Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/QDiPvt15IO2yPU7gbEYowlHPnHc.roa
File: QDiPvt15IO2yPU7gbEYowlHPnHc.roa (raw, json)
Hash identifier: XLuGWRjPQ5PJivkL0PcxwadQsih1SnROtNnqw3W5Cxs=
Subject key identifier: 40:38:8F:BE:DD:79:20:ED:B2:3D:4E:E0:6C:46:28:C2:51:CF:9C:77
Certificate issuer: /CN=13319513fd0b90417060a218b76d62b8e3fbcc51
Certificate serial: 01A08952EA1AB9B2F025C10778FFC095FA17
Authority key identifier: 13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/QDiPvt15IO2yPU7gbEYowlHPnHc.roa
Signing time: Thu 10 Sep 2026 03:18:27 +0000
ROA not before: Thu 10 Sep 2026 03:18:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39122
IP address blocks: 194.9.222.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.mft
rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Sep 2026 12:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:89:52:ea:1a:b9:b2:f0:25:c1:07:78:ff:c0:95:fa:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13319513fd0b90417060a218b76d62b8e3fbcc51
Validity
Not Before: Sep 10 03:18:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40388fbedd7920edb23d4ee06c4628c251cf9c77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:46:2c:bd:8e:f1:05:02:7c:70:d3:7a:66:a0:
6b:a8:f4:6e:04:97:ec:21:9a:4e:db:d1:5f:2e:00:
ed:a3:84:69:7c:5a:bd:ae:53:f0:e8:67:46:29:63:
ac:2b:2c:68:84:6c:0a:4d:87:73:c3:cd:80:af:26:
29:21:8a:90:0a:97:8a:4f:04:36:06:2a:67:33:77:
41:a9:c1:fb:95:c4:35:01:ef:48:f1:df:fa:ed:56:
08:d0:b8:89:6c:19:4b:da:2e:47:3d:0e:1c:46:da:
97:52:e5:d4:9a:dc:45:fe:9e:8b:f1:19:f7:c4:67:
fa:8b:e9:36:b9:eb:32:93:59:db:ed:4a:32:98:f9:
ec:47:30:0c:f4:df:60:90:eb:d0:6d:12:4d:1e:eb:
50:be:24:e5:fa:fe:1e:08:6d:83:5b:2f:69:5a:97:
72:07:4b:f0:d2:1a:7b:c8:4b:4f:83:50:41:96:28:
c4:61:c3:cd:27:0e:51:c6:6e:a8:0c:1e:8b:5f:f8:
a6:dd:68:ff:88:65:63:34:d9:92:29:b1:2c:ae:bc:
3a:72:d8:65:a3:ba:73:23:fd:0c:d9:69:40:aa:bc:
9d:d1:d0:da:06:80:0d:77:74:96:b2:dc:05:0a:b7:
92:7e:6d:d8:10:3c:59:16:b3:21:65:94:59:f0:48:
4a:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:38:8F:BE:DD:79:20:ED:B2:3D:4E:E0:6C:46:28:C2:51:CF:9C:77
X509v3 Authority Key Identifier:
keyid:13:31:95:13:FD:0B:90:41:70:60:A2:18:B7:6D:62:B8:E3:FB:CC:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EzGVE_0LkEFwYKIYt21iuOP7zFE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/QDiPvt15IO2yPU7gbEYowlHPnHc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/837b0c-18a9-4ab3-8350-48170be11332/1/EzGVE_0LkEFwYKIYt21iuOP7zFE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.9.222.0/24
Signature Algorithm: sha256WithRSAEncryption
00:50:fe:e8:a8:49:ab:90:ff:fc:9b:15:57:8a:67:9d:70:34:
83:1a:ab:6e:e9:5e:0b:5b:79:c8:10:4d:f1:94:cf:11:f7:2a:
90:4c:86:a4:58:0d:5a:3c:99:b6:b8:0e:98:13:2f:83:9d:e6:
9b:f0:89:3a:0f:77:b7:92:ee:c8:a7:0d:c1:c2:79:a6:bb:87:
85:8d:9c:c4:97:d4:df:3c:16:c2:50:8e:1b:e0:05:18:d6:eb:
d3:72:fc:46:0b:ca:2b:04:cf:cc:40:aa:f7:d0:75:82:71:1a:
22:a5:7c:15:c6:12:02:9c:1e:7b:10:e0:4f:12:a2:3e:3d:4b:
6d:f7:1e:ac:cf:9d:a5:23:77:a1:cf:e6:63:ab:b1:5b:83:c5:
ce:08:3d:03:d3:7e:cd:53:0c:22:dd:dc:ed:7d:50:b1:4f:6a:
4c:98:26:7e:20:45:e1:e1:0a:90:04:f2:da:32:0b:91:d2:0c:
24:92:18:8f:f3:2f:ab:90:59:8f:87:79:c5:94:50:9c:96:22:
fd:6d:d2:0d:a5:f6:8a:35:07:46:3c:60:aa:dd:bb:85:e1:cf:
28:95:f2:14:71:4b:cf:e8:d4:9f:28:e1:d7:a1:df:00:a4:38:
e5:9e:f5:5c:9e:65:5b:27:28:4d:05:1b:94:0f:85:c2:05:70:
a5:e1:82:ad
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCJUuoaubLwJcEHeP/AlfoXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzMzE5NTEzZmQwYjkwNDE3MDYwYTIxOGI3NmQ2MmI4ZTNm
YmNjNTEwHhcNMjYwOTEwMDMxODI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDM4OGZiZWRkNzkyMGVkYjIzZDRlZTA2YzQ2MjhjMjUxY2Y5Yzc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUYsvY7xBQJ8cNN6ZqBrqPRuBJfs
IZpO29FfLgDto4RpfFq9rlPw6GdGKWOsKyxohGwKTYdzw82AryYpIYqQCpeKTwQ2
BipnM3dBqcH7lcQ1Ae9I8d/67VYI0LiJbBlL2i5HPQ4cRtqXUuXUmtxF/p6L8Rn3
xGf6i+k2uesyk1nb7UoymPnsRzAM9N9gkOvQbRJNHutQviTl+v4eCG2DWy9pWpdy
B0vw0hp7yEtPg1BBlijEYcPNJw5Rxm6oDB6LX/im3Wj/iGVjNNmSKbEsrrw6cthl
o7pzI/0M2WlAqryd0dDaBoANd3SWstwFCreSfm3YEDxZFrMhZZRZ8EhKUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEA4j77deSDtsj1O4GxGKMJRz5x3MB8GA1UdIwQY
MBaAFBMxlRP9C5BBcGCiGLdtYrjj+8xRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXpHVkVfMExrRUZ3WUtJWXQyMWl1T1A3ekZFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC84MzdiMGMtMThhOS00YWIzLTgzNTAt
NDgxNzBiZTExMzMyLzEvUURpUHZ0MTVJTzJ5UFU3Z2JFWW93bEhQbkhjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC84MzdiMGMtMThhOS00YWIzLTgzNTAtNDgxNzBiZTExMzMy
LzEvRXpHVkVfMExrRUZ3WUtJWXQyMWl1T1A3ekZFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwgneMA0G
CSqGSIb3DQEBCwUAA4IBAQAAUP7oqEmrkP/8mxVXimedcDSDGqtu6V4LW3nIEE3x
lM8R9yqQTIakWA1aPJm2uA6YEy+Dneab8Ik6D3e3ku7Ipw3Bwnmmu4eFjZzEl9Tf
PBbCUI4b4AUY1uvTcvxGC8orBM/MQKr30HWCcRoipXwVxhICnB57EOBPEqI+PUtt
9x6sz52lI3ehz+Zjq7Fbg8XOCD0D037NUwwi3dztfVCxT2pMmCZ+IEXh4QqQBPLa
MguR0gwkkhiP8y+rkFmPh3nFlFCcliL9bdINpfaKNQdGPGCq3buF4c8olfIUcUvP
6NSfKOHXod8ApDjlnvVcnmVbJyhNBRuUD4XCBXCl4YKt
-----END CERTIFICATE-----
Generated at Mon Sep 28 21:36:28 2026 by rpki-client