Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QpGcaG91bxgapfJJqQ4WXYG10vE.roa
File: QpGcaG91bxgapfJJqQ4WXYG10vE.roa (raw, json)
Hash identifier: u5ydPfOycnQQOpORIH1WXqeO5siT8QIlkv1dKfutKak=
Subject key identifier: 42:91:9C:68:6F:75:6F:18:1A:A5:F2:49:A9:0E:16:5D:81:B5:D2:F1
Certificate issuer: /CN=c66266f466fb2498a39459b3352da25151a5a4c0
Certificate serial: 01A0C50B068710DB90B798EFE2315E8A4B1E
Authority key identifier: C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QpGcaG91bxgapfJJqQ4WXYG10vE.roa
Signing time: Mon 21 Sep 2026 17:37:09 +0000
ROA not before: Mon 21 Sep 2026 17:37:09 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 0
IP address blocks: 151.242.236.0/22 maxlen: 24
151.247.84.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Sep 2026 16:42:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c5:0b:06:87:10:db:90:b7:98:ef:e2:31:5e:8a:4b:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c66266f466fb2498a39459b3352da25151a5a4c0
Validity
Not Before: Sep 21 17:37:09 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42919c686f756f181aa5f249a90e165d81b5d2f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ff:35:cd:d7:55:61:83:c1:b2:57:cb:cf:84:
7f:09:6a:11:a9:6e:60:78:f7:64:88:11:aa:f6:d4:
1a:da:eb:cc:d9:39:0a:62:b4:a5:dd:2c:ea:6d:51:
8b:fb:49:46:00:00:76:2f:68:ca:a6:1b:8e:39:d5:
56:73:cf:e3:c4:5b:2e:d0:92:da:a5:91:8f:b5:6c:
0b:49:f9:d6:0d:f9:df:72:db:41:ee:d5:13:b0:0b:
8d:41:df:27:70:d9:ed:05:70:f6:35:17:39:07:cf:
2a:e1:56:94:cd:40:15:9e:45:da:96:57:f2:c9:2a:
89:0a:85:52:8e:3d:e4:b8:a0:80:e4:d1:2b:44:75:
dd:43:90:c4:a1:b2:2e:bb:8f:ec:a7:4f:c5:34:40:
d0:eb:0a:4f:e7:58:04:11:fb:48:a2:3b:b3:aa:17:
02:e7:d5:8f:ce:3f:89:80:42:8f:49:83:47:05:81:
76:13:b0:af:c1:d6:39:d9:8b:1e:f8:9e:c4:f0:6a:
92:1e:c0:02:e8:09:d7:f8:4f:89:b2:79:0e:8e:f7:
82:91:fe:9e:8b:2a:65:ee:06:b9:7a:da:3d:67:9c:
b4:4d:21:33:0b:59:1e:be:c7:4c:c8:6e:17:2c:16:
98:6e:36:69:37:81:b6:65:3e:e2:70:49:18:e2:19:
f4:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:91:9C:68:6F:75:6F:18:1A:A5:F2:49:A9:0E:16:5D:81:B5:D2:F1
X509v3 Authority Key Identifier:
keyid:C6:62:66:F4:66:FB:24:98:A3:94:59:B3:35:2D:A2:51:51:A5:A4:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xmJm9Gb7JJijlFmzNS2iUVGlpMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/QpGcaG91bxgapfJJqQ4WXYG10vE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/f43b1d-9e50-4551-ae6a-17b9de141252/1/xmJm9Gb7JJijlFmzNS2iUVGlpMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
151.242.236.0/22
151.247.84.0/22
Signature Algorithm: sha256WithRSAEncryption
a3:eb:a3:f4:86:37:e1:a9:f4:13:bf:3a:35:78:45:1f:00:4f:
46:74:c5:5b:d9:27:08:41:7c:40:45:1c:96:24:d8:39:e6:47:
c4:cf:6f:72:a1:73:9b:27:00:ef:36:a3:12:96:8c:c4:a9:8b:
13:09:ba:3b:81:49:21:88:57:1c:6b:da:0b:d3:05:7d:8d:ad:
a7:58:1e:78:92:20:85:82:d2:63:7a:4f:77:c9:94:ba:0c:10:
02:36:48:b9:57:9f:eb:c7:75:30:1b:5b:4f:21:19:9c:5e:1c:
b7:9a:b7:5f:a7:b8:c3:0c:19:da:88:0c:50:1b:02:94:6e:9a:
4d:5e:57:e0:b1:4c:4a:ed:35:fc:d8:8a:d6:be:26:b1:c1:35:
8d:29:cf:a6:4e:a4:ad:f6:0a:96:91:68:ce:fd:75:d7:c6:9e:
15:9d:63:9a:4e:76:19:b6:94:ea:6c:f5:ae:6f:d7:ec:78:3b:
3b:8e:96:8f:cf:ee:87:05:ed:38:a1:82:20:54:bf:2a:83:55:
c2:ff:f8:f4:6c:40:47:bd:f6:7f:d7:a4:94:d9:d5:6a:e8:6c:
2c:87:ee:5b:92:68:38:c9:fb:cb:96:77:2e:cd:3d:9d:d4:1f:
0e:6b:2a:92:19:a1:a5:b7:6a:e7:aa:ac:9e:58:be:36:94:8d:
4e:ed:c8:bf
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaDFCwaHENuQt5jv4jFeikseMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2NjI2NmY0NjZmYjI0OThhMzk0NTliMzM1MmRhMjUxNTFh
NWE0YzAwHhcNMjYwOTIxMTczNzA5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjkxOWM2ODZmNzU2ZjE4MWFhNWYyNDlhOTBlMTY1ZDgxYjVkMmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuP81zddVYYPBslfLz4R/CWoRqW5g
ePdkiBGq9tQa2uvM2TkKYrSl3SzqbVGL+0lGAAB2L2jKphuOOdVWc8/jxFsu0JLa
pZGPtWwLSfnWDfnfcttB7tUTsAuNQd8ncNntBXD2NRc5B88q4VaUzUAVnkXallfy
ySqJCoVSjj3kuKCA5NErRHXdQ5DEobIuu4/sp0/FNEDQ6wpP51gEEftIojuzqhcC
59WPzj+JgEKPSYNHBYF2E7CvwdY52Yse+J7E8GqSHsAC6AnX+E+JsnkOjveCkf6e
iypl7ga5eto9Z5y0TSEzC1kevsdMyG4XLBaYbjZpN4G2ZT7icEkY4hn0zwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEKRnGhvdW8YGqXySakOFl2BtdLxMB8GA1UdIwQY
MBaAFMZiZvRm+ySYo5RZszUtolFRpaTAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEt
MTdiOWRlMTQxMjUyLzEvUXBHY2FHOTFieGdhcGZKSnFRNFdYWUcxMHZFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS9mNDNiMWQtOWU1MC00NTUxLWFlNmEtMTdiOWRlMTQxMjUy
LzEveG1KbTlHYjdKSmlqbEZtek5TMmlVVkdscE1BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQCl/LsAwQC
l/dUMA0GCSqGSIb3DQEBCwUAA4IBAQCj66P0hjfhqfQTvzo1eEUfAE9GdMVb2ScI
QXxARRyWJNg55kfEz29yoXObJwDvNqMSlozEqYsTCbo7gUkhiFcca9oL0wV9ja2n
WB54kiCFgtJjek93yZS6DBACNki5V5/rx3UwG1tPIRmcXhy3mrdfp7jDDBnaiAxQ
GwKUbppNXlfgsUxK7TX82IrWviaxwTWNKc+mTqSt9gqWkWjO/XXXxp4VnWOaTnYZ
tpTqbPWub9fseDs7jpaPz+6HBe04oYIgVL8qg1XC//j0bEBHvfZ/16SU2dVq6Gws
h+5bkmg4yfvLlncuzT2d1B8OayqSGaGlt2rnqqyeWL42lI1O7ci/
-----END CERTIFICATE-----
Generated at Thu Sep 24 04:07:46 2026 by rpki-client