Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/qhiUSVzWFYAcp8hSWVlOUU_2Ruk.roa
File: qhiUSVzWFYAcp8hSWVlOUU_2Ruk.roa (raw, json)
Hash identifier: QmYkypCsJo2MGMkwA/GxYU0wxF0htp5uxeXwCjNR2Hw=
Subject key identifier: AA:18:94:49:5C:D6:15:80:1C:A7:C8:52:59:59:4E:51:4F:F6:46:E9
Certificate issuer: /CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Certificate serial: 01A18AE6CE23D729D471FD40185738D2B8CE
Authority key identifier: 37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/qhiUSVzWFYAcp8hSWVlOUU_2Ruk.roa
Signing time: Fri 30 Oct 2026 03:42:24 +0000
ROA not before: Fri 30 Oct 2026 03:42:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203576
IP address blocks: 5.252.96.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.mft
rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 06:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:8a:e6:ce:23:d7:29:d4:71:fd:40:18:57:38:d2:b8:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=37d27fc24443fcdd4b1b65cfc8078c4a14289f9e
Validity
Not Before: Oct 30 03:42:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa1894495cd615801ca7c85259594e514ff646e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:17:0d:59:6b:50:ca:89:74:aa:99:c6:53:8a:
12:a4:a9:e2:2a:ef:77:de:65:af:da:fa:77:f0:4d:
d1:36:7d:6f:77:b4:4f:78:4c:d7:36:60:66:e3:f4:
a3:38:f3:47:c5:b6:47:24:80:3c:68:fe:13:97:db:
2c:2b:35:d5:e3:e0:54:80:48:38:e3:9f:92:c6:d2:
70:9a:51:81:88:01:e0:31:1d:6d:76:dc:3f:ab:68:
e7:14:b5:ba:47:e3:b6:a7:04:92:27:36:f4:cc:00:
1a:17:f9:47:af:29:25:c7:16:d7:09:0d:db:ab:9b:
a0:65:c5:fd:9b:c3:51:ab:43:c1:ea:42:36:04:09:
31:76:dc:06:62:ed:f9:5e:9b:1e:15:0a:9f:1e:47:
5c:6b:24:d0:79:19:03:4c:c7:b1:e9:74:ba:85:5b:
bb:d4:20:02:b1:d7:17:c3:94:96:a9:dc:8b:21:db:
3b:da:7e:63:55:39:15:d2:08:41:5f:90:ea:66:36:
48:b9:a2:21:1e:ea:53:73:33:50:00:5a:19:a5:40:
8e:fa:1f:f7:32:6f:bc:fc:a9:26:02:39:09:6c:16:
8d:c1:3f:35:1f:b7:43:67:77:4b:4f:5e:8e:c8:88:
65:4f:30:02:a9:50:bc:da:26:2c:3e:47:e0:1f:cb:
0c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:18:94:49:5C:D6:15:80:1C:A7:C8:52:59:59:4E:51:4F:F6:46:E9
X509v3 Authority Key Identifier:
keyid:37:D2:7F:C2:44:43:FC:DD:4B:1B:65:CF:C8:07:8C:4A:14:28:9F:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N9J_wkRD_N1LG2XPyAeMShQon54.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/qhiUSVzWFYAcp8hSWVlOUU_2Ruk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/d8c58d-8d24-4280-91fd-48b1664d40d5/1/N9J_wkRD_N1LG2XPyAeMShQon54.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.252.96.0/24
Signature Algorithm: sha256WithRSAEncryption
45:2d:e5:e3:22:74:1d:37:f6:c7:77:ce:9c:1e:0a:0f:b2:97:
d3:2a:f2:3a:af:76:0b:ed:f0:7f:bc:7a:c3:a1:52:13:70:6a:
05:12:b1:72:b6:e5:7b:57:94:f8:a2:e2:e0:9b:7b:54:db:de:
b9:b3:55:c4:d1:48:3f:ce:0f:89:0e:35:9d:ce:b6:ee:4f:b1:
e3:37:1a:6b:19:a3:7a:f2:c5:1a:a9:fa:0b:a3:55:51:3a:e0:
b5:23:0a:21:95:e4:2c:cf:44:e5:e6:6b:e7:97:67:d0:79:0d:
9b:c5:9a:d1:0d:8c:c4:2b:f2:63:66:3c:dd:4f:75:73:54:5a:
10:8f:93:48:b6:37:eb:0d:8c:36:04:ba:af:83:24:5f:fb:36:
3a:9c:fe:b9:24:f9:be:b9:64:46:f3:bc:74:b8:97:11:01:5f:
c5:dd:1c:f8:ec:59:04:2a:a3:e0:0b:ca:0d:9b:e3:21:ac:49:
d3:68:ac:f4:82:30:75:8a:06:79:84:b4:a0:bb:ae:8f:1a:55:
38:e2:05:bc:35:a3:8b:7a:92:93:a7:4c:62:c2:b2:41:e3:23:
4e:df:49:6a:bb:59:6d:a8:79:0a:a3:d2:fc:bf:35:24:ce:a0:
15:81:27:a9:6f:9d:54:96:11:4a:d0:c3:24:52:16:a3:9a:20:
05:b0:fa:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 10:07:49 2026 by rpki-client