Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Q68nUZAfz8BYpsigEMxdQm3q4vo.roa
File: Q68nUZAfz8BYpsigEMxdQm3q4vo.roa (raw, json)
Hash identifier: Y2KBJWW3AdDLpND/Y3OVvO9VIXPPiWX+s86BbwJh78c=
Subject key identifier: 43:AF:27:51:90:1F:CF:C0:58:A6:C8:A0:10:CC:5D:42:6D:EA:E2:FA
Certificate issuer: /CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Certificate serial: 019CF7786C6B265ACF9C8DE78387CFE0A947
Authority key identifier: EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Q68nUZAfz8BYpsigEMxdQm3q4vo.roa
Signing time: Mon 16 Mar 2026 16:26:30 +0000
ROA not before: Mon 16 Mar 2026 16:26:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198087
IP address blocks: 124.158.114.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.mft
rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Mar 2026 00:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:f7:78:6c:6b:26:5a:cf:9c:8d:e7:83:87:cf:e0:a9:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee1c3472c25acd347364b7d6312618aa3530cb63
Validity
Not Before: Mar 16 16:26:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43af2751901fcfc058a6c8a010cc5d426deae2fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:0a:3e:8c:fa:75:e0:61:f2:3e:58:63:07:99:
57:5d:14:6a:14:1e:9a:84:a2:23:a7:d5:46:19:dc:
e6:a8:d6:b9:1d:d3:01:38:a4:10:3f:c7:8b:a0:d2:
48:3e:7e:f9:13:51:0f:69:e3:e9:9d:d9:ca:53:2b:
eb:86:51:a6:f1:f8:b1:b3:66:3b:f3:2b:92:4a:70:
fa:d2:7e:de:3a:c9:5f:4a:19:e9:1a:f0:89:4c:e4:
5f:1d:b7:0d:33:0a:18:99:48:68:9c:a1:61:0f:18:
42:78:0a:6b:ba:64:82:49:08:d7:b3:43:b2:f5:01:
29:f6:8e:69:08:31:30:fa:d6:2a:96:d3:79:cf:96:
df:1f:e5:42:2e:6f:ab:bf:5c:47:95:9a:9b:e4:c3:
44:e6:f4:8c:9b:a8:52:ff:2d:fc:2c:d7:96:b6:f4:
2f:9c:a5:de:50:79:ab:ee:93:eb:1d:b7:be:fa:1f:
d1:92:19:4a:24:e5:a0:1c:3f:06:d5:d3:49:7e:07:
12:5b:4a:02:a7:3d:81:ed:f5:4a:61:e2:93:73:9f:
0e:c4:4c:13:e9:7f:85:a0:b2:67:bb:4f:c4:cc:7a:
bc:86:bf:59:24:f1:e1:4d:6a:b7:e5:89:9e:2b:f3:
8f:b3:6e:e8:db:80:b1:a8:16:c8:f9:5c:13:2f:70:
71:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:AF:27:51:90:1F:CF:C0:58:A6:C8:A0:10:CC:5D:42:6D:EA:E2:FA
X509v3 Authority Key Identifier:
keyid:EE:1C:34:72:C2:5A:CD:34:73:64:B7:D6:31:26:18:AA:35:30:CB:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7hw0csJazTRzZLfWMSYYqjUwy2M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/Q68nUZAfz8BYpsigEMxdQm3q4vo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/1ff44f-51d6-4545-ad36-b4b8db20b1fb/1/7hw0csJazTRzZLfWMSYYqjUwy2M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
124.158.114.0/24
Signature Algorithm: sha256WithRSAEncryption
a1:c8:c2:9f:ac:19:27:bf:55:bc:61:4f:19:7c:a7:4e:e4:9a:
ae:7a:79:68:f1:91:ec:9a:c9:d2:ff:09:56:1f:b3:ee:b0:ce:
8b:7f:b4:85:dd:d1:78:de:29:b5:d2:9b:f6:31:b4:68:da:e1:
ea:9c:4e:e1:ec:1e:f6:b6:70:66:d8:1b:3d:87:1c:2e:2e:48:
77:d9:42:b6:49:12:e3:8c:9e:c6:a7:c6:87:98:a3:38:8b:22:
5a:65:72:b0:c5:1c:e6:70:19:a9:94:7a:a7:1f:e8:5f:4c:c5:
dd:ab:bc:16:ba:9c:83:5c:f5:14:8b:6c:ee:06:d2:e9:4c:c7:
53:11:d5:bd:2f:d7:4a:db:32:72:c5:16:98:01:e1:c6:7b:63:
1a:00:31:11:ec:d4:26:53:6d:3c:e3:28:25:84:00:5e:22:5b:
87:de:ba:37:de:1f:38:5e:88:95:57:ab:2c:43:3a:b0:7c:98:
12:8c:02:61:a8:04:23:bf:4e:99:f9:c9:54:57:60:69:13:d3:
7d:99:80:9c:5a:fb:7a:17:78:db:2f:59:83:6d:1f:8d:43:b5:
c5:7f:fd:29:ee:16:75:6d:2f:5a:fe:03:27:52:3a:f5:82:c2:
20:9b:cf:e6:35:17:4c:74:eb:f3:8f:63:bf:83:94:1e:28:21:
e6:20:cc:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Mar 18 06:28:35 2026 by rpki-client