Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/QnQB7gn-sGzedKk2lOd1TSSM5Eo.roa
File: QnQB7gn-sGzedKk2lOd1TSSM5Eo.roa (raw, json)
Hash identifier: FIPx8LkiX/HIrnvaNdCoba8Um4Un8z/WqgBDiCnaJ1c=
Subject key identifier: 42:74:01:EE:09:FE:B0:6C:DE:74:A9:36:94:E7:75:4D:24:8C:E4:4A
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 01A18DC3443B4FFF6E4CD6C39E44C84323B3
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/QnQB7gn-sGzedKk2lOd1TSSM5Eo.roa
Signing time: Fri 30 Oct 2026 17:02:26 +0000
ROA not before: Fri 30 Oct 2026 17:02:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218259
IP address blocks: 177.3.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 05 Nov 2026 09:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8d:c3:44:3b:4f:ff:6e:4c:d6:c3:9e:44:c8:43:23:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Oct 30 17:02:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=427401ee09feb06cde74a93694e7754d248ce44a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:20:b5:00:24:d8:26:58:10:c4:a0:b7:f7:bf:
b7:94:80:e1:81:f7:32:2b:f3:97:a1:a7:37:1c:b6:
9a:2b:0a:12:f8:1b:fb:fb:98:d8:e7:20:fd:30:00:
40:14:ae:05:c1:f5:90:21:01:85:5b:8f:c1:38:0a:
3d:05:9e:55:72:6f:69:d1:53:c0:9d:a3:cc:dc:02:
4a:1c:2d:c8:a4:14:8e:25:24:0a:ca:e2:5d:3f:a5:
15:56:0d:7e:91:5e:33:bc:3a:08:8f:88:51:42:55:
9a:93:7e:c1:c5:7e:e1:78:22:18:7e:18:99:8b:75:
d6:a7:89:8f:13:2c:21:2c:b1:75:36:e0:d7:0e:c5:
4a:02:5f:1c:8c:c3:59:fb:f7:17:7c:bb:8a:74:10:
02:5a:96:1e:7c:57:1b:a4:3e:31:36:41:73:e7:c9:
55:58:a7:1c:83:70:b5:d9:0d:12:60:a9:24:cf:db:
6a:70:ce:5a:1d:e9:84:21:41:a3:be:a3:2d:8e:1e:
d4:f0:14:cf:7c:84:f6:75:15:eb:dd:d1:e6:54:ec:
58:b9:42:1d:d0:7a:10:c5:41:78:1e:61:c3:0d:50:
e4:a3:b8:93:ab:16:3e:ce:6f:72:74:f4:06:d6:ba:
7b:1f:6d:9c:4c:cd:34:4c:3d:93:52:96:e5:eb:72:
9e:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:74:01:EE:09:FE:B0:6C:DE:74:A9:36:94:E7:75:4D:24:8C:E4:4A
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/QnQB7gn-sGzedKk2lOd1TSSM5Eo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
177.3.255.0/24
Signature Algorithm: sha256WithRSAEncryption
5f:31:51:76:9d:b4:47:7d:bb:a2:b3:3a:1f:dd:40:40:82:8b:
2a:da:2b:d8:72:ab:8b:3a:67:c6:8f:a0:64:5d:a9:b4:d9:80:
d9:c3:40:ba:eb:f7:7a:fb:11:90:c7:6c:65:66:85:74:61:37:
9d:44:6e:ef:7e:c1:d0:82:36:14:87:e0:ec:c9:10:f1:e8:e4:
76:28:55:e2:09:0f:0c:13:20:28:94:0f:83:7a:d1:05:e0:eb:
1a:78:de:b1:83:55:4f:3b:9d:3a:29:e9:8f:35:ea:81:b1:f5:
c6:98:df:50:05:69:a1:01:5c:3f:c2:23:b9:91:56:2e:5c:9d:
50:55:82:e1:60:94:22:42:bf:bc:f6:e8:1a:bd:bd:d6:45:75:
13:e1:77:9c:02:dd:ce:a3:26:b5:fb:d8:87:e6:71:c7:84:53:
3d:68:0f:bc:6e:53:fa:d3:8a:7a:35:a3:1b:76:70:af:65:40:
29:14:0d:ef:0b:35:38:79:e5:70:45:1b:96:54:1a:ac:8c:d3:
71:c4:12:bb:b0:e1:47:75:2c:2e:33:3b:20:68:04:09:27:b8:
91:5a:39:db:24:42:c7:e3:54:65:91:7e:80:bc:53:78:8a:76:
98:e2:93:a9:27:71:58:7e:93:5b:35:80:7a:b5:56:8e:ee:27:
76:9e:22:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Nov 4 14:28:56 2026 by rpki-client