Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/Q1yCsf7HBx7_O4Fy5_zOXvpMY_U.roa
File: Q1yCsf7HBx7_O4Fy5_zOXvpMY_U.roa (raw, json)
Hash identifier: 07Zb9tW7aci76BPMdL6b6qkPqbrwR1g8bQRIZHeLG6c=
Subject key identifier: 43:5C:82:B1:FE:C7:07:1E:FF:3B:81:72:E7:FC:CE:5E:FA:4C:63:F5
Certificate issuer: /CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Certificate serial: 019D1AD43D87F5949F2770AE7007E16DD47C
Authority key identifier: CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/Q1yCsf7HBx7_O4Fy5_zOXvpMY_U.roa
Signing time: Mon 23 Mar 2026 13:13:30 +0000
ROA not before: Mon 23 Mar 2026 13:13:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200007
IP address blocks: 138.226.238.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.mft
rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 23:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:d4:3d:87:f5:94:9f:27:70:ae:70:07:e1:6d:d4:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ca6441d9d807e0d78ce75213a103400ee14a7cdc
Validity
Not Before: Mar 23 13:13:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=435c82b1fec7071eff3b8172e7fcce5efa4c63f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:af:01:7a:b4:ac:eb:2c:80:f1:4d:8b:2b:09:
3b:b9:dc:73:a0:d1:dc:74:a2:01:63:61:63:6d:9b:
d6:34:fc:1d:a7:e2:65:f3:d5:36:c8:3b:54:9e:d7:
c5:5d:49:81:01:36:f8:49:e5:62:68:8c:29:18:92:
09:13:90:d4:cd:a4:16:1f:28:dc:7d:38:68:fe:be:
0f:09:c6:ce:09:f0:57:d8:ed:7d:7b:46:e2:cb:6e:
90:3f:52:37:f0:02:a4:33:c6:a5:1f:d8:90:d9:af:
16:40:09:35:2f:f6:6b:7d:40:9c:4b:0c:36:63:52:
f4:c4:ee:31:78:6a:b9:ff:e3:f0:d2:37:eb:1d:cb:
6b:56:e0:c9:b7:a4:ab:bc:12:fe:21:da:a3:cc:27:
3e:6b:3e:f3:df:2c:5a:c5:38:be:83:70:98:7a:be:
9c:77:79:20:18:89:96:c4:c4:a3:03:a7:da:a9:a4:
92:d9:3d:c3:84:e7:cb:3c:a5:af:37:98:a4:c3:e3:
c2:f1:39:4c:91:9d:73:b8:ba:be:ad:c1:29:d3:97:
96:6c:9b:29:a1:ee:14:ba:99:0d:c4:74:23:e7:2f:
ee:1b:5c:c2:24:e9:ac:b3:c4:e8:b4:a4:aa:4c:e5:
cb:11:6e:73:15:27:f2:0f:4b:b1:e1:32:d1:c1:21:
8b:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:5C:82:B1:FE:C7:07:1E:FF:3B:81:72:E7:FC:CE:5E:FA:4C:63:F5
X509v3 Authority Key Identifier:
keyid:CA:64:41:D9:D8:07:E0:D7:8C:E7:52:13:A1:03:40:0E:E1:4A:7C:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ymRB2dgH4NeM51IToQNADuFKfNw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/Q1yCsf7HBx7_O4Fy5_zOXvpMY_U.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/9947b6-34bc-477e-8816-2e28b96498a9/1/ymRB2dgH4NeM51IToQNADuFKfNw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.226.238.0/24
Signature Algorithm: sha256WithRSAEncryption
5d:47:f8:4c:1c:c5:c7:50:ec:43:72:10:e9:92:42:11:4d:e2:
e2:2f:35:26:e1:40:ac:80:d4:16:1f:6b:9a:ba:27:01:2a:67:
c1:ab:a7:d4:c1:dc:e3:ca:0b:d0:12:c1:76:5a:ba:bb:cf:e0:
19:16:b8:95:10:5e:e2:27:0a:95:b7:58:29:cc:dc:51:3f:0f:
b8:ee:14:e4:0d:84:77:40:ef:f5:1a:db:cf:91:bd:c9:6d:29:
62:89:b1:9d:76:0f:b5:b6:0b:7c:1b:27:b5:b0:ec:b6:c0:62:
b7:83:ea:30:91:a3:5c:cf:f6:34:c4:71:24:1d:fc:41:4c:c5:
1e:7c:7f:c3:d3:f3:02:38:e4:5d:12:da:60:ec:d2:25:c9:13:
cb:79:ae:2e:56:f3:d5:a4:ac:0c:4c:f4:68:30:f2:ca:f0:09:
8c:92:49:24:a8:98:15:5c:ad:35:3e:14:d0:d7:f8:ec:2d:22:
38:e6:c8:bb:7d:e0:70:56:6e:21:2f:42:0e:83:5c:18:82:3a:
19:50:86:39:c2:1b:dd:2a:2f:d7:e8:ae:c7:53:ac:91:0d:40:
e7:be:f6:69:86:ee:db:4d:81:33:95:98:87:23:15:be:5b:da:
5f:36:5b:d8:67:71:69:cf:0a:7f:13:dd:4e:7f:e6:61:b6:a5:
8f:bd:e5:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 03:40:10 2026 by rpki-client