Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/QpY8GlKdyrv404vf69KUdzbntpg.roa
File: QpY8GlKdyrv404vf69KUdzbntpg.roa (raw, json)
Hash identifier: F5JQWwCO6Am+cythijf0Eh/pb3RRurkykgfuv0NLjjk=
Subject key identifier: 42:96:3C:1A:52:9D:CA:BB:F8:D3:8B:DF:EB:D2:94:77:36:E7:B6:98
Certificate issuer: /CN=25a89539520004270d34253bdc16d87784156e1a
Certificate serial: 019DB4965FCE2304D514E8D8AC786DAB41A5
Authority key identifier: 25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/QpY8GlKdyrv404vf69KUdzbntpg.roa
Signing time: Wed 22 Apr 2026 09:47:26 +0000
ROA not before: Wed 22 Apr 2026 09:47:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 31.210.148.0/24 maxlen: 24
31.210.149.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.mft
rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 23:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:b4:96:5f:ce:23:04:d5:14:e8:d8:ac:78:6d:ab:41:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=25a89539520004270d34253bdc16d87784156e1a
Validity
Not Before: Apr 22 09:47:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42963c1a529dcabbf8d38bdfebd2947736e7b698
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d8:aa:be:fd:9b:e9:99:b9:77:ce:88:f3:33:
dc:d9:43:e3:7e:a1:c4:57:14:f9:67:bb:3e:97:de:
8e:17:2d:f9:28:df:55:c3:62:0d:ea:80:b2:8f:b5:
6d:17:d4:43:28:1b:57:7c:34:3b:c7:b9:09:af:c8:
7c:5b:4b:35:7a:65:9c:ac:62:3a:d4:b5:c4:17:42:
16:26:77:93:5f:21:51:52:89:e2:7f:11:70:da:0a:
a6:85:4f:e7:fa:60:08:b1:21:3f:cc:8b:2a:36:7a:
d0:e9:48:6d:b4:04:ab:a4:e6:f0:1e:45:32:65:53:
32:e6:13:49:00:06:00:30:09:1d:d8:5c:a7:d9:ec:
e1:36:59:d7:e4:5d:8a:58:8e:76:12:7f:a9:fa:1e:
09:f0:ae:75:83:d5:42:1a:c8:aa:d1:a3:1a:bb:4d:
78:b2:55:0f:39:ca:97:7e:5d:e1:2b:05:b3:3e:5d:
e8:d9:8a:19:f5:51:22:d1:7e:4e:1c:b6:1a:b5:d6:
ba:2a:8c:5f:62:e2:57:88:94:14:5a:e7:bc:29:a6:
77:d1:5d:7a:76:80:60:8e:cc:1d:09:fe:36:7f:5a:
4e:cb:b3:c1:a0:83:ba:78:d9:ad:e5:ee:48:d3:3d:
9c:4d:32:a0:54:75:54:66:4e:59:32:f3:f7:93:e1:
90:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:96:3C:1A:52:9D:CA:BB:F8:D3:8B:DF:EB:D2:94:77:36:E7:B6:98
X509v3 Authority Key Identifier:
keyid:25:A8:95:39:52:00:04:27:0D:34:25:3B:DC:16:D8:77:84:15:6E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/JaiVOVIABCcNNCU73BbYd4QVbho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/QpY8GlKdyrv404vf69KUdzbntpg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/bc15ec-6b0d-4734-a088-d00526b91605/1/JaiVOVIABCcNNCU73BbYd4QVbho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.210.148.0/23
Signature Algorithm: sha256WithRSAEncryption
0e:e6:9b:7a:f1:93:2a:8f:b1:86:70:ef:98:30:81:9d:bd:45:
89:2b:a1:52:2c:94:67:d9:f9:28:20:e1:b5:95:12:ec:de:9b:
02:60:e1:72:d8:72:71:ad:bb:e8:cf:14:c8:a7:fa:55:92:fe:
08:72:24:4b:11:0f:6e:ad:94:e0:3c:00:79:1f:0f:e2:48:d3:
e2:59:55:4c:76:67:ea:9f:7f:70:f8:5f:12:e7:5c:ca:8e:0c:
d8:52:c1:a7:af:b9:b1:f2:ea:9d:26:1a:51:65:29:af:f6:aa:
45:9a:48:0a:27:bd:36:02:94:93:9d:03:ac:d0:8f:88:20:3f:
2a:7c:56:88:81:35:b0:c0:5d:54:74:8a:c1:34:4a:b2:a6:a8:
e3:22:17:c6:22:7c:bc:c2:39:5d:1b:c3:63:68:46:a6:c8:10:
be:81:78:1e:f5:12:4e:68:5a:66:7c:db:05:89:43:83:3e:9d:
52:7d:e6:ad:6d:5a:20:51:2c:77:6f:a9:09:4d:38:d7:47:10:
dd:b0:f4:65:b7:21:e1:56:b7:78:b5:fb:8c:03:2d:df:ab:4c:
e9:70:4c:a0:0e:0a:81:62:c4:19:3a:97:ef:48:a7:65:92:3a:
68:09:9f:93:0b:80:72:44:14:e1:07:8d:9d:9d:b1:af:ce:3e:
e3:6d:dd:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ20ll/OIwTVFOjYrHhtq0GlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI1YTg5NTM5NTIwMDA0MjcwZDM0MjUzYmRjMTZkODc3ODQx
NTZlMWEwHhcNMjYwNDIyMDk0NzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mjk2M2MxYTUyOWRjYWJiZjhkMzhiZGZlYmQyOTQ3NzM2ZTdiNjk4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNiqvv2b6Zm5d86I8zPc2UPjfqHE
VxT5Z7s+l96OFy35KN9Vw2IN6oCyj7VtF9RDKBtXfDQ7x7kJr8h8W0s1emWcrGI6
1LXEF0IWJneTXyFRUonifxFw2gqmhU/n+mAIsSE/zIsqNnrQ6UhttASrpObwHkUy
ZVMy5hNJAAYAMAkd2Fyn2ezhNlnX5F2KWI52En+p+h4J8K51g9VCGsiq0aMau014
slUPOcqXfl3hKwWzPl3o2YoZ9VEi0X5OHLYatda6KoxfYuJXiJQUWue8KaZ30V16
doBgjswdCf42f1pOy7PBoIO6eNmt5e5I0z2cTTKgVHVUZk5ZMvP3k+GQIQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEKWPBpSncq7+NOL3+vSlHc257aYMB8GA1UdIwQY
MBaAFCWolTlSAAQnDTQlO9wW2HeEFW4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmFpVk9WSUFCQ2NOTkNVNzNCYllkNFFWYmhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9iYzE1ZWMtNmIwZC00NzM0LWEwODgt
ZDAwNTI2YjkxNjA1LzEvUXBZOEdsS2R5cnY0MDR2ZjY5S1VkemJudHBnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9iYzE1ZWMtNmIwZC00NzM0LWEwODgtZDAwNTI2YjkxNjA1
LzEvSmFpVk9WSUFCQ2NOTkNVNzNCYllkNFFWYmhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBH9KUMA0G
CSqGSIb3DQEBCwUAA4IBAQAO5pt68ZMqj7GGcO+YMIGdvUWJK6FSLJRn2fkoIOG1
lRLs3psCYOFy2HJxrbvozxTIp/pVkv4IciRLEQ9urZTgPAB5Hw/iSNPiWVVMdmfq
n39w+F8S51zKjgzYUsGnr7mx8uqdJhpRZSmv9qpFmkgKJ702ApSTnQOs0I+IID8q
fFaIgTWwwF1UdIrBNEqypqjjIhfGIny8wjldG8NjaEamyBC+gXge9RJOaFpmfNsF
iUODPp1SfeatbVogUSx3b6kJTTjXRxDdsPRltyHhVrd4tfuMAy3fq0zpcEygDgqB
YsQZOpfvSKdlkjpoCZ+TC4ByRBThB42dnbGvzj7jbd1c
-----END CERTIFICATE-----
Generated at Wed May 13 05:14:39 2026 by rpki-client