Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/QRcl_jgkQhA7g8md5G3sSIlGYDg.roa
File: QRcl_jgkQhA7g8md5G3sSIlGYDg.roa (raw, json)
Hash identifier: OmxTg9MAYuVn1tfJoL/El8VbWJx5U11ZkLb8ScdXVx4=
Subject key identifier: 41:17:25:FE:38:24:42:10:3B:83:C9:9D:E4:6D:EC:48:89:46:60:38
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A1798E368B4EC4D886A4457B05086FB474
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/QRcl_jgkQhA7g8md5G3sSIlGYDg.roa
Signing time: Mon 26 Oct 2026 18:52:05 +0000
ROA not before: Mon 26 Oct 2026 18:52:05 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50338
IP address blocks: 13.143.68.0/22 maxlen: 24
193.23.212.0/23 maxlen: 24
193.23.214.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:79:8e:36:8b:4e:c4:d8:86:a4:45:7b:05:08:6f:b4:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 26 18:52:05 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=411725fe382442103b83c99de46dec4889466038
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:66:3d:04:a9:56:b4:8c:07:c9:f4:48:9e:28:
11:c2:8e:83:ad:60:d3:22:9d:de:8b:25:f8:b8:47:
b2:0b:43:00:0c:89:78:29:23:91:1a:a4:c6:07:a1:
ca:cb:bc:ea:84:a6:23:6a:19:23:0d:1c:82:21:20:
6b:c4:3f:d5:88:62:bf:c7:d2:4a:f6:6f:e9:aa:78:
b3:8f:de:26:56:9e:05:a7:a5:31:4c:68:d9:01:1b:
38:eb:03:2e:a2:32:67:8d:63:7d:89:f6:a1:b8:b7:
73:81:ff:b4:a4:16:ca:12:a9:99:09:2b:7e:67:31:
ab:d4:84:f5:dd:af:7a:4c:11:81:5a:0e:2f:86:25:
1d:99:15:d4:e1:54:7e:55:63:a1:d3:49:44:df:e7:
9a:d3:9a:4e:e9:18:ab:94:fd:47:97:16:b9:44:a0:
0d:2f:87:4d:ca:df:ea:7e:dd:d7:92:f9:10:d1:00:
60:5c:23:51:96:90:30:68:63:81:8f:64:0f:1b:ff:
04:5f:dc:2f:2e:4f:52:06:fd:b0:61:67:f9:32:42:
7f:70:00:df:28:7f:79:ee:15:75:de:f0:c4:96:a5:
fd:db:3e:46:f4:75:10:6a:c0:ad:0e:ce:2c:38:41:
11:9c:7d:29:b9:6e:61:6f:65:c8:27:4e:22:d8:c8:
08:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:17:25:FE:38:24:42:10:3B:83:C9:9D:E4:6D:EC:48:89:46:60:38
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/QRcl_jgkQhA7g8md5G3sSIlGYDg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
13.143.68.0/22
193.23.212.0/22
Signature Algorithm: sha256WithRSAEncryption
38:86:82:0f:ea:d1:e3:8f:c0:ba:0b:f2:1a:b0:56:30:96:ff:
a5:71:c0:40:1e:27:62:c7:0a:2c:55:5e:44:f0:0d:63:7d:cf:
05:9c:2e:0d:9f:70:65:b8:67:28:ee:25:20:6a:7f:e4:89:b3:
fb:3b:8e:14:17:15:aa:f6:09:4a:a6:4b:0c:64:34:0d:10:92:
3f:73:5c:8c:4d:30:b2:5f:75:e7:30:27:fc:d6:fb:3c:e6:5d:
c5:a9:88:a1:4b:90:b6:2f:a1:b1:74:d8:0a:12:42:ed:68:9b:
c4:d0:ca:27:b2:90:e7:a3:0f:35:6f:76:27:1c:cc:69:e9:7e:
ac:b7:0b:20:10:2c:04:81:cc:4b:ec:51:5e:68:48:a2:17:ab:
90:d8:19:80:5a:3b:c3:21:bf:0f:e2:47:47:91:bb:74:cf:6c:
d7:62:89:87:1d:b7:fa:df:66:a4:56:c9:44:2d:fe:be:a2:c2:
86:eb:7c:9c:fd:fd:06:29:93:b2:83:31:7b:9a:90:7b:34:87:
e6:3a:54:6a:f6:14:a8:98:f3:08:b0:77:d3:f8:1e:39:a7:50:
65:07:dd:68:f5:04:01:f0:e2:99:24:0e:68:49:a8:ba:31:dd:
86:65:e8:8d:2b:ba:d6:17:2e:7f:fe:44:2c:3f:9f:47:44:b7:
23:8e:ed:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 19:38:34 2026 by rpki-client