Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/bqob2Q0-sHUtqO7FA7B7gmyqQJQ.roa
File: bqob2Q0-sHUtqO7FA7B7gmyqQJQ.roa (raw, json)
Hash identifier: /lmQztGCuwPOTwxGVz1NH7Zy4jFnY3FxpxbhlVClU3A=
Subject key identifier: 6E:AA:1B:D9:0D:3E:B0:75:2D:A8:EE:C5:03:B0:7B:82:6C:AA:40:94
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F1E0CD0EA537546BF30DD148EEA6F4608
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/bqob2Q0-sHUtqO7FA7B7gmyqQJQ.roa
Signing time: Wed 01 Jul 2026 14:19:43 +0000
ROA not before: Wed 01 Jul 2026 14:19:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21003
IP address blocks: 201.3.112.0/21 maxlen: 21
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1e:0c:d0:ea:53:75:46:bf:30:dd:14:8e:ea:6f:46:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 1 14:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=6eaa1bd90d3eb0752da8eec503b07b826caa4094
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:de:d3:8b:ff:17:21:72:78:d4:18:a4:6b:64:
54:22:ad:4b:59:ac:07:25:cf:ba:93:ee:2e:64:62:
da:77:8f:f2:d6:75:f0:ab:76:0a:9a:e2:f4:2e:d8:
4f:86:a4:e1:d4:f9:e1:22:f2:fe:8f:f6:cc:e7:13:
6d:0c:7f:4c:93:41:68:e5:5f:82:10:06:1d:6c:33:
2b:c1:46:08:d0:7a:8a:4d:ed:19:33:71:fd:92:4f:
b6:13:c3:21:e2:1e:b2:74:e9:83:1c:dd:0c:f3:8f:
9f:54:09:9e:3d:ec:f4:19:31:0e:2e:ff:a3:09:bf:
36:79:e1:b8:2b:8c:ee:8e:75:50:d6:8f:0c:7a:32:
d3:1e:38:03:90:79:03:c5:16:ec:e2:44:3f:9d:bf:
93:1f:f0:a0:28:51:72:e5:1b:86:ff:4b:0c:e3:60:
2f:1a:9d:da:e2:2a:95:95:78:11:1f:fc:56:96:9f:
9d:e3:5a:b4:dc:db:29:36:61:7a:c3:80:c2:97:bf:
91:31:3f:01:d0:91:9b:a7:c5:31:ef:67:37:c0:4c:
d4:0c:f2:dc:e0:5e:c7:d0:56:9b:20:02:2e:4a:72:
66:d2:c8:1c:5e:2d:59:07:25:ad:02:3b:e6:a4:4d:
12:5b:3f:a7:b5:92:55:d7:22:c4:ee:90:d0:2a:89:
c5:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:AA:1B:D9:0D:3E:B0:75:2D:A8:EE:C5:03:B0:7B:82:6C:AA:40:94
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/bqob2Q0-sHUtqO7FA7B7gmyqQJQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.112.0/21
Signature Algorithm: sha256WithRSAEncryption
7a:ef:88:19:40:d8:d5:89:91:cf:eb:de:0a:e3:49:be:a5:16:
28:38:b7:d6:4b:15:91:e0:05:54:cc:df:f0:c6:95:69:04:da:
c3:ea:71:b4:ba:37:a9:a6:fb:2c:e9:52:16:70:d0:da:bc:df:
34:18:c1:00:cf:06:ee:a1:0a:e9:4a:6f:2f:52:56:63:00:17:
05:6d:59:39:37:83:d9:5d:f2:be:8b:af:45:4b:c8:69:80:ff:
cd:66:83:c2:f0:54:9f:ca:4c:3e:12:30:b4:7e:b6:1c:eb:d6:
a3:a2:c0:92:68:88:53:f0:a5:15:00:7d:95:d5:98:68:b2:61:
b3:47:92:c5:46:2d:4f:e4:13:10:89:41:81:38:b9:fe:90:a8:
c0:62:80:5f:00:c4:1e:60:17:35:de:45:f4:33:7f:54:5d:63:
3d:71:fd:c2:03:fd:22:68:24:f2:10:cd:b8:c7:a9:c2:60:e5:
be:13:ab:a3:09:ad:0a:50:d6:44:20:00:87:1f:e1:39:19:c6:
bc:bb:2f:bc:7c:73:83:80:28:3a:63:8f:93:66:59:33:31:73:
e1:d5:83:12:20:73:0c:f5:46:2f:fc:4b:06:1c:8f:6d:57:c4:
8f:ef:c2:45:96:8b:27:65:c8:47:f4:fd:8c:9b:f1:0a:f9:ac:
33:ef:02:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:28 2026 by rpki-client