Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/qWIzmVr_aMvnz8_UVm4flIAA-A0.roa
File: qWIzmVr_aMvnz8_UVm4flIAA-A0.roa (raw, json)
Hash identifier: s3nWLOdDzZcWov+Frxv6A1ZD6t4lQ0e8G2c/DIWlHD0=
Subject key identifier: A9:62:33:99:5A:FF:68:CB:E7:CF:CF:D4:56:6E:1F:94:80:00:F8:0D
Certificate issuer: /CN=415c5b3544b18c2ce577847bc1b2ada539385b19
Certificate serial: 019CE1EF226C4AE497451DF705C52D5F310B
Authority key identifier: 41:5C:5B:35:44:B1:8C:2C:E5:77:84:7B:C1:B2:AD:A5:39:38:5B:19
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QVxbNUSxjCzld4R7wbKtpTk4Wxk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/qWIzmVr_aMvnz8_UVm4flIAA-A0.roa
Signing time: Thu 12 Mar 2026 12:04:31 +0000
ROA not before: Thu 12 Mar 2026 12:04:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200224
IP address blocks: 130.78.244.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.mft
rsync://rpki.ripe.net/repository/DEFAULT/QVxbNUSxjCzld4R7wbKtpTk4Wxk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 16:32:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:e1:ef:22:6c:4a:e4:97:45:1d:f7:05:c5:2d:5f:31:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=415c5b3544b18c2ce577847bc1b2ada539385b19
Validity
Not Before: Mar 12 12:04:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a96233995aff68cbe7cfcfd4566e1f948000f80d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:32:6b:3d:f8:12:04:6a:e7:dc:0e:bd:fe:77:
ca:36:18:58:75:77:38:53:18:0d:87:50:0b:07:a2:
2c:79:87:b5:c2:65:c3:17:85:0b:7e:b9:71:36:25:
0a:0e:6a:bb:07:b4:c6:bc:d2:9f:74:e4:6e:3a:fc:
90:bd:79:af:df:a0:ca:33:c6:c1:ca:d1:69:db:0b:
e5:2f:93:82:b2:1b:e4:10:b7:ea:91:97:8c:16:1a:
6e:bf:38:8d:ba:82:4f:6e:4b:12:a5:02:2b:86:0a:
40:2c:ac:36:07:0f:38:7d:54:8f:2d:8d:4d:ab:bc:
c3:ba:42:0a:d8:87:f0:0a:d5:51:b7:ec:50:dc:f1:
64:8c:d3:61:0d:58:9f:6c:e9:a7:92:5d:33:e0:dd:
c4:3d:af:ab:0e:cf:96:44:57:13:f4:f3:8e:ee:5c:
82:d3:a8:0a:d7:ca:78:2b:3d:cb:2c:e4:2c:aa:3a:
17:8f:4e:10:54:2b:80:bc:2a:29:d0:24:8e:21:50:
c3:73:69:b8:cf:8e:d0:84:aa:93:be:70:ae:50:48:
0d:08:bf:09:e0:7b:a2:f6:a0:ed:a1:db:60:54:bc:
1f:d7:f7:7b:e6:ae:f5:06:c1:8a:3e:f7:8f:6e:7b:
01:ac:61:55:6c:e4:33:56:75:dd:72:c3:c0:83:81:
33:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:62:33:99:5A:FF:68:CB:E7:CF:CF:D4:56:6E:1F:94:80:00:F8:0D
X509v3 Authority Key Identifier:
keyid:41:5C:5B:35:44:B1:8C:2C:E5:77:84:7B:C1:B2:AD:A5:39:38:5B:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QVxbNUSxjCzld4R7wbKtpTk4Wxk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/qWIzmVr_aMvnz8_UVm4flIAA-A0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/a1c53e-ddb2-4858-825c-8ca8acef5d5c/1/QVxbNUSxjCzld4R7wbKtpTk4Wxk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
130.78.244.0/22
Signature Algorithm: sha256WithRSAEncryption
49:cc:30:fe:0d:6d:be:6c:93:e7:58:e5:c1:40:83:04:39:ce:
14:bc:30:74:74:ae:a3:70:b2:6b:1d:f5:89:05:a5:e0:f8:a2:
11:7d:ed:fa:b5:e4:fa:8c:ac:27:ac:43:18:80:37:5f:35:41:
5c:25:29:8d:05:4c:9f:9a:d4:bb:2a:05:37:95:54:16:a4:fc:
85:70:52:ce:25:78:96:dd:57:6b:9e:0a:ee:02:af:ff:e3:04:
4f:ba:37:ea:92:58:ee:d2:3b:df:9a:f1:12:b3:8a:69:19:89:
eb:78:56:24:6b:87:66:2a:0d:cb:45:cc:e1:d0:31:31:fb:25:
63:d7:39:91:6a:ca:c9:d3:fb:87:2d:f9:05:ab:a1:b0:2e:71:
19:43:43:71:d0:ef:bf:be:b1:45:25:8e:a2:be:48:aa:14:7b:
26:de:d0:47:66:61:08:c3:b5:87:d3:41:9e:cd:34:ec:42:5a:
c5:78:12:33:82:22:e2:a8:ac:29:90:1b:e1:c2:37:fb:3c:10:
4a:8c:85:be:30:55:54:4c:38:9b:ea:b6:45:e6:23:db:8c:d8:
4d:1f:b4:2b:48:8d:cb:cd:0c:c8:98:4c:7c:97:fd:93:e4:4c:
60:88:89:dd:71:bf:15:3d:94:9d:31:e7:de:69:a8:de:08:56:
6c:7c:ed:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 01:46:38 2026 by rpki-client