Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CQ3S-FOpOJtm9wvegZhu86wWRfg.roa
File: CQ3S-FOpOJtm9wvegZhu86wWRfg.roa (raw, json)
Hash identifier: hFKRp7/lVlAD7oeUgzF7MaOOEtMc9DJGKsrQ3gpSOlg=
Subject key identifier: 09:0D:D2:F8:53:A9:38:9B:66:F7:0B:DE:81:98:6E:F3:AC:16:45:F8
Certificate issuer: /CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Certificate serial: 019D765871A1A26ADAD0B2950250E0DF2A6A
Authority key identifier: 3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CQ3S-FOpOJtm9wvegZhu86wWRfg.roa
Signing time: Fri 10 Apr 2026 07:43:20 +0000
ROA not before: Fri 10 Apr 2026 07:43:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 211439
IP address blocks: 37.252.28.0/24 maxlen: 24
79.99.149.0/24 maxlen: 24
82.153.1.0/24 maxlen: 24
109.176.212.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:76:58:71:a1:a2:6a:da:d0:b2:95:02:50:e0:df:2a:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fd30d8a7e12fc7bf62e0c121e7cc226dea53b9b
Validity
Not Before: Apr 10 07:43:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=090dd2f853a9389b66f70bde81986ef3ac1645f8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:3e:21:7f:da:5d:3c:c4:22:7f:fc:33:cf:8a:
23:cb:b7:52:37:98:42:d6:29:57:16:0b:e7:55:1f:
07:51:7d:85:f0:f6:7f:f6:7d:0d:13:7c:6a:c3:c5:
60:9b:bd:df:c5:d3:5e:a5:90:3a:94:88:dc:60:cf:
c8:01:85:ba:6f:d3:11:91:98:ac:ad:6a:ad:30:2e:
20:b0:84:08:b6:2a:4b:4c:01:41:83:a3:c0:25:11:
e4:bd:91:96:bc:78:a8:34:c3:06:d6:a3:2f:79:0b:
b8:3c:6d:91:dd:e9:fd:c2:62:11:1d:98:96:09:00:
ad:83:6d:2b:f4:33:c0:5d:5f:81:f8:08:52:b2:66:
1e:0b:db:d0:b0:0d:7e:fa:a1:0e:19:37:da:e8:2f:
3b:6e:e8:f5:4b:55:f5:b5:38:e0:f3:da:a0:a3:01:
96:79:c5:67:13:f3:8e:22:aa:77:4c:7e:c7:a0:06:
a6:f3:ed:8d:0e:22:04:60:99:fd:25:e7:a7:4a:b6:
0f:7b:d3:45:27:8a:96:6f:7d:1f:9c:61:18:e0:9b:
26:f4:2f:0d:d3:6a:66:a1:1a:d7:e5:92:41:05:bd:
0f:3a:ce:69:1e:00:b6:76:71:31:19:49:da:26:d9:
20:40:23:47:aa:1b:b7:fd:0f:43:67:e6:f9:5f:9f:
28:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:0D:D2:F8:53:A9:38:9B:66:F7:0B:DE:81:98:6E:F3:AC:16:45:F8
X509v3 Authority Key Identifier:
keyid:3F:D3:0D:8A:7E:12:FC:7B:F6:2E:0C:12:1E:7C:C2:26:DE:A5:3B:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9MNin4S_Hv2LgwSHnzCJt6lO5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/CQ3S-FOpOJtm9wvegZhu86wWRfg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/P9MNin4S_Hv2LgwSHnzCJt6lO5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
37.252.28.0/24
79.99.149.0/24
82.153.1.0/24
109.176.212.0/24
Signature Algorithm: sha256WithRSAEncryption
54:e2:a8:25:74:c6:33:a4:19:1f:80:0b:12:78:b1:db:15:ef:
ec:91:84:a9:fd:3f:da:e2:5e:40:64:e3:da:87:0e:e1:22:9b:
c8:ff:b6:5a:aa:44:01:3c:ac:ea:64:c9:62:66:11:e6:fc:6d:
6c:b0:6e:3d:04:36:47:c2:98:71:51:84:6e:22:66:42:31:37:
95:7d:23:d1:48:ec:7c:ad:5b:9a:38:30:9b:17:4f:18:a6:f5:
4d:87:3a:5f:fe:80:d9:1f:23:a2:75:fe:1f:2b:84:4b:a1:68:
83:df:99:42:08:06:81:05:5c:dc:26:38:ea:d6:fb:e6:8f:b0:
a7:c4:d7:1d:e1:60:a2:f4:78:80:37:1a:cb:d9:1c:3d:27:53:
9b:cf:fd:ee:5b:f8:d3:d3:38:ca:bd:26:ff:d9:32:b9:b5:29:
8f:a6:08:16:a8:39:58:00:1a:dd:07:1d:fc:f3:31:bc:6a:42:
60:92:80:e6:fa:75:39:33:d0:3f:ef:d0:46:b7:75:f0:08:1b:
93:3c:32:3b:6d:71:7d:03:98:ba:98:53:ba:34:aa:50:53:9b:
6b:f8:a6:71:87:51:f4:75:13:7c:19:79:e0:a0:b7:34:77:3d:
2f:3a:8e:5a:89:47:e2:c5:48:d3:e9:88:0c:f5:cf:7f:24:2f:
33:a2:4b:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 14:38:49 2026 by rpki-client