Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Q_m5E5Z7LMb5OuLyiA01P8oV7Hs.roa
File: Q_m5E5Z7LMb5OuLyiA01P8oV7Hs.roa (raw, json)
Hash identifier: o2Gw3Dx2Nrdktrx7TjfEXgk1J5nJb9Zxl25czXEgF8U=
Subject key identifier: 43:F9:B9:13:96:7B:2C:C6:F9:3A:E2:F2:88:0D:35:3F:CA:15:EC:7B
Certificate issuer: /CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Certificate serial: 01A0CAA5A0884B928C19E410657EDC0E245B
Authority key identifier: 7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Q_m5E5Z7LMb5OuLyiA01P8oV7Hs.roa
Signing time: Tue 22 Sep 2026 19:44:07 +0000
ROA not before: Tue 22 Sep 2026 19:44:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219179
IP address blocks: 2a10:4646:9b0::/44 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 Oct 2026 07:00:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ca:a5:a0:88:4b:92:8c:19:e4:10:65:7e:dc:0e:24:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dcc4952b6f3a8cc7c81630d3e83b2a9827163f6
Validity
Not Before: Sep 22 19:44:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43f9b913967b2cc6f93ae2f2880d353fca15ec7b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b1:e2:61:ee:f6:68:fd:6f:8c:57:5d:9f:3f:
0b:aa:4b:f4:1f:c4:e0:1d:e4:34:8d:2f:44:e2:d5:
f1:45:c6:79:e5:78:d4:ea:f5:40:43:63:8c:f7:9d:
4d:b1:79:85:6b:73:38:5e:c9:77:3d:7e:b5:7e:42:
8d:e3:ec:a8:03:ff:4e:6d:15:e6:7e:d9:2e:e8:5c:
1e:1d:de:7b:db:4b:c1:a1:de:53:25:e6:87:97:5d:
61:e2:f8:af:73:38:ae:8d:74:45:99:5f:71:08:ee:
10:58:78:c3:ce:e7:aa:90:c8:95:4f:87:04:12:d3:
86:38:53:da:86:c2:18:01:ed:48:a6:ff:4b:3b:0b:
06:e8:24:84:60:7a:8c:39:bf:0f:83:54:a9:94:f5:
52:5f:6f:a1:c4:16:5a:d6:35:ad:10:df:84:64:83:
18:6c:a9:0d:ba:75:5a:31:6b:dc:78:ba:86:6c:7a:
04:2d:67:81:8b:26:a9:d6:70:23:74:b3:49:ba:8a:
f4:86:da:7e:db:a4:79:24:a4:f4:5e:07:ae:2f:6f:
03:44:10:6c:45:70:2a:f3:31:99:64:18:a1:33:a6:
1f:85:ba:75:5d:d1:68:13:ea:32:89:48:d8:6e:00:
86:a5:dc:ee:27:a1:00:f7:06:25:da:ac:8e:2e:ef:
7d:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F9:B9:13:96:7B:2C:C6:F9:3A:E2:F2:88:0D:35:3F:CA:15:EC:7B
X509v3 Authority Key Identifier:
keyid:7D:CC:49:52:B6:F3:A8:CC:7C:81:63:0D:3E:83:B2:A9:82:71:63:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/Q_m5E5Z7LMb5OuLyiA01P8oV7Hs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/20/9488c7-849c-4ff1-ab4c-ae9283e7964e/1/fcxJUrbzqMx8gWMNPoOyqYJxY_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a10:4646:9b0::/44
Signature Algorithm: sha256WithRSAEncryption
ab:dc:5d:17:19:f2:a8:8c:95:99:f0:02:92:2f:61:a2:d1:45:
73:85:da:0a:a6:12:58:b4:0b:8a:a8:e5:50:cb:c8:30:da:1e:
cb:7e:c2:1d:66:98:e5:8e:d7:a1:80:de:93:ac:c5:17:0d:6c:
22:32:7f:59:d3:b5:aa:11:1b:44:79:d5:41:af:76:f9:5d:52:
55:82:ee:3e:6c:0a:70:2d:b6:8a:a0:5f:e3:8c:d5:33:d2:32:
07:6c:40:82:04:22:b4:5d:3a:c5:dc:74:d0:43:e1:69:c7:cc:
a5:e4:b1:b0:2d:c4:fc:74:06:9c:57:60:f4:8c:39:3f:7e:a4:
f5:71:40:00:d4:cf:fb:b0:c9:71:a2:49:d8:ff:3f:a1:25:54:
32:69:d5:28:15:e1:ac:9c:35:6f:7c:29:54:05:dc:b5:e2:2b:
d8:fc:c8:ec:94:a4:c7:0b:06:6e:4e:d2:c4:53:ea:cd:79:80:
0b:42:39:8f:d5:71:50:2d:73:c3:00:25:81:89:08:33:4d:29:
ca:b8:b1:8d:f1:ad:9d:ab:01:27:8c:6a:c8:d5:69:0c:72:1e:
fa:ca:61:b7:c9:e7:6c:1e:33:f0:34:6b:d9:1f:ee:25:0c:70:
69:3d:ec:1c:c6:c7:fe:f7:96:9e:38:87:e9:cf:bf:9c:b5:26:
ca:b1:a1:85
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAaDKpaCIS5KMGeQQZX7cDiRbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkY2M0OTUyYjZmM2E4Y2M3YzgxNjMwZDNlODNiMmE5ODI3
MTYzZjYwHhcNMjYwOTIyMTk0NDA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2Y5YjkxMzk2N2IyY2M2ZjkzYWUyZjI4ODBkMzUzZmNhMTVlYzdiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorHiYe72aP1vjFddnz8Lqkv0H8Tg
HeQ0jS9E4tXxRcZ55XjU6vVAQ2OM951NsXmFa3M4Xsl3PX61fkKN4+yoA/9ObRXm
ftku6FweHd5720vBod5TJeaHl11h4vivcziujXRFmV9xCO4QWHjDzueqkMiVT4cE
EtOGOFPahsIYAe1Ipv9LOwsG6CSEYHqMOb8Pg1SplPVSX2+hxBZa1jWtEN+EZIMY
bKkNunVaMWvceLqGbHoELWeBiyap1nAjdLNJuor0htp+26R5JKT0XgeuL28DRBBs
RXAq8zGZZBihM6Yfhbp1XdFoE+oyiUjYbgCGpdzuJ6EA9wYl2qyOLu99jQIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEP5uROWeyzG+Tri8ogNNT/KFex7MB8GA1UdIwQY
MBaAFH3MSVK286jMfIFjDT6DsqmCcWP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmN4SlVyYnpxTXg4Z1dNTlBvT3lxWUp4WV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMt
YWU5MjgzZTc5NjRlLzEvUV9tNUU1WjdMTWI1T3VMeWlBMDFQOG9WN0hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMC85NDg4YzctODQ5Yy00ZmYxLWFiNGMtYWU5MjgzZTc5NjRl
LzEvZmN4SlVyYnpxTXg4Z1dNTlBvT3lxWUp4WV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcEKhBGRgmw
MA0GCSqGSIb3DQEBCwUAA4IBAQCr3F0XGfKojJWZ8AKSL2Gi0UVzhdoKphJYtAuK
qOVQy8gw2h7LfsIdZpjljtehgN6TrMUXDWwiMn9Z07WqERtEedVBr3b5XVJVgu4+
bApwLbaKoF/jjNUz0jIHbECCBCK0XTrF3HTQQ+Fpx8yl5LGwLcT8dAacV2D0jDk/
fqT1cUAA1M/7sMlxoknY/z+hJVQyadUoFeGsnDVvfClUBdy14ivY/MjslKTHCwZu
TtLEU+rNeYALQjmP1XFQLXPDACWBiQgzTSnKuLGN8a2dqwEnjGrI1WkMch76ymG3
yedsHjPwNGvZH+4lDHBpPewcxsf+95aeOIfpz7+ctSbKsaGF
-----END CERTIFICATE-----
Generated at Thu Oct 8 15:28:47 2026 by rpki-client