Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/QYu8BrEkvDFGidZf42zwQ6X-cMU.roa
File: QYu8BrEkvDFGidZf42zwQ6X-cMU.roa (raw, json)
Hash identifier: edbNZL+irvIWNahLjDFSvu217GkqUCrmbKI3bu4iXCw=
Subject key identifier: 41:8B:BC:06:B1:24:BC:31:46:89:D6:5F:E3:6C:F0:43:A5:FE:70:C5
Certificate issuer: /CN=1c963e3d22847d466c262c20878c2780d8840003
Certificate serial: 019C4E16F4822F6E4A095692CE61886CAF92
Authority key identifier: 1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/QYu8BrEkvDFGidZf42zwQ6X-cMU.roa
Signing time: Wed 11 Feb 2026 19:04:13 +0000
ROA not before: Wed 11 Feb 2026 19:04:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49418
IP address blocks: 64.188.114.0/23 maxlen: 24
64.188.127.0/24 maxlen: 24
185.184.120.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.mft
rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 09:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:4e:16:f4:82:2f:6e:4a:09:56:92:ce:61:88:6c:af:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1c963e3d22847d466c262c20878c2780d8840003
Validity
Not Before: Feb 11 19:04:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=418bbc06b124bc314689d65fe36cf043a5fe70c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:92:9d:50:3d:2f:9e:f2:17:d6:30:86:85:cc:
9b:fd:4f:3d:2e:41:37:8a:3c:a5:87:5a:26:89:04:
c8:ce:7a:62:d1:29:e9:47:a2:1b:30:dc:47:b7:0d:
47:bf:50:ee:24:82:f9:fe:33:e6:c5:be:1b:2f:70:
b1:ac:4b:36:77:23:49:ed:cb:91:11:cb:ed:ad:fd:
cb:1a:fb:e6:cc:05:5e:14:63:05:7a:b6:63:14:40:
d3:24:7c:93:5f:1e:bb:9e:c0:8f:88:1a:e3:4f:1d:
dc:94:c2:8d:1e:d8:17:64:71:f5:9e:d5:4b:be:ef:
10:5d:53:db:6a:6c:0f:0a:eb:2e:d0:e3:40:b6:6e:
b0:ac:53:76:39:8c:dc:8f:94:99:14:59:35:94:cf:
40:3c:2f:20:59:32:d1:cc:6a:b7:65:63:90:38:a0:
e8:3e:c5:be:50:ab:1f:23:25:88:a6:bb:ce:31:07:
5b:77:aa:7a:ae:61:14:e4:33:af:34:f6:f9:2f:30:
bc:ae:8e:41:14:d3:0a:b3:8b:82:79:7c:9e:9a:88:
cd:10:87:21:90:ad:33:e3:f7:c6:1d:4a:7a:bc:8e:
e6:3e:a0:b6:72:bd:b8:d4:41:fe:f6:bc:03:9d:e0:
a4:16:38:c1:da:ca:dd:7b:24:a2:73:90:85:2c:be:
70:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:8B:BC:06:B1:24:BC:31:46:89:D6:5F:E3:6C:F0:43:A5:FE:70:C5
X509v3 Authority Key Identifier:
keyid:1C:96:3E:3D:22:84:7D:46:6C:26:2C:20:87:8C:27:80:D8:84:00:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/HJY-PSKEfUZsJiwgh4wngNiEAAM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/QYu8BrEkvDFGidZf42zwQ6X-cMU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/38f128-ea82-4555-b514-143967a8fe08/1/HJY-PSKEfUZsJiwgh4wngNiEAAM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
64.188.114.0/23
64.188.127.0/24
185.184.120.0/22
Signature Algorithm: sha256WithRSAEncryption
2d:93:28:f2:d1:e7:5c:b7:03:98:0f:6d:7a:45:24:2c:0e:dc:
60:f4:2d:09:65:d2:2d:14:61:1b:fa:7f:b6:bf:5d:ab:84:4b:
a7:88:01:c6:ba:9d:f9:1d:93:5f:e4:e0:46:b7:29:ad:63:80:
d5:62:b1:cd:0e:9b:20:1f:c2:22:ac:44:3e:62:c5:07:2f:a0:
2a:83:fd:a4:42:bb:38:eb:bd:0c:c3:b0:18:f6:aa:3a:dc:e6:
40:ea:8a:71:a0:f3:e2:6c:7a:32:bf:da:16:f2:56:eb:78:33:
56:6b:f4:ad:1d:f1:9c:73:37:39:ee:a1:68:82:b8:fd:ec:f4:
ee:c6:75:00:c2:75:d4:72:b8:4c:b0:a8:9d:37:2f:e2:f8:8d:
1e:ef:2b:37:bb:77:07:38:b6:38:98:e7:5b:62:68:40:bf:ef:
07:c4:46:25:34:ae:e3:3b:84:a4:e8:7d:e0:32:0b:1d:a5:60:
ef:30:cb:18:98:1b:91:55:f7:48:c3:c9:18:ee:a7:c3:5d:bc:
86:0d:ba:89:a1:c3:66:b6:61:ff:5c:34:f0:ae:b6:79:1e:0b:
69:ae:ad:b7:3c:7f:f1:f8:e4:3e:98:f8:46:d3:0b:8f:85:c5:
9a:35:52:d2:37:69:f6:8a:fe:df:25:3a:2b:17:3b:ad:90:a2:
a3:c7:5f:3e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 1 18:16:46 2026 by rpki-client