Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/PQIndNBPhUHcFJTYcUMrCvxz4-c.roa
File: PQIndNBPhUHcFJTYcUMrCvxz4-c.roa (raw, json)
Hash identifier: XR6KIi/5N9W2LcPOtGecqXCju8ze0aaqWYIJi9fNKa8=
Subject key identifier: 3D:02:27:74:D0:4F:85:41:DC:14:94:D8:71:43:2B:0A:FC:73:E3:E7
Certificate issuer: /CN=0653fb3e56d34815dfab4a472ce43e1f05cddef0
Certificate serial: 019DC6F878FEA9DCA84C28D685D189CE494D
Authority key identifier: 06:53:FB:3E:56:D3:48:15:DF:AB:4A:47:2C:E4:3E:1F:05:CD:DE:F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/PQIndNBPhUHcFJTYcUMrCvxz4-c.roa
Signing time: Sat 25 Apr 2026 23:27:45 +0000
ROA not before: Sat 25 Apr 2026 23:27:45 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206245
IP address blocks: 185.192.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.mft
rsync://rpki.ripe.net/repository/DEFAULT/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 May 2026 20:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:c6:f8:78:fe:a9:dc:a8:4c:28:d6:85:d1:89:ce:49:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0653fb3e56d34815dfab4a472ce43e1f05cddef0
Validity
Not Before: Apr 25 23:27:45 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d022774d04f8541dc1494d871432b0afc73e3e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:17:1e:84:be:dd:d4:2a:42:a3:d8:e2:9c:
ab:9d:0d:95:b3:66:66:e7:f7:52:da:65:6e:1e:f4:
b2:f0:a7:2d:a7:6e:0a:be:68:3a:e1:9f:52:3a:16:
59:f8:f3:1b:28:05:b5:7c:8a:df:4a:e0:08:24:2b:
ac:7d:24:65:ac:70:b9:c3:74:22:04:17:bb:44:6e:
89:81:40:be:b8:dc:fd:51:34:05:4a:ff:63:19:b4:
ef:26:9e:c3:c8:9e:20:56:12:fd:c1:b1:df:8b:51:
22:f1:13:c0:b8:75:76:43:00:14:04:73:4d:e6:b1:
f7:b6:dd:e9:8f:bc:ff:79:83:ac:8f:52:17:cd:70:
ee:0d:db:6f:93:c8:9f:8f:0f:ff:2f:27:1c:75:0f:
aa:14:24:ac:09:00:0d:f0:ef:9a:2a:72:be:cd:9c:
0d:d0:d4:99:a2:de:ee:a1:23:99:c0:cd:c1:6d:91:
ff:ed:c7:a1:a0:92:44:10:71:78:0a:59:bb:43:d8:
43:45:6e:ca:ba:ba:58:86:c4:3e:5f:2b:a9:15:26:
5f:52:31:be:81:39:53:97:06:99:17:55:4c:b6:fd:
7b:cf:fa:4d:b6:c9:6b:93:fb:f2:c6:83:fc:20:84:
0d:b1:69:07:47:ea:dd:aa:8d:4a:ab:07:b0:57:f1:
ac:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:02:27:74:D0:4F:85:41:DC:14:94:D8:71:43:2B:0A:FC:73:E3:E7
X509v3 Authority Key Identifier:
keyid:06:53:FB:3E:56:D3:48:15:DF:AB:4A:47:2C:E4:3E:1F:05:CD:DE:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/PQIndNBPhUHcFJTYcUMrCvxz4-c.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/ff9c57-81f2-4654-a257-7522c9daf378/1/BlP7PlbTSBXfq0pHLOQ-HwXN3vA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.192.40.0/22
Signature Algorithm: sha256WithRSAEncryption
e3:db:8e:d9:60:4e:7d:8c:35:57:d2:65:d1:03:33:65:a7:d7:
67:81:b4:48:56:3f:92:27:c1:3c:ad:ac:5c:2a:da:b6:57:db:
ca:2d:01:c9:16:25:dd:9b:b2:a9:a2:2c:02:dc:d5:b3:d5:b4:
33:65:73:d4:d7:0f:c7:e1:8d:48:2d:71:2c:79:e5:b2:f4:d2:
a1:a6:5a:47:d0:9a:5c:5d:90:7f:c2:3b:54:59:04:82:1a:62:
84:d2:ec:8f:60:12:6c:44:0c:c4:a9:36:ef:78:a5:12:ed:65:
67:be:19:8e:92:d1:04:39:9d:a9:74:5b:f3:39:7f:1e:cb:72:
6f:d1:b1:a1:da:b7:0b:d2:bc:85:fa:0e:9e:27:c2:1a:3e:79:
a8:73:bf:f4:c3:7e:5b:b0:8a:97:cf:3b:c4:23:2d:d2:b2:e0:
a5:38:55:7f:47:9f:f9:b6:e0:a2:cc:7f:f2:c1:5e:23:c7:9c:
59:fb:9b:53:5b:c6:71:ce:b1:47:06:4d:81:42:8e:4f:84:79:
48:21:f7:e8:34:14:a5:31:36:96:ba:86:e7:a9:88:41:2d:84:
0a:6a:98:30:bc:38:75:dd:81:79:04:dc:42:3f:79:05:4a:d3:
43:8a:7a:b4:be:a3:79:7b:54:40:e7:0d:1b:07:2f:bf:3b:c0:
ee:b1:55:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3G+Hj+qdyoTCjWhdGJzklNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA2NTNmYjNlNTZkMzQ4MTVkZmFiNGE0NzJjZTQzZTFmMDVj
ZGRlZjAwHhcNMjYwNDI1MjMyNzQ1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDAyMjc3NGQwNGY4NTQxZGMxNDk0ZDg3MTQzMmIwYWZjNzNlM2U3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRwXHoS+3dQqQqPY4pyrnQ2Vs2Zm
5/dS2mVuHvSy8Kctp24Kvmg64Z9SOhZZ+PMbKAW1fIrfSuAIJCusfSRlrHC5w3Qi
BBe7RG6JgUC+uNz9UTQFSv9jGbTvJp7DyJ4gVhL9wbHfi1Ei8RPAuHV2QwAUBHNN
5rH3tt3pj7z/eYOsj1IXzXDuDdtvk8ifjw//LyccdQ+qFCSsCQAN8O+aKnK+zZwN
0NSZot7uoSOZwM3BbZH/7cehoJJEEHF4Clm7Q9hDRW7KurpYhsQ+XyupFSZfUjG+
gTlTlwaZF1VMtv17z/pNtslrk/vyxoP8IIQNsWkHR+rdqo1KqwewV/GsnwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD0CJ3TQT4VB3BSU2HFDKwr8c+PnMB8GA1UdIwQY
MBaAFAZT+z5W00gV36tKRyzkPh8Fzd7wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQmxQN1BsYlRTQlhmcTBwSExPUS1Id1hOM3ZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOS9mZjljNTctODFmMi00NjU0LWEyNTct
NzUyMmM5ZGFmMzc4LzEvUFFJbmROQlBoVUhjRkpUWWNVTXJDdnh6NC1jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOS9mZjljNTctODFmMi00NjU0LWEyNTctNzUyMmM5ZGFmMzc4
LzEvQmxQN1BsYlRTQlhmcTBwSExPUS1Id1hOM3ZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCucAoMA0G
CSqGSIb3DQEBCwUAA4IBAQDj247ZYE59jDVX0mXRAzNlp9dngbRIVj+SJ8E8raxc
Ktq2V9vKLQHJFiXdm7KpoiwC3NWz1bQzZXPU1w/H4Y1ILXEseeWy9NKhplpH0Jpc
XZB/wjtUWQSCGmKE0uyPYBJsRAzEqTbveKUS7WVnvhmOktEEOZ2pdFvzOX8ey3Jv
0bGh2rcL0ryF+g6eJ8IaPnmoc7/0w35bsIqXzzvEIy3SsuClOFV/R5/5tuCizH/y
wV4jx5xZ+5tTW8ZxzrFHBk2BQo5PhHlIIffoNBSlMTaWuobnqYhBLYQKapgwvDh1
3YF5BNxCP3kFStNDinq0vqN5e1RA5w0bBy+/O8DusVXM
-----END CERTIFICATE-----
Generated at Wed May 13 05:56:03 2026 by rpki-client