Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qg_F9Cck24Nn57lzx_ogynmN9gw.roa
File: qg_F9Cck24Nn57lzx_ogynmN9gw.roa (raw, json)
Hash identifier: otRFK+CjVSG5rcxay64OsRTN+/p+JsgELrOmkaWYeSs=
Subject key identifier: AA:0F:C5:F4:27:24:DB:83:67:E7:B9:73:C7:FA:20:CA:79:8D:F6:0C
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 01A09E31056ECD4109EDCB17179ED1621919
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qg_F9Cck24Nn57lzx_ogynmN9gw.roa
Signing time: Mon 14 Sep 2026 04:33:27 +0000
ROA not before: Mon 14 Sep 2026 04:33:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218687
IP address blocks: 153.76.185.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 12 Oct 2026 02:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:9e:31:05:6e:cd:41:09:ed:cb:17:17:9e:d1:62:19:19
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Sep 14 04:33:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa0fc5f42724db8367e7b973c7fa20ca798df60c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:70:81:ec:f9:e9:9d:11:63:ea:bf:d3:3c:80:
82:be:3f:78:6c:b1:d2:e0:11:62:0c:54:82:d4:fa:
3a:45:9e:58:07:11:30:0d:5c:66:a5:8c:ca:49:5c:
d2:4c:a4:dd:61:83:f3:b5:cb:f7:bc:ba:33:52:d8:
59:8d:21:c5:2e:ce:99:aa:3c:d9:ad:76:6a:0f:d1:
08:7b:c8:19:d2:6a:21:95:fb:ad:f7:ff:c0:5e:c7:
f6:df:ce:eb:1c:e5:28:a7:42:fb:99:fd:0c:8b:8b:
a9:80:01:a7:4d:95:e1:98:ae:81:5b:6b:ba:2e:1f:
43:29:db:2d:14:4b:34:33:13:40:e3:61:34:46:e0:
72:3e:77:e7:0b:62:f1:c3:c2:e8:2c:ca:e2:06:57:
0b:a5:12:59:5e:54:7e:41:9d:c9:8e:a9:17:17:31:
84:59:e0:8f:89:4e:72:bc:7d:77:a9:40:41:6c:b8:
f1:ec:27:c2:22:f9:7f:c7:61:8f:35:60:4f:8f:47:
5d:45:f2:ed:af:bc:76:a7:03:25:ce:b4:df:5a:0e:
1e:75:6b:5c:d8:ce:b9:e7:a1:71:54:9c:03:09:3f:
0b:04:62:2c:64:5a:58:ed:67:a3:6a:b4:8a:ec:07:
dd:25:9a:1a:0a:97:72:2f:d7:e1:ae:e0:f7:2c:ae:
37:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0F:C5:F4:27:24:DB:83:67:E7:B9:73:C7:FA:20:CA:79:8D:F6:0C
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qg_F9Cck24Nn57lzx_ogynmN9gw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
153.76.185.0/24
Signature Algorithm: sha256WithRSAEncryption
32:c6:d9:9d:68:78:fa:6c:b0:a3:c6:c8:94:3b:a1:e3:12:c8:
1f:15:cd:61:a6:fb:63:b0:1b:ea:c3:c3:a5:0b:38:d4:30:79:
dd:de:65:30:f0:95:62:5c:79:ca:51:94:d4:16:87:0a:5a:a2:
bd:d2:bc:e9:0c:d3:5d:5e:ea:11:5e:95:1b:c8:e3:db:ee:6f:
0e:4f:31:e6:5c:7c:a3:a1:5b:aa:6e:fc:05:23:a5:4d:73:09:
bc:91:c9:e6:b8:7f:ea:6e:a7:a3:55:70:1b:df:a6:4c:a6:ff:
7c:48:ef:aa:30:23:b6:84:f0:30:19:aa:e4:bf:b1:1a:6b:05:
b0:11:3c:e9:af:2a:06:89:81:13:63:01:ac:90:db:d2:41:14:
74:bd:77:45:6b:29:83:38:0b:61:28:f0:16:68:00:0e:2b:84:
e5:27:b4:8d:6c:4f:99:c5:1d:9a:a5:52:0d:27:59:bd:c8:b6:
71:9e:81:87:ef:15:07:fd:d9:65:cf:05:be:44:4c:3b:da:e0:
a3:e4:56:b4:00:25:2d:ab:70:41:e7:8a:ea:8a:88:e8:ce:0a:
e2:d0:a0:63:c5:6e:bd:29:2d:a4:61:39:33:af:aa:a7:c8:ad:
16:d1:fd:77:6b:cb:8d:42:c7:7e:55:74:f4:fa:18:e8:b6:08:
32:76:36:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Oct 11 09:49:21 2026 by rpki-client