Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/QOI_POSZjAZfnlJCsdwkg2QaE3I.roa
File: QOI_POSZjAZfnlJCsdwkg2QaE3I.roa (raw, json)
Hash identifier: 9Szu3uumbhuJS38BLmbB4iFLffqMeH0+vfPJKA2Q3TA=
Subject key identifier: 40:E2:3F:3C:E4:99:8C:06:5F:9E:52:42:B1:DC:24:83:64:1A:13:72
Certificate issuer: /CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Certificate serial: 01A0AEBC1370FA0FBA4059D2A742B75096F6
Authority key identifier: 83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/QOI_POSZjAZfnlJCsdwkg2QaE3I.roa
Signing time: Thu 17 Sep 2026 09:39:16 +0000
ROA not before: Thu 17 Sep 2026 09:39:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209658
IP address blocks: 194.61.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 23:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:bc:13:70:fa:0f:ba:40:59:d2:a7:42:b7:50:96:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=833e3f5ef825556b014a085d32565bb0cbc5ac8d
Validity
Not Before: Sep 17 09:39:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40e23f3ce4998c065f9e5242b1dc2483641a1372
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0c:41:9c:ae:9e:6a:30:e5:ed:ed:31:4c:6d:
43:7b:4f:64:95:96:a7:f9:c1:99:72:74:62:2f:c2:
d5:e0:4f:24:19:89:10:36:00:11:2a:cd:f1:9d:f1:
0b:8c:da:90:0e:63:ae:1c:43:85:ad:50:c0:2b:06:
3f:2b:bb:18:71:2e:47:2c:27:d4:89:ad:9d:28:a9:
fa:67:29:61:15:2a:24:82:12:31:b8:39:7f:1f:40:
c7:64:10:2b:c3:b0:d0:b5:98:c6:71:1f:72:be:3f:
86:25:5e:67:d6:31:97:70:96:21:19:64:ad:8b:5b:
e6:67:6f:58:44:b1:42:54:8b:1d:68:de:7a:81:3f:
6a:ad:a8:d1:4b:85:d0:b8:8d:ab:47:58:24:22:fa:
d8:a1:27:6e:44:66:b1:89:8f:8b:74:db:6a:fa:b1:
7f:4e:49:46:13:d1:41:86:84:98:87:22:0b:61:f7:
0d:97:11:23:84:9d:3f:00:15:32:78:c7:d6:02:1c:
a4:6f:63:65:6b:f7:51:f1:38:39:d5:09:69:60:d5:
8b:25:e1:7a:c1:f1:23:e0:15:82:32:1c:6f:17:ca:
28:87:2b:d7:df:6b:b8:36:aa:48:95:07:a2:c0:24:
b9:3b:c5:d3:60:2d:43:86:17:da:e4:70:50:66:64:
f6:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:E2:3F:3C:E4:99:8C:06:5F:9E:52:42:B1:DC:24:83:64:1A:13:72
X509v3 Authority Key Identifier:
keyid:83:3E:3F:5E:F8:25:55:6B:01:4A:08:5D:32:56:5B:B0:CB:C5:AC:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gz4_XvglVWsBSghdMlZbsMvFrI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/QOI_POSZjAZfnlJCsdwkg2QaE3I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/d26618-b340-4f50-b330-318a26d4a8c9/1/gz4_XvglVWsBSghdMlZbsMvFrI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.61.75.0/24
Signature Algorithm: sha256WithRSAEncryption
1a:0f:76:ac:a2:33:e0:b7:43:5c:08:82:78:8d:6d:07:2a:f5:
fb:62:09:3d:bc:bd:69:08:e8:e5:85:7e:70:a0:5e:c4:d6:0a:
00:1b:74:55:7d:11:62:e0:a0:ff:99:5e:1e:cb:f3:66:f6:ea:
25:3b:51:b1:24:e8:18:ae:5e:cf:fd:d0:92:7a:02:de:c6:78:
60:9f:43:a9:98:7e:d8:74:89:12:4a:b0:c9:c6:d7:18:90:27:
ec:62:de:7f:65:41:db:72:15:4b:34:63:74:b5:8c:a6:f1:a7:
0f:b8:13:e4:15:9b:43:e0:56:a6:e7:2b:bf:e1:c3:06:32:b8:
a3:d9:9c:5c:7a:fc:3c:e6:80:6f:41:cd:cf:1e:ea:55:c7:f5:
60:1c:30:e6:ec:5c:e4:aa:c1:02:2a:6f:62:8e:3c:ba:23:be:
b7:40:e3:88:b2:cb:a6:de:dd:c0:e8:58:4f:09:72:ee:20:0f:
75:b7:c8:cf:24:29:1b:fb:1c:e8:ff:87:81:d5:33:77:7c:51:
1f:bb:fc:46:6b:72:70:eb:55:eb:c1:2c:57:29:75:ea:8d:45:
4f:70:ad:70:18:d5:3d:fb:f6:a7:10:19:48:f0:a1:b6:6c:b6:
f3:60:7a:21:a4:37:3e:84:a9:20:d6:8c:1a:08:36:3e:84:20:
06:9d:80:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCuvBNw+g+6QFnSp0K3UJb2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzM2UzZjVlZjgyNTU1NmIwMTRhMDg1ZDMyNTY1YmIwY2Jj
NWFjOGQwHhcNMjYwOTE3MDkzOTE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGUyM2YzY2U0OTk4YzA2NWY5ZTUyNDJiMWRjMjQ4MzY0MWExMzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApgxBnK6eajDl7e0xTG1De09klZan
+cGZcnRiL8LV4E8kGYkQNgARKs3xnfELjNqQDmOuHEOFrVDAKwY/K7sYcS5HLCfU
ia2dKKn6ZylhFSokghIxuDl/H0DHZBArw7DQtZjGcR9yvj+GJV5n1jGXcJYhGWSt
i1vmZ29YRLFCVIsdaN56gT9qrajRS4XQuI2rR1gkIvrYoSduRGaxiY+LdNtq+rF/
TklGE9FBhoSYhyILYfcNlxEjhJ0/ABUyeMfWAhykb2Nla/dR8Tg51QlpYNWLJeF6
wfEj4BWCMhxvF8oohyvX32u4NqpIlQeiwCS5O8XTYC1Dhhfa5HBQZmT2tQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEDiPzzkmYwGX55SQrHcJINkGhNyMB8GA1UdIwQY
MBaAFIM+P174JVVrAUoIXTJWW7DLxayNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAt
MzE4YTI2ZDRhOGM5LzEvUU9JX1BPU1pqQVpmbmxKQ3Nkd2tnMlFhRTNJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9kMjY2MTgtYjM0MC00ZjUwLWIzMzAtMzE4YTI2ZDRhOGM5
LzEvZ3o0X1h2Z2xWV3NCU2doZE1sWmJzTXZGckkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwj1LMA0G
CSqGSIb3DQEBCwUAA4IBAQAaD3asojPgt0NcCIJ4jW0HKvX7Ygk9vL1pCOjlhX5w
oF7E1goAG3RVfRFi4KD/mV4ey/Nm9uolO1GxJOgYrl7P/dCSegLexnhgn0OpmH7Y
dIkSSrDJxtcYkCfsYt5/ZUHbchVLNGN0tYym8acPuBPkFZtD4Fam5yu/4cMGMrij
2Zxcevw85oBvQc3PHupVx/VgHDDm7FzkqsECKm9ijjy6I763QOOIssum3t3A6FhP
CXLuIA91t8jPJCkb+xzo/4eB1TN3fFEfu/xGa3Jw61XrwSxXKXXqjUVPcK1wGNU9
+/anEBlI8KG2bLbzYHohpDc+hKkg1owaCDY+hCAGnYCz
-----END CERTIFICATE-----
Generated at Tue Sep 29 09:39:55 2026 by rpki-client