Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/qg_AUns1ULnckQ6SEkH15wSqQPc.roa
File: qg_AUns1ULnckQ6SEkH15wSqQPc.roa (raw, json)
Hash identifier: 2QjfZoa17nRJGkj/6rKQNzT9ZI7PA+FI8cJrxLBYQjU=
Subject key identifier: AA:0F:C0:52:7B:35:50:B9:DC:91:0E:92:12:41:F5:E7:04:AA:40:F7
Certificate issuer: /CN=827603a93bca31b018f511f6d4b0b7546e963362
Certificate serial: 019F894C1C57653AA87643CF633FF9E90B59
Authority key identifier: 82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/qg_AUns1ULnckQ6SEkH15wSqQPc.roa
Signing time: Wed 22 Jul 2026 10:08:14 +0000
ROA not before: Wed 22 Jul 2026 10:08:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200017
IP address blocks: 45.130.77.0/24 maxlen: 24
45.130.78.0/24 maxlen: 24
45.157.182.0/24 maxlen: 24
185.124.241.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:89:4c:1c:57:65:3a:a8:76:43:cf:63:3f:f9:e9:0b:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=827603a93bca31b018f511f6d4b0b7546e963362
Validity
Not Before: Jul 22 10:08:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa0fc0527b3550b9dc910e921241f5e704aa40f7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:83:9e:0f:ec:02:dc:7d:f6:58:43:0f:87:29:
da:49:c3:d7:19:7f:f7:d1:5c:5e:93:60:e6:b0:07:
56:f7:be:4c:f2:69:c2:2c:bd:19:50:35:a1:b3:7a:
0e:d0:89:93:68:35:a6:46:fb:0a:03:3c:5d:47:1a:
7f:2a:24:85:1a:bf:e3:b4:4f:c4:ab:ef:d4:69:36:
c5:67:5b:75:0c:37:f1:bd:62:19:94:98:9d:90:b1:
5c:8e:23:b8:b3:8b:27:29:05:da:0b:75:dc:e4:d2:
8c:d3:f8:bc:dd:62:03:74:f6:d6:13:ab:f5:1d:5c:
a1:e7:af:4b:3a:18:eb:cf:67:b3:eb:48:f7:2b:9d:
b0:8f:3d:54:2b:04:7a:a7:23:df:55:f9:fd:a1:ef:
51:2c:32:cd:ad:bd:f6:a4:9d:60:f8:25:ab:0c:b0:
cc:ba:0b:81:9d:d3:25:0b:7e:24:73:cc:d2:3f:50:
98:59:f0:ae:d3:a6:80:bb:21:07:24:7f:35:93:72:
37:42:f2:82:ac:26:e8:29:c9:04:03:16:86:99:a4:
15:15:24:c2:a1:92:b5:1e:35:65:e2:69:08:10:c1:
be:bd:52:2f:c2:78:d3:88:14:2b:98:b2:26:64:72:
79:45:dd:f5:42:ab:4c:58:4f:a9:83:d0:5c:10:ce:
34:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:0F:C0:52:7B:35:50:B9:DC:91:0E:92:12:41:F5:E7:04:AA:40:F7
X509v3 Authority Key Identifier:
keyid:82:76:03:A9:3B:CA:31:B0:18:F5:11:F6:D4:B0:B7:54:6E:96:33:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/gnYDqTvKMbAY9RH21LC3VG6WM2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/qg_AUns1ULnckQ6SEkH15wSqQPc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/91af66-d394-42fa-a0c6-b16cb4dfadd3/1/gnYDqTvKMbAY9RH21LC3VG6WM2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.130.77.0-45.130.78.255
45.157.182.0/24
185.124.241.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:53:e5:64:47:82:24:01:76:24:2d:81:d6:53:37:2c:9c:2a:
45:09:0d:e3:dd:b8:87:95:7c:af:a7:c1:c2:de:3f:1c:3a:9c:
ba:14:12:17:4a:62:c9:de:7e:e1:b2:65:3a:38:3d:75:97:2c:
6f:e1:01:a0:8c:f4:12:61:62:85:4a:16:bb:aa:85:f2:f7:ca:
b2:d4:ac:da:1c:83:52:ac:d3:5e:3f:91:91:89:cc:99:10:75:
20:35:3b:31:e2:d1:53:6b:ed:a1:10:c2:86:3f:57:92:8d:27:
7a:c3:b8:1c:45:2b:86:95:65:2c:f0:2d:15:65:7c:63:89:71:
8e:d9:27:34:9c:ff:b4:d1:0e:b2:00:45:ad:cd:0e:0f:8b:7e:
48:76:e5:d2:e0:09:4e:ac:2d:8b:d7:9d:21:08:4a:8f:5a:7d:
0f:f9:5f:ad:9f:9f:78:94:b4:6a:f8:52:c7:de:ca:ea:77:c8:
d1:25:a0:38:f5:3d:1a:40:d8:23:8b:84:80:ce:fa:99:7c:b1:
e1:6f:7f:29:65:e3:10:2d:ac:94:3f:d2:27:fa:cc:d8:0f:c2:
91:fb:6c:00:63:e0:2f:0e:8c:1c:2f:43:0b:92:db:62:b5:df:
14:98:28:ac:12:61:e7:e0:29:a8:e9:19:fe:3b:a5:6d:f4:b7:
76:75:24:38
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAZ+JTBxXZTqodkPPYz/56QtZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgyNzYwM2E5M2JjYTMxYjAxOGY1MTFmNmQ0YjBiNzU0NmU5
NjMzNjIwHhcNMjYwNzIyMTAwODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTBmYzA1MjdiMzU1MGI5ZGM5MTBlOTIxMjQxZjVlNzA0YWE0MGY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4OeD+wC3H32WEMPhynaScPXGX/3
0Vxek2DmsAdW975M8mnCLL0ZUDWhs3oO0ImTaDWmRvsKAzxdRxp/KiSFGr/jtE/E
q+/UaTbFZ1t1DDfxvWIZlJidkLFcjiO4s4snKQXaC3Xc5NKM0/i83WIDdPbWE6v1
HVyh569LOhjrz2ez60j3K52wjz1UKwR6pyPfVfn9oe9RLDLNrb32pJ1g+CWrDLDM
uguBndMlC34kc8zSP1CYWfCu06aAuyEHJH81k3I3QvKCrCboKckEAxaGmaQVFSTC
oZK1HjVl4mkIEMG+vVIvwnjTiBQrmLImZHJ5Rd31QqtMWE+pg9BcEM40PwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFKoPwFJ7NVC53JEOkhJB9ecEqkD3MB8GA1UdIwQY
MBaAFIJ2A6k7yjGwGPUR9tSwt1RuljNiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYt
YjE2Y2I0ZGZhZGQzLzEvcWdfQVVuczFVTG5ja1E2U0VrSDE1d1NxUVBjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85MWFmNjYtZDM5NC00MmZhLWEwYzYtYjE2Y2I0ZGZhZGQz
LzEvZ25ZRHFUdktNYkFZOVJIMjFMQzNWRzZXTTJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBAAtgk0D
BAAtgk4DBAAtnbYDBAC5fPEwDQYJKoZIhvcNAQELBQADggEBADtT5WRHgiQBdiQt
gdZTNyycKkUJDePduIeVfK+nwcLePxw6nLoUEhdKYsnefuGyZTo4PXWXLG/hAaCM
9BJhYoVKFruqhfL3yrLUrNocg1Ks014/kZGJzJkQdSA1OzHi0VNr7aEQwoY/V5KN
J3rDuBxFK4aVZSzwLRVlfGOJcY7ZJzSc/7TRDrIARa3NDg+Lfkh25dLgCU6sLYvX
nSEISo9afQ/5X62fn3iUtGr4Usfeyup3yNEloDj1PRpA2COLhIDO+pl8seFvfyll
4xAtrJQ/0if6zNgPwpH7bABj4C8OjBwvQwuS22K13xSYKKwSYefgKajpGf47pW30
t3Z1JDg=
-----END CERTIFICATE-----
Generated at Fri Jul 24 00:41:04 2026 by rpki-client