Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Qy-ZqZ-jFhHCOPZ47OX-IzpI3k4.roa
File: Qy-ZqZ-jFhHCOPZ47OX-IzpI3k4.roa (raw, json)
Hash identifier: AVuHjYGHpdavtskqaHni01DMFP0XY0do4Ph60K5Cn6U=
Subject key identifier: 43:2F:99:A9:9F:A3:16:11:C2:38:F6:78:EC:E5:FE:23:3A:48:DE:4E
Certificate issuer: /CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Certificate serial: 019D29BF0927999235EC88A2ECE5EA9D278E
Authority key identifier: 3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Qy-ZqZ-jFhHCOPZ47OX-IzpI3k4.roa
Signing time: Thu 26 Mar 2026 10:44:38 +0000
ROA not before: Thu 26 Mar 2026 10:44:38 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25264
IP address blocks: 109.206.252.0/22 maxlen: 22
109.206.252.0/24 maxlen: 24
109.206.254.0/24 maxlen: 24
109.206.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 28 Mar 2026 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:29:bf:09:27:99:92:35:ec:88:a2:ec:e5:ea:9d:27:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3c63cbd934825e55bbe359cb7306869ed451cd
Validity
Not Before: Mar 26 10:44:38 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=432f99a99fa31611c238f678ece5fe233a48de4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:98:02:50:f8:b3:d9:50:ec:08:b2:19:66:8a:
3f:9c:7a:fc:7c:01:6a:d9:5e:a0:08:8e:de:c8:e5:
4f:b9:45:71:ba:83:5c:2c:1c:81:2d:e7:73:b9:2c:
eb:42:60:93:ab:d3:4f:f1:da:10:74:ce:96:92:aa:
f8:28:8e:b3:d2:66:88:35:35:b8:da:84:9f:19:b1:
3f:28:63:cc:6f:49:86:4b:ef:14:ef:07:b2:5d:04:
f7:87:a4:2c:5b:4a:15:76:75:5e:d4:ec:bb:66:54:
f8:6f:a2:23:c3:d9:c2:17:b4:22:94:10:35:c2:c4:
c9:c8:dd:85:30:0f:71:66:60:56:34:18:df:4b:6d:
10:c1:a5:b7:9a:86:29:51:0b:0a:b5:93:87:9a:07:
27:94:cd:21:d4:e8:82:0b:91:1e:cb:e8:e5:7b:51:
03:6f:c8:71:85:d0:e1:7b:f9:f7:b2:98:b1:8d:87:
cc:04:86:9c:d7:a8:e1:e2:12:ef:8c:f6:1c:a8:8e:
a1:d7:fa:98:85:b8:ba:56:9b:e1:24:69:59:64:5c:
a4:d3:56:0d:d9:3b:b3:a7:69:fe:41:9b:b7:e8:9d:
6c:d6:a0:99:f8:28:18:16:47:f8:25:d0:cd:bd:83:
c7:32:7b:5d:6e:fb:5e:f2:a3:ae:03:95:6d:68:42:
ca:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:2F:99:A9:9F:A3:16:11:C2:38:F6:78:EC:E5:FE:23:3A:48:DE:4E
X509v3 Authority Key Identifier:
keyid:3A:3C:63:CB:D9:34:82:5E:55:BB:E3:59:CB:73:06:86:9E:D4:51:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Qy-ZqZ-jFhHCOPZ47OX-IzpI3k4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3770f8-62fe-40a5-94b5-548e7e4b102b/1/Ojxjy9k0gl5Vu-NZy3MGhp7UUc0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.206.252.0/22
Signature Algorithm: sha256WithRSAEncryption
2b:46:7b:d8:18:3b:be:cf:7c:e7:7b:13:f5:91:7b:84:8e:f5:
f7:a5:6b:45:e2:59:87:43:f6:d0:a8:ff:e9:c0:70:5d:66:81:
45:de:fe:9c:53:98:67:57:18:ce:ae:7d:2d:58:09:2b:68:b3:
53:1f:db:db:6b:60:8a:21:09:e6:f7:13:27:39:f8:7a:47:73:
10:8d:7f:09:82:57:94:e4:e8:79:20:de:f6:e8:17:7b:ff:3f:
3c:ba:8b:fa:d8:d4:9c:4e:2b:01:01:af:32:d6:9c:be:22:5b:
f4:c8:fb:7e:e9:9b:a4:fc:a4:7e:02:93:1b:2f:35:05:48:80:
20:55:e7:f2:87:be:54:33:36:4f:97:c8:e8:46:62:e2:12:79:
01:b1:0f:65:d7:dc:9d:3f:45:f8:be:09:d8:99:0e:11:1a:6b:
55:54:fd:d6:56:c3:d0:48:24:a0:07:b7:9a:cf:a8:7d:ee:52:
fe:a3:d9:6e:45:55:12:dc:be:29:69:5d:25:a0:f9:7a:bb:5e:
52:8f:c3:19:6a:f2:8e:2d:28:a8:d5:49:cd:ab:dc:20:fe:69:
37:01:38:f3:3d:93:42:2e:4d:7f:09:d8:c3:56:bb:d7:77:e7:
88:bd:6b:17:2f:23:87:cd:7d:21:a5:ed:1b:97:8a:87:ec:d5:
c7:2d:1b:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Mar 27 06:39:34 2026 by rpki-client