Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QgpVb4W3dMu3XRteOXPDKicZrqw.roa
File: QgpVb4W3dMu3XRteOXPDKicZrqw.roa (raw, json)
Hash identifier: cuexy9ryYz6znlofrdXOlwagol3lasSOWZkyb5Fpqtg=
Subject key identifier: 42:0A:55:6F:85:B7:74:CB:B7:5D:1B:5E:39:73:C3:2A:27:19:AE:AC
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 01A0E80BFCDAD8CB6021E03C407B633D7225
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QgpVb4W3dMu3XRteOXPDKicZrqw.roa
Signing time: Mon 28 Sep 2026 12:44:54 +0000
ROA not before: Mon 28 Sep 2026 12:44:54 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218569
IP address blocks: 5.175.204.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 18:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e8:0b:fc:da:d8:cb:60:21:e0:3c:40:7b:63:3d:72:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Sep 28 12:44:54 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=420a556f85b774cbb75d1b5e3973c32a2719aeac
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:ab:b4:32:94:8d:f4:51:17:95:5b:3c:81:51:
87:c4:47:2d:36:b5:5e:18:4d:e3:1e:24:4c:7e:dd:
24:75:ce:fa:13:d7:b3:56:bb:b3:44:40:55:a1:6a:
77:b5:ad:ef:11:b8:04:fa:e6:5b:a2:f5:47:c8:b3:
c0:1e:be:74:59:8f:fe:8c:21:21:89:35:98:c4:27:
61:19:87:9b:cc:a7:d8:69:cb:43:52:cf:36:1f:88:
c5:c4:4c:e8:c3:33:1e:22:91:52:6a:9c:8a:38:51:
f7:55:c4:1f:9a:01:24:70:27:65:48:4e:4a:77:ae:
fb:e3:8d:3b:83:8b:bd:fa:f0:cd:40:7a:21:3c:df:
a5:8b:5e:64:c0:cb:7d:7f:75:59:a1:eb:6e:18:76:
24:be:e9:94:bf:17:3e:c6:ca:22:10:ff:51:eb:4a:
26:57:d5:b3:85:23:db:41:12:08:53:39:4d:53:89:
da:99:b4:7d:53:38:b1:a8:17:30:26:6e:1c:e7:fa:
dd:5e:3a:7e:53:b9:3d:f4:0f:7d:b6:a4:6d:19:e1:
f6:30:57:e7:ef:8f:58:25:02:a4:9f:73:06:1e:58:
0d:c9:91:93:f5:5d:1e:9f:49:a5:0e:1c:09:98:6b:
f1:8f:85:fc:81:61:87:5d:ea:7b:07:1a:a3:57:a2:
fa:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0A:55:6F:85:B7:74:CB:B7:5D:1B:5E:39:73:C3:2A:27:19:AE:AC
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/QgpVb4W3dMu3XRteOXPDKicZrqw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.175.204.0/24
Signature Algorithm: sha256WithRSAEncryption
c8:2e:c5:6d:3f:90:c4:e7:df:80:63:f3:1d:fe:25:ae:49:19:
aa:29:d0:5f:b4:cf:9d:2e:96:a8:72:86:4f:21:a7:4c:fc:72:
7d:6b:c8:d5:2c:e8:ea:3f:81:8e:82:84:61:ef:ab:5e:f7:4f:
05:d3:e0:d1:70:f2:e8:37:c7:31:44:0e:35:bb:8b:4e:55:7a:
2e:5d:fc:a0:33:0f:03:83:9e:cf:fc:65:f7:a9:a1:04:fe:1c:
1f:85:5c:72:12:39:32:6c:94:1b:24:ad:22:22:42:40:71:b7:
29:69:23:8c:94:e8:ae:c8:61:72:a4:53:45:80:86:f6:62:11:
64:97:e6:98:9e:0d:aa:fe:61:f3:a3:21:ca:94:6e:52:ca:19:
2c:79:4a:9b:09:64:dd:75:dc:3f:3c:ea:ae:fd:d6:7c:cc:ad:
2f:73:6f:fb:d0:93:ec:28:e6:aa:69:42:ae:58:c0:d4:8f:66:
49:fb:e0:46:92:f2:30:41:29:9c:d7:43:b3:5f:11:5b:b9:f4:
ae:b3:57:a5:21:d6:12:01:ba:9a:65:ca:44:b0:fe:0c:77:3f:
32:dc:1b:c0:91:a0:de:cf:74:aa:57:aa:77:a4:88:e4:6e:38:
a4:4d:e9:8b:06:9a:99:eb:c1:86:ec:79:54:95:7f:38:0f:0c:
f2:4d:a2:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 7 04:05:40 2026 by rpki-client