Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/QEppDjVyRBerk3ujRwEpvlXiEWQ.roa
File: QEppDjVyRBerk3ujRwEpvlXiEWQ.roa (raw, json)
Hash identifier: SKIJd9REPViiCXVOQp27KMeIGa3T2cyw64X7SgOS//o=
Subject key identifier: 40:4A:69:0E:35:72:44:17:AB:93:7B:A3:47:01:29:BE:55:E2:11:64
Certificate issuer: /CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Certificate serial: 01A17883599EAF33E63270262035D7C17EFA
Authority key identifier: F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/QEppDjVyRBerk3ujRwEpvlXiEWQ.roa
Signing time: Mon 26 Oct 2026 14:00:36 +0000
ROA not before: Mon 26 Oct 2026 14:00:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48994
IP address blocks: 2a0a:2784:2:8000::/50 maxlen: 50
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 11:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:78:83:59:9e:af:33:e6:32:70:26:20:35:d7:c1:7e:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f50bae60970a2dfc86dd607c5b915ad5c534b413
Validity
Not Before: Oct 26 14:00:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=404a690e35724417ab937ba3470129be55e21164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:6c:c8:1f:e7:b2:35:8a:5a:fe:59:ba:b9:95:
6f:6b:43:c8:31:eb:f1:8a:91:9a:30:11:7f:65:90:
ed:25:c4:bd:29:41:72:63:6b:1d:f2:d5:2c:66:7c:
64:2d:09:db:7f:c4:cf:cf:b0:6d:f4:cd:ed:a1:6e:
42:e8:91:33:81:e1:0a:26:24:02:59:66:88:08:82:
7b:86:be:9f:0b:c9:23:5f:d9:59:23:62:88:2a:57:
5b:79:c0:ab:5a:6a:1e:81:65:be:91:4d:54:ac:de:
cc:61:8c:9e:f0:5d:55:eb:13:8c:a7:0f:c8:97:af:
43:56:cd:d7:7e:c5:00:f4:c5:e6:22:e7:56:06:c1:
9f:ba:89:dd:50:ea:9b:12:b5:d6:d9:ff:c3:46:66:
11:15:ab:a0:f8:7e:a3:e5:d4:41:b9:1b:bb:98:5d:
b3:3c:86:54:ce:80:72:9e:7d:38:2f:a5:d7:da:a0:
a8:df:b9:85:5f:32:2f:c1:55:bd:d0:c1:ff:f0:ea:
73:ec:56:23:44:04:2e:58:f5:a7:d5:bc:34:0c:cf:
4a:81:21:91:91:be:89:a7:40:12:c7:b3:e6:18:8b:
ca:e4:00:23:6d:b4:9c:92:d2:a2:b7:b1:36:b9:5e:
8e:a4:05:3a:08:0b:f6:7e:30:88:6e:cd:b3:e6:d7:
83:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:4A:69:0E:35:72:44:17:AB:93:7B:A3:47:01:29:BE:55:E2:11:64
X509v3 Authority Key Identifier:
keyid:F5:0B:AE:60:97:0A:2D:FC:86:DD:60:7C:5B:91:5A:D5:C5:34:B4:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/QEppDjVyRBerk3ujRwEpvlXiEWQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/f71dcb-9e92-44e7-b042-3665067db256/1/9QuuYJcKLfyG3WB8W5Fa1cU0tBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0a:2784:2:8000::/50
Signature Algorithm: sha256WithRSAEncryption
67:42:f4:58:02:25:8a:df:b2:3b:e6:12:58:11:11:74:fb:62:
22:2f:69:fc:ab:28:23:4d:37:75:3d:12:fc:80:f5:c2:bf:2f:
f7:9a:72:d1:24:7b:52:7d:68:98:b6:e9:8f:fe:73:df:ee:0c:
08:40:8c:a4:29:0e:26:69:5c:e2:4e:88:84:9d:3b:b3:36:92:
23:64:c2:ed:20:15:73:09:cd:8b:e8:71:ea:a7:6f:98:8f:d3:
8c:04:fb:fa:c9:d7:98:bd:12:e9:8b:10:4d:18:28:b8:90:83:
9f:07:23:72:06:76:f4:11:55:12:ec:4b:bd:70:8a:be:99:aa:
87:cf:52:ec:df:9e:cf:8d:a7:5f:6a:1c:ee:ff:64:5c:71:89:
6c:ae:01:e3:b7:06:41:f3:2e:c1:43:f3:a1:a9:8b:fe:fa:10:
c3:bd:c9:a6:9d:c6:7a:d4:80:8b:c1:b8:e6:58:fb:ac:cb:aa:
7d:66:13:f7:d4:92:3b:6f:3d:a0:e8:05:7d:a6:f8:53:e3:68:
f7:df:9f:28:75:02:92:d8:ac:4f:6c:f8:c4:0a:bf:b5:d9:94:
25:bd:d0:bf:67:16:fe:10:aa:c5:49:fb:34:59:2f:87:02:99:
b7:ae:66:60:d3:bf:10:09:81:b0:62:4d:2d:db:d4:b8:3d:d9:
7a:6b:1c:0f
-----BEGIN CERTIFICATE-----
MIIFATCCA+mgAwIBAgISAaF4g1merzPmMnAmIDXXwX76MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1MGJhZTYwOTcwYTJkZmM4NmRkNjA3YzViOTE1YWQ1YzUz
NGI0MTMwHhcNMjYxMDI2MTQwMDM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDRhNjkwZTM1NzI0NDE3YWI5MzdiYTM0NzAxMjliZTU1ZTIxMTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8GzIH+eyNYpa/lm6uZVva0PIMevx
ipGaMBF/ZZDtJcS9KUFyY2sd8tUsZnxkLQnbf8TPz7Bt9M3toW5C6JEzgeEKJiQC
WWaICIJ7hr6fC8kjX9lZI2KIKldbecCrWmoegWW+kU1UrN7MYYye8F1V6xOMpw/I
l69DVs3XfsUA9MXmIudWBsGfuondUOqbErXW2f/DRmYRFaug+H6j5dRBuRu7mF2z
PIZUzoBynn04L6XX2qCo37mFXzIvwVW90MH/8Opz7FYjRAQuWPWn1bw0DM9KgSGR
kb6Jp0ASx7PmGIvK5AAjbbScktKit7E2uV6OpAU6CAv2fjCIbs2z5teD5QIDAQAB
o4ICDTCCAgkwHQYDVR0OBBYEFEBKaQ41ckQXq5N7o0cBKb5V4hFkMB8GA1UdIwQY
MBaAFPULrmCXCi38ht1gfFuRWtXFNLQTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9mNzFkY2ItOWU5Mi00NGU3LWIwNDIt
MzY2NTA2N2RiMjU2LzEvUUVwcERqVnlSQmVyazN1alJ3RXB2bFhpRVdRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9mNzFkY2ItOWU5Mi00NGU3LWIwNDItMzY2NTA2N2RiMjU2
LzEvOVF1dVlKY0tMZnlHM1dCOFc1RmExY1UwdEJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCMGCCsGAQUFBwEHAQH/BBQwEjAQBAIAAjAKAwgGKgonhAAC
gDANBgkqhkiG9w0BAQsFAAOCAQEAZ0L0WAIlit+yO+YSWBERdPtiIi9p/KsoI003
dT0S/ID1wr8v95py0SR7Un1omLbpj/5z3+4MCECMpCkOJmlc4k6IhJ07szaSI2TC
7SAVcwnNi+hx6qdvmI/TjAT7+snXmL0S6YsQTRgouJCDnwcjcgZ29BFVEuxLvXCK
vpmqh89S7N+ez42nX2oc7v9kXHGJbK4B47cGQfMuwUPzoamL/voQw73Jpp3GetSA
i8G45lj7rMuqfWYT99SSO289oOgFfab4U+No99+fKHUCktisT2z4xAq/tdmUJb3Q
v2cW/hCqxUn7NFkvhwKZt65mYNO/EAmBsGJNLdvUuD3ZemscDw==
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:01:57 2026 by rpki-client