Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/Q8qqkE3sGq5_tEyI3PVhtKVeaQQ.roa
File: Q8qqkE3sGq5_tEyI3PVhtKVeaQQ.roa (raw, json)
Hash identifier: BkCd73oz5cRaHPmyFwOTPb2VJY4uf61F6VeUXU554Y8=
Subject key identifier: 43:CA:AA:90:4D:EC:1A:AE:7F:B4:4C:88:DC:F5:61:B4:A5:5E:69:04
Certificate issuer: /CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Certificate serial: 01A0C89CF587838E50B5C6FD643049C85C16
Authority key identifier: 49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/Q8qqkE3sGq5_tEyI3PVhtKVeaQQ.roa
Signing time: Tue 22 Sep 2026 10:15:24 +0000
ROA not before: Tue 22 Sep 2026 10:15:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 402475
IP address blocks: 2a04:ca80::/29 maxlen: 29
2a0c:b140::/29 maxlen: 29
2a11:2dc0::/29 maxlen: 29
2a12:200::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 26 Sep 2026 15:59:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:c8:9c:f5:87:83:8e:50:b5:c6:fd:64:30:49:c8:5c:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e14bf76f42da4f2ac003a6c69d61c2320e2cd8
Validity
Not Before: Sep 22 10:15:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43caaa904dec1aae7fb44c88dcf561b4a55e6904
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:5a:b4:2a:37:8b:99:75:15:a3:c9:20:75:
86:23:3d:a1:54:1a:cf:0a:33:ab:f6:83:68:38:63:
20:b4:07:e6:37:a9:f0:73:e3:01:6f:38:a7:77:be:
21:f0:82:af:42:91:fe:a3:87:98:d4:93:18:8e:ac:
40:2a:8d:47:72:0d:19:bb:51:a8:2f:62:c5:1a:b7:
1e:82:0b:18:2f:13:f5:de:b7:5e:e9:2c:f6:b0:aa:
9e:b2:b7:d4:de:79:ba:20:da:64:8c:a5:50:a2:14:
2e:cd:4e:f2:55:c1:fd:95:7c:66:4b:0f:4c:a7:66:
8c:e0:3a:af:3a:9c:60:c5:96:71:75:ef:ac:97:ef:
16:c7:76:59:ff:6f:70:9b:de:b1:cd:18:8f:db:ef:
62:6d:16:98:a6:36:f7:00:fb:f9:d8:f7:31:1c:bd:
da:71:52:72:37:00:bc:ab:7a:10:e1:9a:e7:14:8e:
3c:7e:61:63:56:48:f9:d4:19:ec:28:e5:62:d5:9c:
76:d0:3c:9f:20:e1:52:86:ad:0a:db:ff:00:c8:b0:
e0:05:9b:48:25:41:71:95:55:cb:d3:23:1b:f7:32:
d1:9a:b5:94:cd:2e:55:8b:b8:18:30:60:58:f0:f4:
94:18:31:50:17:23:f4:fa:72:0b:2a:28:56:57:51:
47:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:CA:AA:90:4D:EC:1A:AE:7F:B4:4C:88:DC:F5:61:B4:A5:5E:69:04
X509v3 Authority Key Identifier:
keyid:49:E1:4B:F7:6F:42:DA:4F:2A:C0:03:A6:C6:9D:61:C2:32:0E:2C:D8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeFL929C2k8qwAOmxp1hwjIOLNg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/Q8qqkE3sGq5_tEyI3PVhtKVeaQQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/56167f-5327-4c88-b4ea-3beccaae336d/1/SeFL929C2k8qwAOmxp1hwjIOLNg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a04:ca80::/29
2a0c:b140::/29
2a11:2dc0::/29
2a12:200::/29
Signature Algorithm: sha256WithRSAEncryption
12:3d:c9:9c:da:48:a4:1b:87:96:f5:e7:11:a2:fb:54:0f:68:
e5:24:57:7f:17:9e:02:ce:45:51:5d:36:43:aa:71:96:bd:1a:
bd:24:b1:c2:16:da:e9:c2:e1:38:b5:a8:18:4a:39:92:54:e4:
14:2a:18:bd:2c:44:5a:d0:5e:6b:38:31:66:a8:78:7e:bb:75:
76:88:c2:90:dd:b8:09:eb:70:4d:89:45:af:9d:a6:12:f3:11:
3f:1d:0e:96:01:72:b0:d0:fb:d5:3a:05:7a:65:14:42:2b:21:
00:ba:79:54:f6:df:bb:d4:24:48:c7:75:1f:e3:b7:14:04:a3:
bb:f8:0a:1c:f3:41:38:75:28:02:54:d9:c8:b1:18:1c:fd:99:
6d:5f:2a:38:ec:58:86:4c:cf:88:da:f4:1f:77:c8:d8:08:53:
d5:64:c1:97:63:83:76:5d:4c:9a:c4:0b:bb:dc:1d:b4:2d:67:
95:9f:9d:c5:ff:11:65:25:30:09:c0:db:39:78:41:8f:9e:e8:
de:ac:25:ff:0a:bc:e2:c0:a0:63:78:93:9e:1d:3e:7a:4c:9a:
0f:3a:06:f3:a6:37:83:3e:8c:77:6e:f0:4c:3f:6d:58:b0:a2:
2d:1a:10:97:16:45:32:50:73:f3:1d:30:82:f4:5a:2a:e3:56:
f6:77:cc:5d
-----BEGIN CERTIFICATE-----
MIIFEzCCA/ugAwIBAgISAaDInPWHg45Qtcb9ZDBJyFwWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTE0YmY3NmY0MmRhNGYyYWMwMDNhNmM2OWQ2MWMyMzIw
ZTJjZDgwHhcNMjYwOTIyMTAxNTI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2NhYWE5MDRkZWMxYWFlN2ZiNDRjODhkY2Y1NjFiNGE1NWU2OTA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6xatCo3i5l1FaPJIHWGIz2hVBrP
CjOr9oNoOGMgtAfmN6nwc+MBbzind74h8IKvQpH+o4eY1JMYjqxAKo1Hcg0Zu1Go
L2LFGrceggsYLxP13rde6Sz2sKqesrfU3nm6INpkjKVQohQuzU7yVcH9lXxmSw9M
p2aM4DqvOpxgxZZxde+sl+8Wx3ZZ/29wm96xzRiP2+9ibRaYpjb3APv52PcxHL3a
cVJyNwC8q3oQ4ZrnFI48fmFjVkj51BnsKOVi1Zx20DyfIOFShq0K2/8AyLDgBZtI
JUFxlVXL0yMb9zLRmrWUzS5Vi7gYMGBY8PSUGDFQFyP0+nILKihWV1FH3wIDAQAB
o4ICHzCCAhswHQYDVR0OBBYEFEPKqpBN7Bquf7RMiNz1YbSlXmkEMB8GA1UdIwQY
MBaAFEnhS/dvQtpPKsADpsadYcIyDizYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEt
M2JlY2NhYWUzMzZkLzEvUThxcWtFM3NHcTVfdEV5STNQVmh0S1ZlYVFRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC81NjE2N2YtNTMyNy00Yzg4LWI0ZWEtM2JlY2NhYWUzMzZk
LzEvU2VGTDkyOUMyazhxd0FPbXhwMWh3aklPTE5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDUGCCsGAQUFBwEHAQH/BCYwJDAiBAIAAjAcAwUDKgTKgAMF
AyoMsUADBQMqES3AAwUDKhICADANBgkqhkiG9w0BAQsFAAOCAQEAEj3JnNpIpBuH
lvXnEaL7VA9o5SRXfxeeAs5FUV02Q6pxlr0avSSxwhba6cLhOLWoGEo5klTkFCoY
vSxEWtBeazgxZqh4frt1dojCkN24CetwTYlFr52mEvMRPx0OlgFysND71ToFemUU
QishALp5VPbfu9QkSMd1H+O3FASju/gKHPNBOHUoAlTZyLEYHP2ZbV8qOOxYhkzP
iNr0H3fI2AhT1WTBl2ODdl1MmsQLu9wdtC1nlZ+dxf8RZSUwCcDbOXhBj57o3qwl
/wq84sCgY3iTnh0+ekyaDzoG86Y3gz6Md27wTD9tWLCiLRoQlxZFMlBz8x0wgvRa
KuNW9nfMXQ==
-----END CERTIFICATE-----
Generated at Fri Sep 25 23:18:52 2026 by rpki-client