Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qykGHvrhGfK2s0x-k3j63PyJDao.roa
File: qykGHvrhGfK2s0x-k3j63PyJDao.roa (raw, json)
Hash identifier: k+bkGLc9rf0RoVl/lfm/ErSHn46lKWJp3BG45VJFI5s=
Subject key identifier: AB:29:06:1E:FA:E1:19:F2:B6:B3:4C:7E:93:78:FA:DC:FC:89:0D:AA
Certificate issuer: /CN=3e6097698686e1555f51f6c883bc5a58549b2362
Certificate serial: 019C345BBFAF9B2E7D69970173A18D1070BF
Authority key identifier: 3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qykGHvrhGfK2s0x-k3j63PyJDao.roa
Signing time: Fri 06 Feb 2026 19:09:13 +0000
ROA not before: Fri 06 Feb 2026 19:09:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 212353
IP address blocks: 94.103.166.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:34:5b:bf:af:9b:2e:7d:69:97:01:73:a1:8d:10:70:bf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3e6097698686e1555f51f6c883bc5a58549b2362
Validity
Not Before: Feb 6 19:09:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab29061efae119f2b6b34c7e9378fadcfc890daa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:f8:5d:c5:19:d0:e6:61:f6:cc:bd:f5:cf:aa:
9e:79:b9:23:22:8b:6c:2d:54:a3:71:d4:65:53:36:
2c:d8:92:e5:06:19:8b:80:52:22:f9:06:6b:cf:9a:
3d:b5:50:0d:0c:bf:b1:f3:ba:9e:22:f3:de:96:80:
2e:a7:85:6f:9b:15:6a:90:b0:43:b0:ae:e5:bc:6f:
14:9d:77:92:25:6a:68:fa:cc:12:d4:34:8f:c8:81:
fa:45:d9:c7:18:85:49:93:90:a4:67:15:fa:28:1b:
f5:cb:4f:f2:30:2b:8a:c4:4b:70:91:83:8e:11:26:
72:5f:aa:95:52:2a:86:ed:12:58:3e:a9:7a:95:a9:
50:3b:87:f3:75:a4:db:07:72:97:f1:be:50:93:18:
09:dc:a5:1a:aa:9f:c4:20:31:c0:c1:3b:18:b2:d1:
04:a6:c3:c2:a2:08:c8:77:b0:9f:c3:7c:00:8d:2c:
77:a1:81:79:80:44:7c:5b:aa:d4:be:35:48:1b:dc:
dc:3f:b2:5e:52:15:b6:db:0b:62:c3:63:1e:7d:ca:
28:ed:9c:c0:83:d3:fc:4f:23:94:5a:82:cb:d5:92:
aa:86:83:ed:67:1a:9e:9d:b4:35:ae:90:44:37:a3:
fc:1a:96:1f:2b:7d:11:71:8b:a4:d7:c1:39:50:a3:
45:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:29:06:1E:FA:E1:19:F2:B6:B3:4C:7E:93:78:FA:DC:FC:89:0D:AA
X509v3 Authority Key Identifier:
keyid:3E:60:97:69:86:86:E1:55:5F:51:F6:C8:83:BC:5A:58:54:9B:23:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PmCXaYaG4VVfUfbIg7xaWFSbI2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/qykGHvrhGfK2s0x-k3j63PyJDao.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/10/965837-52cb-46b4-aedb-e1bd88d3fd07/1/PmCXaYaG4VVfUfbIg7xaWFSbI2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
94.103.166.0/24
Signature Algorithm: sha256WithRSAEncryption
07:9d:69:9d:f3:e7:a8:29:60:f7:16:7d:b2:5d:74:ac:0f:3c:
19:a8:a2:f9:9b:2f:f2:a3:67:ae:41:5a:f5:09:83:ea:df:84:
e9:b4:20:b0:c4:6e:cd:f4:77:b8:2a:7e:dc:2b:c0:e0:b2:25:
bb:87:3b:e0:89:22:7e:96:e3:dd:02:eb:da:01:e6:ef:2c:b1:
7c:a5:76:b4:46:82:fe:e9:55:53:b0:bf:6f:61:a7:70:3a:90:
56:4d:8d:5d:21:bb:29:3e:24:f7:d7:60:1e:44:50:c3:f2:58:
62:6b:ca:87:72:e3:86:82:53:81:3c:ef:23:25:cc:9c:a7:e7:
b1:55:6e:e5:9d:f5:3f:dd:8b:2b:17:fd:e3:a7:35:cf:4a:ce:
48:0a:5a:56:eb:a8:7a:ab:ae:95:11:24:0b:49:0f:98:62:43:
fd:a2:95:da:e1:90:95:3b:36:16:6f:f9:0d:62:fa:16:8a:14:
ad:7e:d4:24:10:d5:b8:3c:52:d2:d5:91:ed:f7:c5:a3:80:95:
97:a3:d8:d6:0a:39:2f:fe:ea:31:0b:ad:a9:40:e3:b6:03:d3:
7d:61:b2:b8:fc:f2:69:cf:e3:fc:15:23:50:aa:48:37:d2:1c:
14:27:94:e6:6c:aa:f7:58:f8:89:eb:34:24:58:3e:29:f8:05:
d6:20:6f:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 21:47:08 2026 by rpki-client