Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/WQ_fCNHQtCBXeioiq6jf5i14n-c.roa
File: WQ_fCNHQtCBXeioiq6jf5i14n-c.roa (raw, json)
Hash identifier: r1gonkAQXqL9g219q4I/TVy7AXt5zqA0PATlhTUwSk8=
Subject key identifier: 59:0F:DF:08:D1:D0:B4:20:57:7A:2A:22:AB:A8:DF:E6:2D:78:9F:E7
Certificate issuer: /CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Certificate serial: 019CDA011ADBEC339BBE350D29E0E59D2479
Authority key identifier: B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/WQ_fCNHQtCBXeioiq6jf5i14n-c.roa
Signing time: Tue 10 Mar 2026 23:07:11 +0000
ROA not before: Tue 10 Mar 2026 23:07:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213535
IP address blocks: 2a12:bec4:1560::/44 maxlen: 44
2a12:bec4:16f0::/44 maxlen: 44
2a12:bec4:1910::/44 maxlen: 44
2a12:bec4:1ab0::/44 maxlen: 44
2a12:bec4:1b10::/44 maxlen: 44
2a12:bec4:1b70::/44 maxlen: 44
2a12:bec4:1be0::/48 maxlen: 48
2a12:bec4:1c00::/44 maxlen: 48
2a12:bec4:1cb0::/44 maxlen: 44
2a12:bec4:1d40::/48 maxlen: 48
2a12:bec4:1d41::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.mft
rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 09:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:da:01:1a:db:ec:33:9b:be:35:0d:29:e0:e5:9d:24:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b37e215a415ed7b5de4b6dc12f2f7b7750c3d66f
Validity
Not Before: Mar 10 23:07:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=590fdf08d1d0b420577a2a22aba8dfe62d789fe7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:36:0d:c0:68:2a:0a:44:41:5d:9d:95:71:26:
e9:00:41:6e:46:ba:69:00:cb:55:7d:57:e4:ef:e4:
d8:b6:87:f4:9f:55:2c:f8:b0:05:8b:12:70:2a:23:
ed:51:cb:06:7b:02:58:93:4b:5d:05:45:ea:41:d7:
ee:3e:dc:c0:ee:fa:f6:31:8b:e8:60:8f:46:a2:7e:
d1:48:f2:66:d5:26:f2:1d:b7:a2:49:41:cf:57:51:
4b:e0:bc:b7:8d:e8:2b:6a:6f:df:bd:0d:b0:31:f6:
8f:15:4c:a3:0f:60:2c:46:61:a8:32:87:4c:3f:67:
5a:b4:c0:58:66:08:7e:0d:3c:22:f8:92:d7:bc:15:
aa:07:10:5a:f5:43:7e:8d:68:5f:e7:06:b0:60:8c:
6d:d3:db:bc:0a:0b:ea:e2:98:ca:57:df:83:f6:e8:
b5:99:dc:1d:72:12:0f:b9:eb:db:80:e1:1b:b8:c8:
02:c5:62:1a:3d:c2:be:e2:16:87:0e:57:5f:8f:ba:
e6:9f:43:14:a8:d1:b0:1a:d2:ba:e8:e5:d7:24:47:
e7:46:a2:34:21:d6:a9:8e:37:ab:50:de:d2:30:9b:
f7:b6:76:5c:c4:fc:a6:84:65:8a:85:72:7b:c8:4a:
cf:50:07:c2:dd:31:bf:79:21:d2:03:dd:ce:02:c2:
2b:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:0F:DF:08:D1:D0:B4:20:57:7A:2A:22:AB:A8:DF:E6:2D:78:9F:E7
X509v3 Authority Key Identifier:
keyid:B3:7E:21:5A:41:5E:D7:B5:DE:4B:6D:C1:2F:2F:7B:77:50:C3:D6:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/s34hWkFe17XeS23BLy97d1DD1m8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/WQ_fCNHQtCBXeioiq6jf5i14n-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/97f49a-7a95-4dd5-8c74-55369cf507ee/1/s34hWkFe17XeS23BLy97d1DD1m8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a12:bec4:1560::/44
2a12:bec4:16f0::/44
2a12:bec4:1910::/44
2a12:bec4:1ab0::/44
2a12:bec4:1b10::/44
2a12:bec4:1b70::/44
2a12:bec4:1be0::/48
2a12:bec4:1c00::/44
2a12:bec4:1cb0::/44
2a12:bec4:1d40::/47
Signature Algorithm: sha256WithRSAEncryption
45:e8:15:4d:ad:82:07:08:84:32:e3:fe:6f:ea:f7:33:e0:51:
4a:05:08:c3:63:21:88:8f:58:48:9c:a1:64:c3:33:b9:8f:d3:
78:b2:0f:bf:f5:30:90:28:04:48:59:c8:d9:d0:bb:a8:d3:f6:
fd:48:92:3a:0e:ea:d0:b1:7f:3d:0d:72:6c:63:ae:19:b3:39:
3e:0d:76:10:5d:2b:72:21:7d:ce:67:35:e4:17:1b:86:a1:e6:
80:38:47:9a:e4:20:d2:75:4c:fe:27:a6:56:48:aa:83:c7:3a:
aa:a5:c4:e4:b6:58:6a:38:16:d2:fd:fe:78:34:12:05:50:61:
03:cb:a2:2b:2d:a0:8f:fa:0f:61:ea:95:56:93:62:46:66:eb:
e7:fe:e0:12:c0:7c:28:e4:66:38:15:16:ce:40:5d:4f:5f:73:
7b:5a:f7:4e:e5:7a:6b:17:52:a4:9d:c4:a2:e5:4f:fe:8d:ba:
e4:ed:6d:fb:63:01:dc:f0:ff:a2:a2:69:49:96:3c:17:6a:de:
7a:6a:b9:b5:1e:00:2a:76:a7:8b:3b:00:be:39:a3:7e:8d:8e:
b1:73:cb:61:26:9c:1f:6e:2b:24:39:9b:a0:4c:e9:d0:73:c9:
04:35:7a:49:88:05:6e:b0:a9:4b:c5:2e:20:ed:0b:b7:e6:8e:
f3:52:29:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Mar 26 17:17:48 2026 by rpki-client