:3c:60:04:9d:04:19:
5e:75:5a:03:66:e7:79:21:f5:01:09:f6:4e:63:8c:
56:59:fc:48:0e:ab:54:69:dd:c6:8b:fe:70:83:d5:
45:75:85:12:82:2f:e5:45:fd:d3:67:10:40:94:d7:
19:92:43:80:bc:5b:6e:b3:97:1a:c1:cb:a9:7f:9b:
70:53:3f:07:9d:73:0c:c6:9c:7c:f2:41:bd:2c:da:
97:88:91:85:f4:da:da:51:32:a5:01:ee:02:d7:f9:
85:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:E3:50:1E:E0:C1:72:33:8C:6A:88:79:73:8D:B0:78:49:44:AD:22
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/QeNQHuDBcjOMaoh5c42weElErSI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.110.0/24
Signature Algorithm: sha256WithRSAEncryption
8e:47:1d:14:d0:af:7e:83:cd:4c:9c:fc:fb:a9:36:e8:a1:e9:
6b:f9:85:88:c1:92:10:35:3c:75:77:5d:28:f6:58:4f:b5:5e:
37:0b:26:a5:7d:f5:e4:48:74:88:51:2c:df:e1:d5:0a:a0:de:
92:9e:36:9e:82:7d:69:ff:d9:06:5e:6f:d0:a1:cf:20:3a:44:
c3:38:b6:cc:05:07:7f:b5:9b:5e:b3:35:b5:d7:ec:bd:52:04:
ac:1f:92:ea:1d:09:b0:df:55:41:9b:f0:de:ca:b6:f8:34:02:
48:90:5a:36:fe:07:3b:a3:bc:ed:db:a0:31:97:62:ad:3a:16:
f6:3c:39:52:39:73:03:de:25:88:51:49:70:7f:7f:40:7a:2b:
8f:75:2c:63:ba:d2:f6:06:ab:e1:d2:58:ad:0a:39:6f:d0:90:
8b:e5:98:a0:2d:72:4b:53:83:aa:0b:49:75:7c:97:bd:35:35:
dc:92:12:00:fb:65:d9:29:34:e0:ff:75:64:90:ca:ca:bf:a2:
34:ec:3c:ed:3b:8b:c8:40:20:1e:76:ff:07:8e:a3:1e:c5:34:
17:ac:9f:5b:b3:bb:68:5c:b6:4a:a2:b3:7b:6a:ae:38:b1:9a:
d5:24:3a:60:d0:7c:9f:cc:29:5b:9a:4e:a1:54:38:e3:47:c5:
16:68:11:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 4 20:40:17 2026 by rpki-client