Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/qv-FyYzZNAQ81wiTxyGCIzu-NXg.roa
File: qv-FyYzZNAQ81wiTxyGCIzu-NXg.roa (raw, json)
Hash identifier: 3mIPtOkbrQg6eD8F05fSk4pY1438MYb0ZXBJVFT+BOw=
Subject key identifier: AA:FF:85:C9:8C:D9:34:04:3C:D7:08:93:C7:21:82:23:3B:BE:35:78
Certificate issuer: /CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Certificate serial: 01A1B0748604A31476DCC0B6687A40D86E2D
Authority key identifier: 5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/qv-FyYzZNAQ81wiTxyGCIzu-NXg.roa
Signing time: Fri 06 Nov 2026 10:43:08 +0000
ROA not before: Fri 06 Nov 2026 10:43:08 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206863
IP address blocks: 86.62.40.0/22 maxlen: 22
86.62.40.0/24 maxlen: 24
86.62.41.0/24 maxlen: 24
86.62.42.0/24 maxlen: 24
185.169.136.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.mft
rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:b0:74:86:04:a3:14:76:dc:c0:b6:68:7a:40:d8:6e:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5ae4341e23a3315ed4455a545d1a48cef29e7893
Validity
Not Before: Nov 6 10:43:08 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aaff85c98cd934043cd70893c72182233bbe3578
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:b3:59:7a:89:6c:19:95:25:f9:31:a2:f5:3a:
b5:3e:70:c9:ee:69:ca:7c:1c:7e:89:11:69:28:e8:
5d:f9:5e:f7:63:b5:b8:79:4a:ac:92:45:e0:33:61:
f8:05:74:cc:f7:9a:39:1a:3c:16:47:0c:8d:00:79:
bd:e0:bf:ff:1c:85:88:19:09:ab:09:2c:50:51:ed:
c1:f8:03:50:18:5f:c5:42:d7:74:37:81:f2:66:8c:
6b:c0:85:50:0e:60:b7:47:ea:2a:a5:8b:e6:e4:82:
92:98:b7:c0:1d:87:a2:e6:c3:39:a4:bf:59:46:a9:
15:e8:90:68:ad:cf:4b:dd:71:51:37:ac:6e:09:bd:
01:50:db:3e:c8:c1:c2:05:56:d5:a9:cf:0c:12:d0:
43:c7:88:0d:44:73:e4:87:47:e3:86:df:35:13:9c:
40:8b:58:8c:45:1e:68:dd:7a:29:7c:c0:21:05:10:
84:fb:7f:33:69:2e:2d:0d:96:39:db:60:4c:c2:46:
be:3d:dc:82:d3:41:e2:82:bd:89:49:43:45:1e:b6:
83:38:70:7b:ee:c3:db:ec:c4:2f:c8:db:27:ff:06:
f2:a1:47:24:f8:51:c0:b4:12:72:c9:a9:f9:d3:e1:
a0:f6:62:90:4f:45:23:2d:10:2e:17:7a:a7:b0:36:
1b:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:FF:85:C9:8C:D9:34:04:3C:D7:08:93:C7:21:82:23:3B:BE:35:78
X509v3 Authority Key Identifier:
keyid:5A:E4:34:1E:23:A3:31:5E:D4:45:5A:54:5D:1A:48:CE:F2:9E:78:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/WuQ0HiOjMV7URVpUXRpIzvKeeJM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/qv-FyYzZNAQ81wiTxyGCIzu-NXg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f0ea2c-d27d-4ecf-ba25-1e08dfd235c7/1/WuQ0HiOjMV7URVpUXRpIzvKeeJM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.62.40.0/22
185.169.136.0/22
Signature Algorithm: sha256WithRSAEncryption
af:3a:10:a1:36:2a:56:0b:64:3e:35:ba:94:ec:f2:d2:5c:e5:
06:46:91:55:78:e4:1b:ad:83:c5:c1:97:ea:ce:04:d2:f3:0f:
98:c7:d4:3b:85:a9:b8:3a:62:bb:c1:51:c3:26:a8:92:e0:72:
81:53:ae:9f:8d:6c:3a:e5:16:33:2e:02:36:e6:2c:b7:b2:3b:
6a:2e:20:94:74:64:20:7f:24:78:74:51:a3:5e:1e:55:c8:69:
dc:17:81:10:bd:8b:b5:9c:d0:5c:a0:03:35:d9:47:bc:97:44:
3f:b5:eb:85:49:5f:19:db:4f:92:3c:01:d9:54:f5:03:e5:11:
6b:c5:48:67:f8:df:d8:74:af:98:c3:96:5a:cc:dd:a1:5e:8f:
58:2c:e8:2d:40:10:bf:92:8a:13:9a:42:34:e1:3e:9e:60:fb:
a7:b2:05:06:d2:4e:0e:9c:74:34:1c:bd:b6:c5:65:20:75:05:
3d:c6:c3:51:18:1c:95:08:0b:8a:b1:20:69:7a:a6:91:e5:2d:
b1:00:65:df:9f:96:94:96:34:e3:e2:3d:6b:34:18:84:17:b1:
e1:35:68:03:13:ad:45:df:ee:c4:b8:2b:8b:bb:d9:e3:3c:91:
3c:0f:53:ac:e2:de:98:90:57:00:c6:c2:81:5f:a4:5a:86:f8:
1d:78:22:77
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaGwdIYEoxR23MC2aHpA2G4tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVhZTQzNDFlMjNhMzMxNWVkNDQ1NWE1NDVkMWE0OGNlZjI5
ZTc4OTMwHhcNMjYxMTA2MTA0MzA4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWZmODVjOThjZDkzNDA0M2NkNzA4OTNjNzIxODIyMzNiYmUzNTc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzrNZeolsGZUl+TGi9Tq1PnDJ7mnK
fBx+iRFpKOhd+V73Y7W4eUqskkXgM2H4BXTM95o5GjwWRwyNAHm94L//HIWIGQmr
CSxQUe3B+ANQGF/FQtd0N4HyZoxrwIVQDmC3R+oqpYvm5IKSmLfAHYei5sM5pL9Z
RqkV6JBorc9L3XFRN6xuCb0BUNs+yMHCBVbVqc8MEtBDx4gNRHPkh0fjht81E5xA
i1iMRR5o3XopfMAhBRCE+38zaS4tDZY522BMwka+PdyC00Higr2JSUNFHraDOHB7
7sPb7MQvyNsn/wbyoUck+FHAtBJyyan50+Gg9mKQT0UjLRAuF3qnsDYbYwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKr/hcmM2TQEPNcIk8chgiM7vjV4MB8GA1UdIwQY
MBaAFFrkNB4jozFe1EVaVF0aSM7ynniTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvV3VRMEhpT2pNVjdVUlZwVVhScEl6dktlZUpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mMGVhMmMtZDI3ZC00ZWNmLWJhMjUt
MWUwOGRmZDIzNWM3LzEvcXYtRnlZelpOQVE4MXdpVHh5R0NJenUtTlhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mMGVhMmMtZDI3ZC00ZWNmLWJhMjUtMWUwOGRmZDIzNWM3
LzEvV3VRMEhpT2pNVjdVUlZwVVhScEl6dktlZUpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCVj4oAwQC
uamIMA0GCSqGSIb3DQEBCwUAA4IBAQCvOhChNipWC2Q+NbqU7PLSXOUGRpFVeOQb
rYPFwZfqzgTS8w+Yx9Q7ham4OmK7wVHDJqiS4HKBU66fjWw65RYzLgI25iy3sjtq
LiCUdGQgfyR4dFGjXh5VyGncF4EQvYu1nNBcoAM12Ue8l0Q/teuFSV8Z20+SPAHZ
VPUD5RFrxUhn+N/YdK+Yw5ZazN2hXo9YLOgtQBC/kooTmkI04T6eYPunsgUG0k4O
nHQ0HL22xWUgdQU9xsNRGByVCAuKsSBpeqaR5S2xAGXfn5aUljTj4j1rNBiEF7Hh
NWgDE61F3+7EuCuLu9njPJE8D1Os4t6YkFcAxsKBX6RahvgdeCJ3
-----END CERTIFICATE-----
Generated at Sun Nov 15 10:32:20 2026 by rpki-client