Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/qa609O6nvF5j_vNVUt5PgsUqisU.roa
File: qa609O6nvF5j_vNVUt5PgsUqisU.roa (raw, json)
Hash identifier: lWXhrpMpwMFVcgDosqLb+66fDDl87RYvx/aoX2lkzcs=
Subject key identifier: A9:AE:B4:F4:EE:A7:BC:5E:63:FE:F3:55:52:DE:4F:82:C5:2A:8A:C5
Certificate issuer: /CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Certificate serial: 019CB8F407DD8326007FCD750844B832D5C7
Authority key identifier: CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/qa609O6nvF5j_vNVUt5PgsUqisU.roa
Signing time: Wed 04 Mar 2026 13:05:26 +0000
ROA not before: Wed 04 Mar 2026 13:05:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51247
IP address blocks: 91.184.252.0/23 maxlen: 23
109.172.92.0/23 maxlen: 23
153.56.132.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Mar 2026 13:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:f4:07:dd:83:26:00:7f:cd:75:08:44:b8:32:d5:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cfae461188ffc1ef2f3a1474571a9439a55374ac
Validity
Not Before: Mar 4 13:05:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9aeb4f4eea7bc5e63fef35552de4f82c52a8ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:0e:7a:d5:bf:b7:2d:39:14:b1:0a:2f:8f:30:
dd:4e:c0:42:75:66:d5:21:f8:52:b8:14:c1:3f:f5:
31:6f:29:bf:49:49:55:65:fc:0a:43:53:65:d9:cf:
0f:e7:45:58:2f:a9:ca:fa:55:42:74:3e:01:49:f9:
a5:47:e4:06:74:d1:a6:8a:78:11:55:34:4c:70:05:
54:f1:eb:31:56:81:75:43:5e:8e:37:5b:ad:55:e9:
f3:13:93:d7:77:4d:34:8c:fb:67:0c:5d:dd:df:74:
70:35:f7:11:ae:bc:ad:7e:d7:af:09:b3:e7:d4:c3:
54:69:ec:53:cb:fd:76:a8:4b:dc:0d:95:9f:a9:62:
87:c7:09:38:8b:86:73:2a:1a:0c:64:ef:7e:21:83:
b8:52:7e:2f:97:b4:c2:df:d2:34:2e:c2:f4:e9:fe:
5c:dd:dc:09:02:f2:3d:55:81:51:72:ed:73:79:8d:
bd:9b:a8:a8:71:72:27:e2:76:14:07:e7:55:6c:71:
9a:0c:3c:78:23:22:be:46:6d:be:a0:ab:3a:56:2b:
6c:49:b9:18:9f:8f:bb:10:d8:62:97:0f:83:04:23:
1f:85:24:ee:d0:cb:a1:eb:47:a4:b4:62:7f:8b:93:
2b:c8:a7:55:ba:7a:5f:7c:71:e1:f7:af:7e:26:66:
35:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AE:B4:F4:EE:A7:BC:5E:63:FE:F3:55:52:DE:4F:82:C5:2A:8A:C5
X509v3 Authority Key Identifier:
keyid:CF:AE:46:11:88:FF:C1:EF:2F:3A:14:74:57:1A:94:39:A5:53:74:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/z65GEYj_we8vOhR0VxqUOaVTdKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/qa609O6nvF5j_vNVUt5PgsUqisU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/207876-80b7-4443-9f0c-55f06f062ce0/1/z65GEYj_we8vOhR0VxqUOaVTdKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.184.252.0/23
109.172.92.0/23
153.56.132.0/23
Signature Algorithm: sha256WithRSAEncryption
0d:4b:10:5f:9b:18:e3:f7:07:b7:f0:cc:15:46:8d:a7:68:31:
15:67:a5:4d:7d:bf:f1:78:c5:ac:73:78:11:09:5e:da:9a:53:
e6:c3:6e:ca:c1:01:12:a5:09:a2:a5:46:13:20:0f:e1:a1:df:
eb:86:09:bd:fb:e8:da:50:1a:c8:e7:35:0d:db:74:2a:9b:41:
f0:68:72:3c:0d:f3:4e:79:b3:60:f3:57:cd:25:2f:f8:89:c6:
cf:09:32:79:9b:26:e4:e8:80:19:b1:10:1d:44:ea:9b:89:6f:
a4:3f:8b:7a:cd:d8:72:37:78:96:36:f9:65:34:86:41:3b:73:
b6:b2:71:91:ef:9d:63:b6:6d:5c:b2:d5:32:6a:e1:e1:90:1c:
4a:c8:71:70:c9:f8:6a:4e:22:af:5b:7b:0b:7f:d3:37:52:94:
ef:62:d2:4b:71:31:b3:76:2d:aa:5e:ad:09:4d:e2:c2:c3:5f:
51:e5:9d:fc:5c:1c:66:47:fe:6e:f6:39:d6:4b:8d:00:89:51:
cd:f7:08:7b:3b:89:f3:5a:07:a5:ce:4f:58:07:ed:a4:8f:cd:
37:83:9e:bb:ab:4e:a7:ec:29:c5:a0:33:4b:44:7b:06:26:1e:
01:a3:d2:fe:02:34:f6:96:b9:d3:98:2e:d3:05:60:f1:63:7a:
93:a5:3e:e5
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZy49AfdgyYAf811CES4MtXHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNmYWU0NjExODhmZmMxZWYyZjNhMTQ3NDU3MWE5NDM5YTU1
Mzc0YWMwHhcNMjYwMzA0MTMwNTI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWFlYjRmNGVlYTdiYzVlNjNmZWYzNTU1MmRlNGY4MmM1MmE4YWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAug561b+3LTkUsQovjzDdTsBCdWbV
IfhSuBTBP/Uxbym/SUlVZfwKQ1Nl2c8P50VYL6nK+lVCdD4BSfmlR+QGdNGmingR
VTRMcAVU8esxVoF1Q16ON1utVenzE5PXd000jPtnDF3d33RwNfcRrrytftevCbPn
1MNUaexTy/12qEvcDZWfqWKHxwk4i4ZzKhoMZO9+IYO4Un4vl7TC39I0LsL06f5c
3dwJAvI9VYFRcu1zeY29m6iocXIn4nYUB+dVbHGaDDx4IyK+Rm2+oKs6VitsSbkY
n4+7ENhilw+DBCMfhSTu0Muh60ektGJ/i5MryKdVunpffHHh969+JmY11QIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKmutPTup7xeY/7zVVLeT4LFKorFMB8GA1UdIwQY
MBaAFM+uRhGI/8HvLzoUdFcalDmlU3SsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC8yMDc4NzYtODBiNy00NDQzLTlmMGMt
NTVmMDZmMDYyY2UwLzEvcWE2MDlPNm52RjVqX3ZOVlV0NVBnc1VxaXNVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC8yMDc4NzYtODBiNy00NDQzLTlmMGMtNTVmMDZmMDYyY2Uw
LzEvejY1R0VZal93ZTh2T2hSMFZ4cVVPYVZUZEt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQBW7j8AwQB
baxcAwQBmTiEMA0GCSqGSIb3DQEBCwUAA4IBAQANSxBfmxjj9we38MwVRo2naDEV
Z6VNfb/xeMWsc3gRCV7amlPmw27KwQESpQmipUYTIA/hod/rhgm9++jaUBrI5zUN
23Qqm0HwaHI8DfNOebNg81fNJS/4icbPCTJ5mybk6IAZsRAdROqbiW+kP4t6zdhy
N3iWNvllNIZBO3O2snGR751jtm1cstUyauHhkBxKyHFwyfhqTiKvW3sLf9M3UpTv
YtJLcTGzdi2qXq0JTeLCw19R5Z38XBxmR/5u9jnWS40AiVHN9wh7O4nzWgelzk9Y
B+2kj803g567q06n7CnFoDNLRHsGJh4Bo9L+AjT2lrnTmC7TBWDxY3qTpT7l
-----END CERTIFICATE-----
Generated at Sat Mar 28 19:10:49 2026 by rpki-client