Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/QiN9rG_Ysuf7jDr6rlJvaZKS1SY.roa
File: QiN9rG_Ysuf7jDr6rlJvaZKS1SY.roa (raw, json)
Hash identifier: CVle1wefvKSXiK7/zejKSn/++K6IZllecq4TO7iTCZg=
Subject key identifier: 42:23:7D:AC:6F:D8:B2:E7:FB:8C:3A:FA:AE:52:6F:69:92:92:D5:26
Certificate issuer: /CN=cb1ca3c1dd8a552e367a49a0219906972294a67c
Certificate serial: 019F23692965345D837F4D3177877BEB9B4C
Authority key identifier: CB:1C:A3:C1:DD:8A:55:2E:36:7A:49:A0:21:99:06:97:22:94:A6:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/QiN9rG_Ysuf7jDr6rlJvaZKS1SY.roa
Signing time: Thu 02 Jul 2026 15:18:42 +0000
ROA not before: Thu 02 Jul 2026 15:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3209
IP address blocks: 2a09:c580:1611::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:29:65:34:5d:83:7f:4d:31:77:87:7b:eb:9b:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=cb1ca3c1dd8a552e367a49a0219906972294a67c
Validity
Not Before: Jul 2 15:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42237dac6fd8b2e7fb8c3afaae526f699292d526
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:e1:75:26:48:a0:16:f6:4c:31:90:f0:9e:b3:
db:d1:43:f9:b4:c5:2c:c0:3c:36:c8:86:cf:c1:ae:
6b:66:19:cc:be:b8:5c:f7:62:d1:43:a6:2d:e9:4c:
74:f4:b5:00:9b:f3:28:12:0b:f0:fd:4f:34:6c:62:
a2:6b:84:72:49:ff:fd:48:4e:a3:fc:de:bb:c3:a2:
8a:a1:c2:27:a1:19:e8:81:5b:ae:a5:2b:80:e6:d9:
a9:fd:30:4d:40:18:e9:d0:09:b1:16:cd:ed:94:b4:
14:17:d6:1a:41:ac:cf:1a:a5:89:43:8a:1b:9a:d5:
37:1e:c4:03:91:06:5f:1c:ca:54:be:af:ec:8a:22:
d6:ea:66:f4:6d:4d:6c:1f:14:f2:fc:f8:04:6e:8f:
ed:28:46:99:97:89:b8:25:e2:df:1b:8d:45:04:34:
a7:ea:39:db:b9:08:6f:57:83:b7:6c:fd:e2:bb:1e:
fe:5f:49:d9:5e:3f:95:5c:e5:24:7b:79:f8:d7:60:
e1:31:3d:ec:62:87:fc:cf:a8:b9:0e:04:ad:e0:f1:
ce:76:47:da:65:b6:19:b9:8c:7d:6a:27:84:5c:22:
b3:82:0e:10:66:38:74:a3:ca:6c:9a:a0:c1:b3:56:
70:6c:93:de:68:48:c2:1a:7c:51:24:97:6b:c0:7f:
17:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:23:7D:AC:6F:D8:B2:E7:FB:8C:3A:FA:AE:52:6F:69:92:92:D5:26
X509v3 Authority Key Identifier:
keyid:CB:1C:A3:C1:DD:8A:55:2E:36:7A:49:A0:21:99:06:97:22:94:A6:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/yxyjwd2KVS42ekmgIZkGlyKUpnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/QiN9rG_Ysuf7jDr6rlJvaZKS1SY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/979bdb-01a3-4d17-8746-fe44772d5ae1/1/yxyjwd2KVS42ekmgIZkGlyKUpnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a09:c580:1611::/48
Signature Algorithm: sha256WithRSAEncryption
5e:53:51:a3:1c:4c:b9:74:7a:99:bf:cd:1c:a0:38:18:8f:78:
b0:a3:2e:ba:60:6c:81:7f:9d:44:aa:94:ab:02:df:7c:ac:1c:
fd:5e:a0:cb:51:4c:78:1e:16:09:0a:aa:4c:a0:c5:e5:2f:de:
13:41:8d:74:b5:a6:e8:75:d1:31:3b:a8:3f:c6:cd:e4:3f:dd:
8b:ed:bc:01:f8:c0:f3:b3:93:d2:62:df:b8:e6:c5:df:0a:50:
a0:0a:43:9b:36:4f:46:67:e0:58:49:41:de:6b:e6:69:47:4e:
8e:04:69:b3:e7:7f:50:15:11:89:13:af:ae:3a:03:e3:17:98:
77:4f:ee:cf:fb:99:ee:2f:58:cf:7c:80:1c:2e:1d:d8:48:3d:
ae:af:ad:63:7a:fe:d1:3a:9f:93:73:36:ed:34:f4:28:d6:4e:
33:e2:22:83:ae:72:67:f7:ec:5a:88:79:9b:26:af:29:b1:89:
dd:5a:e9:1e:fc:9f:41:be:dc:c6:d9:30:c0:43:b2:fc:fe:7f:
e0:60:97:61:e2:69:db:38:56:69:21:38:55:fc:28:c2:86:c0:
10:7c:96:2d:06:a1:03:91:cf:80:df:65:9d:51:54:41:8b:90:
30:1a:33:6a:c0:76:78:d9:75:9b:d1:fa:65:bf:ac:a7:1a:28:
c4:54:35:87
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ8jaSllNF2Df00xd4d765tMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGNiMWNhM2MxZGQ4YTU1MmUzNjdhNDlhMDIxOTkwNjk3MjI5
NGE2N2MwHhcNMjYwNzAyMTUxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjIzN2RhYzZmZDhiMmU3ZmI4YzNhZmFhZTUyNmY2OTkyOTJkNTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzuF1JkigFvZMMZDwnrPb0UP5tMUs
wDw2yIbPwa5rZhnMvrhc92LRQ6Yt6Ux09LUAm/MoEgvw/U80bGKia4RySf/9SE6j
/N67w6KKocInoRnogVuupSuA5tmp/TBNQBjp0AmxFs3tlLQUF9YaQazPGqWJQ4ob
mtU3HsQDkQZfHMpUvq/siiLW6mb0bU1sHxTy/PgEbo/tKEaZl4m4JeLfG41FBDSn
6jnbuQhvV4O3bP3iux7+X0nZXj+VXOUke3n412DhMT3sYof8z6i5DgSt4PHOdkfa
ZbYZuYx9aieEXCKzgg4QZjh0o8psmqDBs1ZwbJPeaEjCGnxRJJdrwH8X1wIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFEIjfaxv2LLn+4w6+q5Sb2mSktUmMB8GA1UdIwQY
MBaAFMsco8HdilUuNnpJoCGZBpcilKZ8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveXh5andkMktWUzQyZWttZ0laa0dseUtVcG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYt
ZmU0NDc3MmQ1YWUxLzEvUWlOOXJHX1lzdWY3akRyNnJsSnZhWktTMVNZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS85NzliZGItMDFhMy00ZDE3LTg3NDYtZmU0NDc3MmQ1YWUx
LzEveXh5andkMktWUzQyZWttZ0laa0dseUtVcG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKgnFgBYR
MA0GCSqGSIb3DQEBCwUAA4IBAQBeU1GjHEy5dHqZv80coDgYj3iwoy66YGyBf51E
qpSrAt98rBz9XqDLUUx4HhYJCqpMoMXlL94TQY10taboddExO6g/xs3kP92L7bwB
+MDzs5PSYt+45sXfClCgCkObNk9GZ+BYSUHea+ZpR06OBGmz539QFRGJE6+uOgPj
F5h3T+7P+5nuL1jPfIAcLh3YSD2ur61jev7ROp+TczbtNPQo1k4z4iKDrnJn9+xa
iHmbJq8psYndWuke/J9BvtzG2TDAQ7L8/n/gYJdh4mnbOFZpIThV/CjChsAQfJYt
BqEDkc+A32WdUVRBi5AwGjNqwHZ42XWb0fplv6ynGijEVDWH
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:50:43 2026 by rpki-client