Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/qM2CoT5rrwHYkfeADxIvTqQDyIk.roa
File: qM2CoT5rrwHYkfeADxIvTqQDyIk.roa (raw, json)
Hash identifier: fpZCo7JorYcqUObsmeetAP/fUmURHBzzoPBjqMZndwY=
Subject key identifier: A8:CD:82:A1:3E:6B:AF:01:D8:91:F7:80:0F:12:2F:4E:A4:03:C8:89
Certificate issuer: /CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Certificate serial: 019F5C0426DF81FFACBCEAB5AB183C87A3EC
Authority key identifier: E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/qM2CoT5rrwHYkfeADxIvTqQDyIk.roa
Signing time: Mon 13 Jul 2026 15:06:43 +0000
ROA not before: Mon 13 Jul 2026 15:06:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199524
IP address blocks: 201.3.224.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.mft
rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5c:04:26:df:81:ff:ac:bc:ea:b5:ab:18:3c:87:a3:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3d1d7d43366a5b0063c37571319dfa432d1531b
Validity
Not Before: Jul 13 15:06:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8cd82a13e6baf01d891f7800f122f4ea403c889
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:29:b5:f8:98:15:6d:71:f5:db:bc:72:3e:fc:
f6:f2:a3:a1:5d:e5:ef:b6:fb:7c:8d:1c:ee:e7:b2:
fc:62:d0:f7:46:e2:c9:77:24:84:c2:49:ba:2c:28:
87:a7:fb:43:f4:c0:1d:61:6e:1b:74:68:76:88:e2:
2a:3d:60:bd:7a:69:1a:7c:7e:c9:7c:80:1f:ff:77:
6a:26:08:26:c4:25:a1:23:a4:69:bf:fc:bd:f4:b5:
55:31:d3:0e:c6:f0:8b:e0:00:b1:ec:ea:66:68:c1:
12:4c:dd:1e:00:b3:64:c7:2b:ba:35:c6:92:fd:cb:
40:3e:12:32:3c:ac:f9:38:01:ea:67:86:cc:53:54:
d2:29:e4:ca:dd:ca:e3:22:83:2d:80:b9:2d:de:11:
f6:87:fc:68:9e:ef:6c:6f:09:79:15:cb:d4:31:e4:
d1:45:87:30:ce:b8:da:06:e5:57:f9:46:bd:01:76:
6f:6b:a9:43:5e:ab:61:04:9f:4d:e7:04:3f:7a:8a:
86:46:11:92:9c:08:d0:f4:21:1b:24:91:57:f4:ce:
7d:13:5e:d0:3b:12:a9:3c:45:eb:f6:88:e0:25:92:
1e:30:0e:14:d4:d5:67:9a:2e:cc:47:5d:c6:aa:d2:
c4:75:47:e1:fd:de:4b:d0:b2:32:6c:d1:5c:bf:24:
d1:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:CD:82:A1:3E:6B:AF:01:D8:91:F7:80:0F:12:2F:4E:A4:03:C8:89
X509v3 Authority Key Identifier:
keyid:E3:D1:D7:D4:33:66:A5:B0:06:3C:37:57:13:19:DF:A4:32:D1:53:1B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/49HX1DNmpbAGPDdXExnfpDLRUxs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/qM2CoT5rrwHYkfeADxIvTqQDyIk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/e91627-843c-49bc-9bea-f72ab03177c1/1/49HX1DNmpbAGPDdXExnfpDLRUxs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
201.3.224.0/24
Signature Algorithm: sha256WithRSAEncryption
14:7f:59:ad:8b:d0:fa:69:ec:46:ed:97:08:77:c0:b2:93:1b:
ff:63:64:5e:a9:22:c2:f1:97:be:c9:6c:8c:6c:1e:70:60:25:
de:94:35:cc:a6:9f:24:69:8f:50:e7:7d:b4:8f:7f:7b:b8:41:
d7:ed:48:49:d1:2e:4c:07:82:40:55:a7:1b:93:4a:bd:55:9c:
7f:de:57:f4:bf:d3:e7:0c:51:4b:81:94:23:cb:6a:af:86:c4:
eb:db:f0:33:d4:e7:96:db:0e:73:1e:86:f1:1f:73:d7:ef:47:
2e:91:6b:cd:00:32:63:17:c1:16:6a:f4:3c:7d:fe:00:56:59:
aa:09:75:38:9d:75:9c:9c:e3:ee:d1:19:ea:a4:28:90:57:95:
1f:fd:34:f7:af:d0:d8:40:2e:30:23:7c:98:7c:07:da:23:a1:
0f:66:cc:79:53:8f:15:b6:6e:b5:da:99:d1:2d:5a:1c:aa:2b:
c5:be:c9:5c:d7:33:67:94:4a:35:b9:b4:fa:9e:f9:19:6a:91:
24:7e:29:9a:40:ae:fb:51:5a:04:3f:3e:54:ea:28:f1:90:e7:
0a:01:61:de:86:00:71:bc:70:8e:58:97:86:3b:f6:8a:7d:0f:
06:75:bb:27:ae:ab:00:e1:60:c4:84:a9:27:61:ae:26:9b:79:
c7:cd:29:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jul 21 14:44:28 2026 by rpki-client