Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/QAq5GlfcCx2uicmV2oYykBZI8X0.roa
File: QAq5GlfcCx2uicmV2oYykBZI8X0.roa (raw, json)
Hash identifier: RYaoRoccHB52OTwDIZC5zlhORRPz3CEswpwYiOVL8sQ=
Subject key identifier: 40:0A:B9:1A:57:DC:0B:1D:AE:89:C9:95:DA:86:32:90:16:48:F1:7D
Certificate issuer: /CN=756127c6cd4e35d98f0a4ba362ce273164971942
Certificate serial: 019F2368F91E83E445701D8D339DC73E788E
Authority key identifier: 75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/QAq5GlfcCx2uicmV2oYykBZI8X0.roa
Signing time: Thu 02 Jul 2026 15:18:29 +0000
ROA not before: Thu 02 Jul 2026 15:18:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197968
IP address blocks: 45.135.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.mft
rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 16:41:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:f9:1e:83:e4:45:70:1d:8d:33:9d:c7:3e:78:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=756127c6cd4e35d98f0a4ba362ce273164971942
Validity
Not Before: Jul 2 15:18:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=400ab91a57dc0b1dae89c995da8632901648f17d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:c1:80:f5:ae:13:55:93:8d:74:73:e4:de:4d:
41:96:54:da:6e:e6:f5:24:b2:38:b0:9e:a3:f4:ba:
d0:92:d5:08:22:4b:7e:29:6b:bc:16:74:7d:2a:a4:
5b:02:92:49:7a:73:ae:7d:cd:46:da:22:29:a2:b9:
b0:13:83:77:b2:b9:44:b2:2f:af:bd:93:db:0a:3d:
9d:aa:ee:24:3c:31:63:8b:20:a9:fd:a8:7e:43:d2:
29:c9:6c:80:12:1c:4f:6a:34:21:8b:96:4c:e6:b2:
79:eb:c3:0a:e2:98:1b:6f:7c:28:55:ec:d9:bf:bd:
84:f2:f8:d5:df:c7:18:2e:6f:98:62:0a:68:ba:a2:
3a:b1:65:09:d6:dc:0c:15:38:d2:63:15:e1:21:bf:
1e:b9:a1:87:33:b1:e9:e3:48:b5:b0:92:a0:77:4d:
41:d1:50:c2:b6:d4:73:77:c5:77:1c:a6:ac:27:d5:
aa:4e:95:4b:35:63:75:c2:38:34:91:96:51:9f:a0:
f6:53:dd:37:48:6c:de:67:6c:85:7a:01:f9:a5:77:
8f:a1:0c:6c:35:89:eb:b7:93:40:19:d4:95:55:4b:
65:ac:2e:9d:3e:18:21:eb:2a:a8:32:5c:3f:7b:5e:
b5:9e:1a:1d:b9:68:f1:b5:30:b3:0c:9e:19:4b:ba:
b1:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:0A:B9:1A:57:DC:0B:1D:AE:89:C9:95:DA:86:32:90:16:48:F1:7D
X509v3 Authority Key Identifier:
keyid:75:61:27:C6:CD:4E:35:D9:8F:0A:4B:A3:62:CE:27:31:64:97:19:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dWEnxs1ONdmPCkujYs4nMWSXGUI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/QAq5GlfcCx2uicmV2oYykBZI8X0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/3465f3-03c2-4eaa-a674-8862b517317c/1/dWEnxs1ONdmPCkujYs4nMWSXGUI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.135.215.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:dd:36:c2:57:44:3a:f8:50:87:d8:50:e9:eb:dc:34:60:4f:
7c:e8:8b:82:b0:01:79:e2:b0:5e:e7:ec:15:51:61:8d:70:3d:
04:25:52:00:30:8e:84:41:c6:f1:ea:ed:29:3b:b4:5c:0b:97:
c1:dc:9e:11:a3:f8:55:b8:94:9d:c1:11:a7:58:69:0e:ef:3b:
90:36:a2:bf:68:02:16:9a:b0:f9:56:cc:cd:10:ee:2a:50:de:
59:36:5c:82:c6:be:35:16:01:62:4e:bf:e4:64:0f:30:ae:3f:
ac:64:e3:59:cd:26:f1:74:3d:ce:42:61:c7:f6:7f:10:1a:81:
f5:23:eb:d9:0c:41:33:ba:b8:f2:eb:07:99:aa:4b:c1:c7:fc:
a0:dd:61:bc:36:8b:e6:6e:be:6f:0f:c5:9c:e6:f5:19:b1:2b:
c0:da:29:20:a9:bb:83:74:6e:fc:8c:bf:85:a2:86:2d:84:b8:
f2:b0:80:e6:8c:7d:ed:fe:b7:93:43:ed:70:c0:9c:6c:b6:a0:
ac:b3:c3:f6:f9:0e:bb:c2:f0:e5:7c:bc:e8:f1:37:d5:98:bd:
b4:31:2d:a2:a8:43:84:b3:29:2d:20:54:b7:ba:29:4a:1a:80:
ec:65:e5:5e:e9:3e:7a:7c:92:a2:91:2f:b3:f8:45:53:20:39:
b6:26:37:e8
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaPkeg+RFcB2NM53HPniOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1NjEyN2M2Y2Q0ZTM1ZDk4ZjBhNGJhMzYyY2UyNzMxNjQ5
NzE5NDIwHhcNMjYwNzAyMTUxODI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDBhYjkxYTU3ZGMwYjFkYWU4OWM5OTVkYTg2MzI5MDE2NDhmMTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiMGA9a4TVZONdHPk3k1BllTabub1
JLI4sJ6j9LrQktUIIkt+KWu8FnR9KqRbApJJenOufc1G2iIpormwE4N3srlEsi+v
vZPbCj2dqu4kPDFjiyCp/ah+Q9IpyWyAEhxPajQhi5ZM5rJ568MK4pgbb3woVezZ
v72E8vjV38cYLm+YYgpouqI6sWUJ1twMFTjSYxXhIb8euaGHM7Hp40i1sJKgd01B
0VDCttRzd8V3HKasJ9WqTpVLNWN1wjg0kZZRn6D2U903SGzeZ2yFegH5pXePoQxs
NYnrt5NAGdSVVUtlrC6dPhgh6yqoMlw/e161nhoduWjxtTCzDJ4ZS7qxbQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEAKuRpX3AsdronJldqGMpAWSPF9MB8GA1UdIwQY
MBaAFHVhJ8bNTjXZjwpLo2LOJzFklxlCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQt
ODg2MmI1MTczMTdjLzEvUUFxNUdsZmNDeDJ1aWNtVjJvWXlrQlpJOFgwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8zNDY1ZjMtMDNjMi00ZWFhLWE2NzQtODg2MmI1MTczMTdj
LzEvZFdFbnhzMU9OZG1QQ2t1allzNG5NV1NYR1VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALYfXMA0G
CSqGSIb3DQEBCwUAA4IBAQBc3TbCV0Q6+FCH2FDp69w0YE986IuCsAF54rBe5+wV
UWGNcD0EJVIAMI6EQcbx6u0pO7RcC5fB3J4Ro/hVuJSdwRGnWGkO7zuQNqK/aAIW
mrD5VszNEO4qUN5ZNlyCxr41FgFiTr/kZA8wrj+sZONZzSbxdD3OQmHH9n8QGoH1
I+vZDEEzurjy6weZqkvBx/yg3WG8Novmbr5vD8Wc5vUZsSvA2ikgqbuDdG78jL+F
ooYthLjysIDmjH3t/reTQ+1wwJxstqCss8P2+Q67wvDlfLzo8TfVmL20MS2iqEOE
syktIFS3uilKGoDsZeVe6T56fJKikS+z+EVTIDm2Jjfo
-----END CERTIFICATE-----
Generated at Fri Jul 24 20:46:08 2026 by rpki-client