Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/QvkGs5IAeIfWleLg78j5QiBlPCc.roa
File: QvkGs5IAeIfWleLg78j5QiBlPCc.roa (raw, json)
Hash identifier: vHZselKVJ3cr5hRqbitQznqqHbxbDrqbjvCbal/uD4o=
Subject key identifier: 42:F9:06:B3:92:00:78:87:D6:95:E2:E0:EF:C8:F9:42:20:65:3C:27
Certificate issuer: /CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Certificate serial: 019E1D18118B74DE89CAAB799E8DC90CCE3D
Authority key identifier: DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/QvkGs5IAeIfWleLg78j5QiBlPCc.roa
Signing time: Tue 12 May 2026 16:49:37 +0000
ROA not before: Tue 12 May 2026 16:49:37 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13213
IP address blocks: 84.236.196.0/24 maxlen: 24
88.148.29.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.mft
rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 14:18:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:1d:18:11:8b:74:de:89:ca:ab:79:9e:8d:c9:0c:ce:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=daaf17b0015dbb7cd992f26cdff01c4e2620b73e
Validity
Not Before: May 12 16:49:37 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42f906b392007887d695e2e0efc8f94220653c27
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:81:b6:43:ca:be:48:82:b4:fb:d3:0a:d8:fd:
e5:da:bb:22:78:67:88:cf:8c:d3:59:9f:db:0f:be:
0d:cf:b5:9c:5b:42:84:c9:95:3e:e2:09:a8:88:c0:
c0:3b:65:99:23:33:c5:e2:1f:8b:8d:3d:97:3d:ac:
94:a7:9c:77:4d:eb:bf:36:5f:f9:ac:ae:9f:3a:69:
ac:f5:ee:73:18:22:87:8d:81:45:50:58:7b:e8:be:
b9:43:c2:e0:55:c5:e7:14:7e:fb:61:59:8a:c1:76:
7a:c6:15:8c:83:d7:61:5a:d5:21:8b:49:6b:d2:a1:
70:41:6b:93:71:7b:42:80:7e:b7:69:3e:40:40:37:
09:0e:e3:3d:7c:80:a9:da:76:6b:ca:d5:f1:06:2c:
82:cd:14:74:27:56:f3:d3:be:ac:16:1c:48:9a:c6:
b6:d2:30:43:62:ea:b3:5d:2c:c6:94:aa:f9:32:16:
62:30:26:1d:ca:53:ab:6c:c8:43:f8:db:f7:e4:00:
39:57:58:7b:3c:3c:40:71:3f:eb:b8:a3:b7:9b:c4:
41:9e:12:3b:dd:54:2a:7b:04:f3:53:00:e4:d7:13:
86:5c:f5:54:ff:39:52:a9:12:b5:9c:89:55:70:93:
b8:db:10:71:e0:9b:14:00:71:e0:d4:c6:bf:6f:a8:
ec:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:F9:06:B3:92:00:78:87:D6:95:E2:E0:EF:C8:F9:42:20:65:3C:27
X509v3 Authority Key Identifier:
keyid:DA:AF:17:B0:01:5D:BB:7C:D9:92:F2:6C:DF:F0:1C:4E:26:20:B7:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2q8XsAFdu3zZkvJs3_AcTiYgtz4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/QvkGs5IAeIfWleLg78j5QiBlPCc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/c8973c-3cfa-4604-8110-cf06d1983ba1/1/2q8XsAFdu3zZkvJs3_AcTiYgtz4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
84.236.196.0/24
88.148.29.0/24
Signature Algorithm: sha256WithRSAEncryption
bb:be:b0:7e:8f:4d:c4:e4:b5:bd:a2:3b:c9:9c:07:39:a4:ab:
38:51:86:4a:51:a7:44:fc:38:40:31:b2:75:94:1d:61:31:ff:
5a:db:b2:c7:03:a4:e4:05:39:91:a3:51:fb:fb:97:93:1c:12:
32:6f:c2:b6:03:59:94:fb:8d:40:08:80:3f:31:58:49:d7:3a:
6a:e1:b2:7e:cd:bf:a6:c3:3b:27:25:8e:48:cf:68:e9:79:cc:
80:88:2d:73:81:7b:1d:4a:6c:0f:2d:7d:59:23:1a:cf:89:fd:
c2:86:5f:2c:e8:dc:ba:5e:90:e5:93:26:ef:f7:be:bf:92:2a:
eb:f5:58:ee:4f:22:77:2c:7b:dd:e8:49:68:1e:89:07:17:76:
46:09:62:00:50:30:e5:85:82:e9:80:81:93:1c:61:f7:bc:51:
7b:43:0d:38:4d:73:d6:26:94:17:53:b2:88:33:ae:44:d2:2f:
57:34:5f:94:5d:cd:a0:b0:ee:85:e6:08:4e:09:67:22:90:6b:
08:61:37:f8:83:53:65:0d:4e:cd:4f:3b:ed:c8:52:85:f6:4a:
c0:0a:fb:1d:13:6a:f8:2f:42:3c:59:1c:0e:dd:76:fd:d0:d1:
7f:23:a4:da:3a:6c:14:45:c6:1c:78:33:41:3b:16:13:38:b9:
a6:f6:b7:aa
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ4dGBGLdN6Jyqt5no3JDM49MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhYWYxN2IwMDE1ZGJiN2NkOTkyZjI2Y2RmZjAxYzRlMjYy
MGI3M2UwHhcNMjYwNTEyMTY0OTM3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmY5MDZiMzkyMDA3ODg3ZDY5NWUyZTBlZmM4Zjk0MjIwNjUzYzI3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi4G2Q8q+SIK0+9MK2P3l2rsieGeI
z4zTWZ/bD74Nz7WcW0KEyZU+4gmoiMDAO2WZIzPF4h+LjT2XPayUp5x3Teu/Nl/5
rK6fOmms9e5zGCKHjYFFUFh76L65Q8LgVcXnFH77YVmKwXZ6xhWMg9dhWtUhi0lr
0qFwQWuTcXtCgH63aT5AQDcJDuM9fICp2nZrytXxBiyCzRR0J1bz076sFhxImsa2
0jBDYuqzXSzGlKr5MhZiMCYdylOrbMhD+Nv35AA5V1h7PDxAcT/ruKO3m8RBnhI7
3VQqewTzUwDk1xOGXPVU/zlSqRK1nIlVcJO42xBx4JsUAHHg1Ma/b6js8QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEL5BrOSAHiH1pXi4O/I+UIgZTwnMB8GA1UdIwQY
MBaAFNqvF7ABXbt82ZLybN/wHE4mILc+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAt
Y2YwNmQxOTgzYmExLzEvUXZrR3M1SUFlSWZXbGVMZzc4ajVRaUJsUENjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS9jODk3M2MtM2NmYS00NjA0LTgxMTAtY2YwNmQxOTgzYmEx
LzEvMnE4WHNBRmR1M3paa3ZKczNfQWNUaVlndHo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAVOzEAwQA
WJQdMA0GCSqGSIb3DQEBCwUAA4IBAQC7vrB+j03E5LW9ojvJnAc5pKs4UYZKUadE
/DhAMbJ1lB1hMf9a27LHA6TkBTmRo1H7+5eTHBIyb8K2A1mU+41ACIA/MVhJ1zpq
4bJ+zb+mwzsnJY5Iz2jpecyAiC1zgXsdSmwPLX1ZIxrPif3Chl8s6Ny6XpDlkybv
976/kirr9VjuTyJ3LHvd6EloHokHF3ZGCWIAUDDlhYLpgIGTHGH3vFF7Qw04TXPW
JpQXU7KIM65E0i9XNF+UXc2gsO6F5ghOCWcikGsIYTf4g1NlDU7NTzvtyFKF9krA
CvsdE2r4L0I8WRwO3Xb90NF/I6TaOmwURcYceDNBOxYTOLmm9req
-----END CERTIFICATE-----
Generated at Wed May 13 01:35:54 2026 by rpki-client