Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qDj1FyWDeGit22F4Mv47-ZAR8DA.roa
File: qDj1FyWDeGit22F4Mv47-ZAR8DA.roa (raw, json)
Hash identifier: gXLd/Gys0b5rlz3/Fxq1MINCjQp/s/gAhZsTApPVe4Y=
Subject key identifier: A8:38:F5:17:25:83:78:68:AD:DB:61:78:32:FE:3B:F9:90:11:F0:30
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019D4F76E9829811FC17D26D9EA4257037C5
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qDj1FyWDeGit22F4Mv47-ZAR8DA.roa
Signing time: Thu 02 Apr 2026 18:31:26 +0000
ROA not before: Thu 02 Apr 2026 18:31:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58212
IP address blocks: 5.231.70.0/24 maxlen: 24
77.90.22.0/24 maxlen: 24
89.144.25.0/24 maxlen: 24
89.144.46.0/24 maxlen: 24
2a02:2fc0:19::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:4f:76:e9:82:98:11:fc:17:d2:6d:9e:a4:25:70:37:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Apr 2 18:31:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a838f51725837868addb617832fe3bf99011f030
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:bb:63:d0:10:d2:5e:70:3e:c8:76:97:10:71:
e7:81:4f:27:0e:06:34:b9:35:1b:6f:81:2e:47:88:
7d:20:fc:f3:35:a9:84:f0:4c:a0:d5:cf:b9:df:9d:
68:7c:44:2e:a1:96:4c:66:3f:fe:6a:89:47:73:3a:
27:26:ce:96:29:68:24:c8:18:2c:56:b6:32:d3:ae:
2b:ed:ea:40:1a:62:10:5d:76:b9:06:b1:3b:65:91:
a1:03:8b:65:68:7c:27:f4:94:78:9b:78:00:d5:ba:
e8:e4:a8:f5:33:ff:05:4c:e6:e0:63:eb:f7:5a:5b:
91:8b:31:03:b4:e1:f6:31:e6:42:8c:36:55:70:f2:
e6:e3:63:be:fa:d8:db:d9:f2:2f:f3:00:4d:7f:db:
9c:88:bf:32:5f:c4:db:be:c5:18:b4:f0:f4:87:e8:
b7:a0:ae:9f:6d:f3:c0:41:29:83:bd:01:20:09:d5:
2d:50:c7:6f:a1:38:4f:31:2f:10:a4:2f:6b:10:c2:
9c:b3:6f:f5:86:21:d8:8b:64:0f:14:82:1b:cb:ca:
51:ee:d0:37:92:43:a9:00:c0:7c:5f:27:a7:09:cb:
d1:fb:c0:96:a4:a4:77:b4:b9:35:5d:66:d1:ed:11:
9b:28:0c:d1:38:3a:89:fa:fd:98:87:29:0e:6c:44:
c5:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:38:F5:17:25:83:78:68:AD:DB:61:78:32:FE:3B:F9:90:11:F0:30
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qDj1FyWDeGit22F4Mv47-ZAR8DA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.231.70.0/24
77.90.22.0/24
89.144.25.0/24
89.144.46.0/24
IPv6:
2a02:2fc0:19::/48
Signature Algorithm: sha256WithRSAEncryption
af:eb:57:dc:21:00:33:7d:35:43:5b:a7:8f:8e:1f:19:11:20:
33:af:db:16:6a:f7:87:be:60:bf:07:2c:65:eb:a9:4c:92:19:
71:29:7b:6e:a4:3c:e6:b0:8c:ed:cc:ae:aa:74:44:c2:5b:ab:
f6:0a:26:5f:77:4a:e6:75:3b:21:d3:26:c2:c4:cc:b4:b2:5c:
89:5e:ce:6e:7b:02:4a:9e:a1:22:03:aa:d7:43:9a:d3:cd:11:
4f:3a:1f:39:40:bf:9f:b2:9f:af:a5:33:4f:32:f5:ff:bc:53:
3e:fa:5c:b2:f9:ed:e6:cb:57:97:a9:58:0a:40:75:bd:4c:bb:
e1:30:e8:f0:ef:12:98:be:20:ca:b5:23:d8:65:a2:6c:c6:ad:
d5:ac:db:bc:c6:ff:62:f5:df:6d:02:33:ca:b5:06:da:d1:68:
5f:ae:cd:73:83:14:00:8e:87:df:ab:96:7d:00:e7:79:44:a3:
a5:44:25:eb:a2:c2:af:12:c2:3e:df:69:46:b0:79:a3:84:02:
c9:12:1e:6d:5c:0d:1b:ad:b5:9d:f9:6a:21:84:5b:fa:d6:7d:
89:87:58:db:70:a0:bf:16:ca:79:ec:81:62:e8:da:da:87:58:
1a:4b:6f:bf:43:75:09:06:dd:34:d3:92:1c:02:51:ac:c9:a9:
57:e6:a9:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 01:13:27 2026 by rpki-client