Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/pqm9KQxmnlmsEcZ1a4GqPZpyF0M.roa
File: pqm9KQxmnlmsEcZ1a4GqPZpyF0M.roa (raw, json)
Hash identifier: KCyynhPI7ik936knmtF7PX4p6nVsyuU0oUPtdUxG/Rs=
Subject key identifier: A6:A9:BD:29:0C:66:9E:59:AC:11:C6:75:6B:81:AA:3D:9A:72:17:43
Certificate issuer: /CN=e3bd01416d063e9f2c8bb30eba7254989d68ca5e
Certificate serial: 019E3A8AD16FED3AC2968FE20C4EE2EF9EEB
Authority key identifier: E3:BD:01:41:6D:06:3E:9F:2C:8B:B3:0E:BA:72:54:98:9D:68:CA:5E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/470BQW0GPp8si7MOunJUmJ1oyl4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/pqm9KQxmnlmsEcZ1a4GqPZpyF0M.roa
Signing time: Mon 18 May 2026 10:03:56 +0000
ROA not before: Mon 18 May 2026 10:03:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214839
IP address blocks: 149.170.62.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.mft
rsync://rpki.ripe.net/repository/DEFAULT/470BQW0GPp8si7MOunJUmJ1oyl4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:3a:8a:d1:6f:ed:3a:c2:96:8f:e2:0c:4e:e2:ef:9e:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e3bd01416d063e9f2c8bb30eba7254989d68ca5e
Validity
Not Before: May 18 10:03:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a6a9bd290c669e59ac11c6756b81aa3d9a721743
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ad:49:4f:6d:6d:31:85:0e:20:9f:b7:c9:c7:
bc:f0:3e:57:18:67:b8:4d:63:b2:2c:c5:c5:64:b8:
cf:2d:0b:f3:32:67:f4:a6:72:ae:00:95:4d:2e:fe:
3d:63:1f:65:69:c3:db:38:8d:8a:7c:8e:42:5f:f1:
b2:c0:ca:a6:aa:4e:5c:b7:34:ff:2d:c0:91:dd:0c:
00:13:12:75:38:88:87:04:20:55:13:ae:0f:48:76:
c5:c2:82:3b:26:cd:c9:d3:b2:24:55:86:b1:4a:9a:
7d:83:35:d8:2c:a8:e9:94:7c:70:b9:f5:cf:dc:a0:
5f:8d:72:da:29:4e:c4:cb:12:5b:5d:23:42:18:50:
c6:95:5b:27:e2:fe:ac:97:bc:8e:a7:2f:62:f2:a1:
11:b4:1e:79:27:93:ad:a9:64:b8:95:8a:1b:13:cf:
dd:16:fc:0f:1e:05:cd:3c:85:a3:35:ab:e9:b8:64:
c7:d8:11:56:2e:3e:b7:4b:99:71:b4:b3:a7:61:9d:
0e:a7:05:89:4e:51:21:ba:59:b5:65:03:6f:ca:b9:
0c:32:91:d6:53:92:50:fc:e8:96:ba:d4:c4:70:8d:
3b:e0:69:55:85:58:c7:91:de:f8:e0:39:0a:9e:58:
37:33:3f:71:46:7c:79:d5:d1:cd:25:a0:63:32:50:
9f:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:A9:BD:29:0C:66:9E:59:AC:11:C6:75:6B:81:AA:3D:9A:72:17:43
X509v3 Authority Key Identifier:
keyid:E3:BD:01:41:6D:06:3E:9F:2C:8B:B3:0E:BA:72:54:98:9D:68:CA:5E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/470BQW0GPp8si7MOunJUmJ1oyl4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/pqm9KQxmnlmsEcZ1a4GqPZpyF0M.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/5b3939-e484-44ab-b48d-9c7f9242b6db/1/470BQW0GPp8si7MOunJUmJ1oyl4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
149.170.62.0/24
Signature Algorithm: sha256WithRSAEncryption
d4:34:2f:93:e2:8c:04:77:d3:09:ce:00:07:85:37:5d:2f:3e:
ed:76:f9:20:68:67:85:f7:cc:c7:c0:92:48:59:92:82:dd:ad:
d9:70:0e:66:29:ae:56:8a:40:d2:48:13:c7:59:81:2b:13:79:
e3:cb:01:3a:47:ed:23:b4:25:6b:49:c0:bb:de:dd:b1:0f:b5:
ac:91:aa:be:ab:28:39:40:25:4c:ff:7c:91:a2:5d:83:5f:5b:
7b:4c:11:6b:1d:c1:b1:31:6c:06:30:37:81:46:9f:03:2d:7e:
ad:8c:14:cb:83:7e:36:12:e7:40:fd:96:30:f3:48:81:0d:c2:
f1:34:57:43:f1:0e:4e:f6:9b:67:1e:ca:cd:53:b7:55:d4:13:
cb:0d:4c:a8:01:52:ee:83:76:bd:5a:8f:37:2b:06:fd:b4:27:
30:3f:5c:97:02:34:62:0f:5f:ae:57:54:0a:de:67:88:96:28:
01:9c:28:37:6c:46:9c:cd:3a:25:b4:79:95:2b:0c:e2:60:8d:
3f:fa:51:1f:72:dd:2e:e8:e3:f5:d7:ae:93:4a:a8:75:1c:a3:
14:82:5d:e4:06:f9:c5:b9:9f:40:7f:53:f6:21:8a:c6:df:1b:
82:56:70:76:32:21:ff:b6:e5:66:c1:3c:a1:d9:42:ea:40:51:
5d:ad:57:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 23 23:45:42 2026 by rpki-client