Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/qf9TiFJvOlfW1iAV4KugIbcetpA.roa
File: qf9TiFJvOlfW1iAV4KugIbcetpA.roa (raw, json)
Hash identifier: DWBcbFeAVcO9Sd4WXqMbCXEzGUSkRB3RHhu46mzD2pI=
Subject key identifier: A9:FF:53:88:52:6F:3A:57:D6:D6:20:15:E0:AB:A0:21:B7:1E:B6:90
Certificate issuer: /CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Certificate serial: 019D9100C5DCC817DD0084ACC7CCC42CA166
Authority key identifier: 62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/qf9TiFJvOlfW1iAV4KugIbcetpA.roa
Signing time: Wed 15 Apr 2026 11:57:20 +0000
ROA not before: Wed 15 Apr 2026 11:57:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 158.173.52.0/24 maxlen: 24
158.173.53.0/24 maxlen: 24
158.173.96.0/24 maxlen: 24
158.173.97.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.mft
rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 17 Apr 2026 22:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:91:00:c5:dc:c8:17:dd:00:84:ac:c7:cc:c4:2c:a1:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=626a28b7c63ef6ab214a52cfa7c3e78db9a40823
Validity
Not Before: Apr 15 11:57:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9ff5388526f3a57d6d62015e0aba021b71eb690
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:cd:38:44:a4:9a:ca:45:cc:5e:aa:24:4d:3a:
cf:5c:06:3d:c1:48:21:4d:b6:e8:93:c6:bd:d0:2d:
5b:a1:70:ed:da:a0:d8:43:65:aa:8e:9c:5e:da:ab:
a2:e0:92:d3:5a:80:01:f7:e0:dc:2b:51:28:a6:26:
97:45:1a:f3:19:70:89:99:62:46:65:29:33:e0:0f:
30:15:c2:36:b7:bc:4a:ea:42:c7:04:df:bb:87:be:
34:11:f0:6a:79:bf:34:f6:d2:cc:ee:1d:21:d5:4b:
c3:b0:de:2f:0b:1b:5e:17:8d:10:65:64:5e:c3:ee:
07:59:bd:3b:27:53:8a:6f:cf:37:95:40:b3:5a:03:
36:48:02:97:a5:e0:30:e7:e5:ce:b3:9e:7b:99:68:
da:6e:44:33:a0:a5:83:c8:bc:f1:12:7f:0f:13:47:
27:5c:63:dd:b4:fc:c5:24:c3:1d:e1:fc:59:a7:ff:
18:fb:22:0d:bd:da:64:89:48:ed:88:8d:16:da:a7:
03:00:02:45:cc:66:fa:1c:ec:be:64:5c:04:e8:c6:
11:21:3e:80:43:98:17:1a:87:43:cb:49:b4:ac:41:
0d:6c:3a:3b:22:0d:bc:4d:95:b6:96:2e:d7:58:da:
04:be:1d:3a:c7:da:68:4c:98:f3:b4:a6:b5:8e:f8:
82:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:FF:53:88:52:6F:3A:57:D6:D6:20:15:E0:AB:A0:21:B7:1E:B6:90
X509v3 Authority Key Identifier:
keyid:62:6A:28:B7:C6:3E:F6:AB:21:4A:52:CF:A7:C3:E7:8D:B9:A4:08:23
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Ymoot8Y-9qshSlLPp8PnjbmkCCM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/qf9TiFJvOlfW1iAV4KugIbcetpA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/3c0785-b273-4072-a635-d2cd26b69df1/1/Ymoot8Y-9qshSlLPp8PnjbmkCCM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.173.52.0/23
158.173.96.0/23
Signature Algorithm: sha256WithRSAEncryption
2c:40:d8:f0:1a:e5:ee:f1:80:c5:eb:e3:b4:de:b6:81:12:8e:
76:c0:4a:02:cb:89:0e:f0:a3:07:e8:f8:f8:9f:98:12:3d:29:
42:17:ac:06:4c:95:9d:f6:a1:c5:2e:51:7e:49:9a:56:87:90:
fd:07:81:e0:25:62:5b:44:cc:14:d4:c0:6a:34:1d:5a:fe:bb:
fa:2d:56:c0:3e:f7:17:25:86:e5:5c:21:ec:5a:3c:8d:d6:14:
6f:cc:1c:8e:67:2b:94:72:88:50:65:da:c1:eb:52:a6:d7:40:
da:e4:b0:36:29:8f:3a:a0:80:ff:dd:c6:ee:11:c9:f6:de:46:
58:94:cf:c2:16:e0:bf:a6:76:b3:24:1d:48:d3:d5:bc:19:0f:
99:12:05:4a:e1:29:4e:ab:e9:6c:07:8f:0f:8a:fd:e9:7f:dc:
80:ae:66:11:eb:cc:6b:fc:38:71:8a:44:8e:58:e2:7b:de:62:
33:03:5b:d3:59:44:42:27:fb:da:8d:dc:06:61:e7:41:2a:dd:
82:57:34:97:59:1c:96:08:61:f3:8a:75:e3:0e:bb:83:3d:60:
14:7e:85:35:14:6f:20:3e:e5:09:ec:98:ce:39:bb:ec:82:61:
28:ae:db:0a:94:65:aa:79:ee:4b:64:36:33:ba:6b:bf:4a:d3:
92:e7:6e:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 04:35:28 2026 by rpki-client