Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Qgo-jNupET7F8UuDNqpiTrUhr_Q.roa
File: Qgo-jNupET7F8UuDNqpiTrUhr_Q.roa (raw, json)
Hash identifier: v6myRWOIyHvBSB5K6wXjkQvrFI1AFI2YvdioGAkLuFI=
Subject key identifier: 42:0A:3E:8C:DB:A9:11:3E:C5:F1:4B:83:36:AA:62:4E:B5:21:AF:F4
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019D492C7F632616CD893F015901EC03B820
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Qgo-jNupET7F8UuDNqpiTrUhr_Q.roa
Signing time: Wed 01 Apr 2026 13:12:26 +0000
ROA not before: Wed 01 Apr 2026 13:12:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207474
IP address blocks: 131.222.229.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 08:14:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:2c:7f:63:26:16:cd:89:3f:01:59:01:ec:03:b8:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Apr 1 13:12:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=420a3e8cdba9113ec5f14b8336aa624eb521aff4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:97:79:0f:9d:d1:a0:69:7c:93:ae:5b:d2:b4:
04:1b:06:05:64:b8:b4:41:47:e7:ab:4a:62:e1:4f:
32:a9:53:5f:1d:25:34:5e:08:e9:7e:80:27:08:7b:
0c:c9:70:e7:fa:81:fd:bf:b7:bf:eb:01:c8:64:64:
71:bf:b6:0a:8b:43:de:d7:da:c9:36:91:a4:28:09:
02:98:11:dc:c5:bd:21:3e:0b:49:4e:34:24:13:db:
6c:1d:f0:19:89:62:9e:a8:87:af:19:5d:42:29:1b:
00:c4:93:97:ec:b2:21:b4:ab:26:8b:10:5c:e3:0a:
11:2a:d1:06:8a:5c:b6:a7:bc:8e:7e:94:3e:c2:74:
d6:c1:fc:2e:a1:6b:e8:ec:64:58:cc:8e:02:00:2a:
9c:85:99:dd:f0:d4:00:ff:81:eb:2d:e8:a6:94:fb:
64:7f:00:bb:13:db:d0:9b:68:d0:9a:5c:11:bb:d7:
db:f6:1d:ad:90:7a:94:49:74:9e:8a:fc:a5:68:1a:
6e:fc:e5:30:2b:f7:30:cb:93:66:4b:d9:56:d2:3f:
42:f5:3c:d0:b6:f2:7b:da:de:df:8b:0d:b0:29:dd:
f4:c9:8f:95:a9:0c:6d:65:85:13:b3:6a:c5:ad:24:
f2:b6:d3:bb:27:4c:76:27:b6:44:b5:9a:cf:c0:8d:
0a:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:0A:3E:8C:DB:A9:11:3E:C5:F1:4B:83:36:AA:62:4E:B5:21:AF:F4
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/Qgo-jNupET7F8UuDNqpiTrUhr_Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.229.0/24
Signature Algorithm: sha256WithRSAEncryption
63:45:57:69:16:08:b1:7d:b7:5a:1e:69:16:a0:ce:50:0c:ff:
46:13:e8:fa:f8:1c:32:a8:30:a7:30:0b:e2:fe:32:50:27:66:
10:a5:cf:06:b2:f5:ae:d6:b0:33:bc:c0:96:e9:a9:43:e5:ca:
77:7c:cc:93:c8:21:c4:8c:76:d9:0d:02:32:42:0e:d3:bb:f2:
25:da:14:88:40:f8:33:39:01:d6:6f:1b:9c:dc:49:5a:be:51:
d8:74:29:47:0f:6b:0b:9d:d2:fe:c8:c3:5c:9b:aa:25:f5:e2:
db:68:a0:d4:e5:6b:36:ef:f0:81:af:2f:60:1d:cf:62:06:11:
0b:9a:98:d3:43:36:ab:38:b8:11:ff:b3:df:53:84:7c:a8:b5:
b8:66:74:a7:4d:37:d9:70:a9:2e:7f:01:d6:ae:39:a2:19:8d:
7b:a6:58:37:bf:be:aa:7f:28:0f:b6:7a:c5:38:cc:66:f1:e2:
c1:3a:2d:56:83:87:e9:21:be:31:07:0d:d2:55:5a:61:95:e5:
13:e0:a2:05:ee:dc:4d:e0:ab:68:7e:b8:19:0c:9b:b3:f5:25:
0f:e7:d3:48:55:69:11:64:f9:07:84:6d:4a:e5:62:20:01:c2:
0f:85:d7:9f:e0:31:b6:ec:89:58:d7:56:ec:71:be:df:d6:75:
2a:55:2c:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 18:13:13 2026 by rpki-client