Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/Q1nipTKWJx3Nfna_LRkKtMhvX-Q.roa
File: Q1nipTKWJx3Nfna_LRkKtMhvX-Q.roa (raw, json)
Hash identifier: QFaROPO082RdszpqskZo1cXgAequmUP9a/DCuXHdR58=
Subject key identifier: 43:59:E2:A5:32:96:27:1D:CD:7E:76:BF:2D:19:0A:B4:C8:6F:5F:E4
Certificate issuer: /CN=edf36b243560346053bc60ced4e98aa48ea1a063
Certificate serial: 01A0A70BE93563F9C2AEC63747848BA3651E
Authority key identifier: ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/Q1nipTKWJx3Nfna_LRkKtMhvX-Q.roa
Signing time: Tue 15 Sep 2026 21:49:30 +0000
ROA not before: Tue 15 Sep 2026 21:49:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 397423
IP address blocks: 142.228.96.0/21 maxlen: 21
142.228.104.0/22 maxlen: 22
142.228.108.0/23 maxlen: 23
142.228.111.0/24 maxlen: 24
142.228.228.0/23 maxlen: 23
142.228.230.0/23 maxlen: 23
142.228.242.0/23 maxlen: 23
198.34.178.0/24 maxlen: 24
198.34.218.0/24 maxlen: 24
198.34.223.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 20 Sep 2026 02:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:0b:e9:35:63:f9:c2:ae:c6:37:47:84:8b:a3:65:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=edf36b243560346053bc60ced4e98aa48ea1a063
Validity
Not Before: Sep 15 21:49:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4359e2a53296271dcd7e76bf2d190ab4c86f5fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:8f:0b:4b:8f:b6:df:56:f2:fa:41:c3:00:86:
ba:9e:45:69:a3:fb:bd:1b:2d:5e:f8:f5:fa:25:1b:
8b:77:1a:4e:17:29:eb:e7:60:48:cf:b4:f3:a3:99:
86:52:5c:4d:a8:6d:e6:ac:e9:d8:8f:1d:ad:31:c3:
76:e4:87:e1:f7:7e:75:a1:79:79:2f:9e:44:1a:8c:
c3:5d:f2:a1:49:c6:b4:51:14:ec:67:88:b7:fe:14:
1d:a3:95:24:8a:eb:2f:a4:30:40:e6:c5:a8:46:45:
02:43:c1:27:ae:a0:3a:ac:c8:de:83:d0:5c:d0:7c:
ab:ba:dc:fb:21:dc:68:76:bc:12:23:f6:8e:63:bf:
47:8a:57:30:2f:31:85:d1:ba:b1:44:64:fc:14:b0:
1f:9a:b6:b5:7a:5e:30:6f:8c:51:da:f0:18:22:e5:
d6:b0:96:0a:9c:98:4c:9a:e8:82:bb:3e:e9:22:be:
65:4e:bd:4c:1e:4e:ac:f0:54:88:a3:f0:92:92:6f:
9e:07:1b:ac:4d:59:bf:7e:c8:72:96:90:13:02:fa:
64:84:8a:e5:1d:f7:d0:0e:63:49:6a:84:41:73:dc:
65:e3:d5:25:6d:f6:90:6a:7b:f1:e8:19:dd:95:43:
8a:ef:47:e5:e8:3f:91:c8:a7:e9:07:76:d5:32:b5:
a1:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:59:E2:A5:32:96:27:1D:CD:7E:76:BF:2D:19:0A:B4:C8:6F:5F:E4
X509v3 Authority Key Identifier:
keyid:ED:F3:6B:24:35:60:34:60:53:BC:60:CE:D4:E9:8A:A4:8E:A1:A0:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7fNrJDVgNGBTvGDO1OmKpI6hoGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/Q1nipTKWJx3Nfna_LRkKtMhvX-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/4c7074-98c1-4339-a04e-7cb2fd232ccc/1/7fNrJDVgNGBTvGDO1OmKpI6hoGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
142.228.96.0-142.228.109.255
142.228.111.0/24
142.228.228.0/22
142.228.242.0/23
198.34.178.0/24
198.34.218.0/24
198.34.223.0/24
Signature Algorithm: sha256WithRSAEncryption
89:32:ec:02:d8:ca:10:cc:6e:f1:a6:b1:59:ea:f3:fb:18:91:
fc:bd:96:c1:cf:79:f9:d1:ca:3f:5e:b0:88:d5:30:c1:4f:78:
9c:f6:91:2d:5c:c6:96:fe:c5:b3:3d:f8:e1:6b:5b:1d:2e:28:
3c:ab:57:c0:9e:62:94:8d:92:e1:10:36:c0:3f:8d:b2:66:4c:
29:c3:22:07:56:8c:24:57:e0:b6:2c:f1:5c:eb:4d:83:07:68:
f7:f2:bd:a1:2a:12:86:94:b5:db:11:c7:37:ad:db:6f:73:71:
7c:47:29:07:8a:65:22:a5:06:60:c3:56:83:45:5a:8c:f2:4d:
b2:ce:70:f7:ed:80:c6:5e:e0:e8:fc:af:0f:bb:40:37:af:49:
90:ea:da:cd:42:07:c9:d0:50:26:30:3f:42:ba:75:8f:e0:96:
b4:8a:56:d4:7a:87:e9:d7:11:13:b7:b8:af:74:a8:85:cf:20:
ad:5b:9e:08:2b:21:bb:68:60:51:09:5b:c4:2b:27:81:bf:10:
d7:5b:84:e5:c1:39:79:95:5e:b8:7e:30:de:33:26:f3:f4:23:
22:9a:98:22:90:be:3b:82:62:ab:a9:b6:91:83:fa:20:0f:70:
33:63:81:98:2f:8e:66:d6:87:3b:45:6a:a1:d6:e8:91:72:4c:
f3:67:0f:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Sep 19 11:44:15 2026 by rpki-client