Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/qluoOzLyxaccQSwrFa90RFqcqxg.roa
File: qluoOzLyxaccQSwrFa90RFqcqxg.roa (raw, json)
Hash identifier: qpMAcoRGSm/EZYI6/sZIFBd3qkp/MdqT0v4KuQ94Pkg=
Subject key identifier: AA:5B:A8:3B:32:F2:C5:A7:1C:41:2C:2B:15:AF:74:44:5A:9C:AB:18
Certificate issuer: /CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Certificate serial: 019C9945ACDD5B11C8306B3DB14D73809293
Authority key identifier: 62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/qluoOzLyxaccQSwrFa90RFqcqxg.roa
Signing time: Thu 26 Feb 2026 09:26:45 +0000
ROA not before: Thu 26 Feb 2026 09:26:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200043
IP address blocks: 5.178.120.0/21 maxlen: 24
185.235.20.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.mft
rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:99:45:ac:dd:5b:11:c8:30:6b:3d:b1:4d:73:80:92:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=62c4c743d5c2afcf27f104eb6e0316116c85c7de
Validity
Not Before: Feb 26 09:26:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa5ba83b32f2c5a71c412c2b15af74445a9cab18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c9:6f:78:6a:79:d4:7a:a9:26:1f:3e:e8:3e:
2e:4e:ef:95:bc:7b:53:ec:64:6a:e6:1b:14:64:66:
c8:b6:92:fe:d1:f9:66:ce:9b:3c:ff:2c:94:ee:ca:
17:65:ad:19:97:39:10:08:c2:b2:4a:6f:36:42:e2:
17:3c:28:ea:08:66:da:45:34:e3:48:87:40:5e:1a:
e2:52:ad:bb:e8:e9:88:d8:d1:41:fa:2b:9f:a4:39:
38:8c:d8:eb:48:9e:9e:08:4e:76:44:45:e2:93:f6:
7f:98:26:b6:bc:5d:ec:a4:67:ed:70:00:ff:eb:02:
e2:4b:6e:d1:2c:df:20:f6:67:f5:58:30:b8:dd:f0:
da:81:81:4f:8b:ac:5b:fc:fc:65:31:1e:f7:f5:c1:
f0:51:34:75:6d:2e:12:21:4c:4d:8b:7d:4f:e7:30:
9e:a5:18:86:10:41:5a:1c:04:d9:85:4a:55:1e:c4:
b2:b8:1f:93:ac:6c:49:59:ce:fb:c5:16:b3:2c:84:
ae:72:d6:11:ad:6c:3c:8c:d7:0e:d5:9e:f9:67:a8:
55:b8:a9:f6:14:f0:31:70:16:da:aa:e5:3a:6b:d8:
8a:b4:9b:20:da:cf:23:5b:b2:dc:b9:79:92:c3:0c:
c0:cc:ea:db:f5:76:b3:f4:4c:99:dc:50:6d:ea:d4:
39:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:5B:A8:3B:32:F2:C5:A7:1C:41:2C:2B:15:AF:74:44:5A:9C:AB:18
X509v3 Authority Key Identifier:
keyid:62:C4:C7:43:D5:C2:AF:CF:27:F1:04:EB:6E:03:16:11:6C:85:C7:DE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/YsTHQ9XCr88n8QTrbgMWEWyFx94.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/qluoOzLyxaccQSwrFa90RFqcqxg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/728c40-f712-4fef-8945-de352a92f6ba/1/YsTHQ9XCr88n8QTrbgMWEWyFx94.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.178.120.0/21
185.235.20.0/22
Signature Algorithm: sha256WithRSAEncryption
90:1b:52:6b:8a:83:c9:d6:8c:75:37:ab:44:5a:5f:34:c9:52:
ef:26:4a:e4:3f:84:ef:f2:f6:68:69:76:81:9f:62:c9:18:5f:
b3:cc:24:5d:d6:ee:30:37:81:7a:8a:f1:82:f5:ba:f3:b2:e6:
a6:c8:65:b9:e9:f6:1a:67:96:66:db:f1:0b:aa:5e:96:e5:34:
74:5e:6a:7c:ad:72:13:ee:5d:a7:5b:68:48:eb:92:d4:33:14:
be:2c:58:17:7d:85:cb:01:62:61:f0:fa:6d:43:a1:06:3a:f8:
31:b8:2e:1f:dc:a6:c1:a7:ae:2e:c9:ce:39:1a:fd:66:2d:63:
bd:05:01:d9:53:6b:41:69:c1:dd:9e:72:a0:3d:93:e6:e0:97:
58:d2:e7:66:26:7d:39:b7:9c:67:a2:2a:dc:6f:a7:31:3e:8e:
5a:c5:7f:d1:09:ed:4a:87:7f:fe:6f:6d:3a:f2:df:27:84:81:
4a:1d:c5:dd:3c:96:61:cc:79:38:b8:d0:7c:f1:98:1d:10:97:
9d:3e:fc:28:e8:50:8d:cc:a9:4f:30:2e:a2:b2:2a:d9:f7:3d:
d2:d8:df:53:52:d8:19:8a:c5:21:29:0a:d5:a1:ae:8b:88:87:
3d:85:64:8f:4b:dd:48:ba:bc:1f:32:4a:ab:09:38:96:f2:2e:
25:ae:1b:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 16:39:28 2026 by rpki-client