Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/q5EALy9DnhoZyrXHjyN4MFOeg18.roa
File: q5EALy9DnhoZyrXHjyN4MFOeg18.roa (raw, json)
Hash identifier: VQnvjJRY8SQf//eG7sSpW7y6E7fkB1w8TmcEnNpbkZ8=
Subject key identifier: AB:91:00:2F:2F:43:9E:1A:19:CA:B5:C7:8F:23:78:30:53:9E:83:5F
Certificate issuer: /CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Certificate serial: 019F833FF33284860240A0AAF59575B48DAE
Authority key identifier: 3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/q5EALy9DnhoZyrXHjyN4MFOeg18.roa
Signing time: Tue 21 Jul 2026 05:57:14 +0000
ROA not before: Tue 21 Jul 2026 05:57:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396982
IP address blocks: 2a14:4b41:1320::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 14:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:83:3f:f3:32:84:86:02:40:a0:aa:f5:95:75:b4:8d:ae
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3a3ea33aea8b38427f2bcef5ed4c21423a2a9d64
Validity
Not Before: Jul 21 05:57:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab91002f2f439e1a19cab5c78f237830539e835f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:de:bc:19:32:28:4b:ab:90:b8:61:a1:7b:0f:
d1:ef:c6:2f:ed:9c:c4:fa:6f:73:60:2b:e4:cc:53:
9f:f0:18:30:99:ca:c6:55:df:53:84:bf:b7:2d:bc:
3a:d9:e9:4a:8e:35:b4:a6:65:6d:44:bb:e0:f9:b5:
ae:74:a5:7d:10:d4:f1:69:e8:3b:27:e9:82:e1:fe:
1e:31:26:59:c4:cb:bc:11:84:73:14:44:56:5c:11:
9e:3a:36:0b:bb:8d:41:48:71:32:91:d9:d3:b8:46:
18:26:ec:b2:12:67:ae:cb:4d:c9:b0:6a:21:bd:15:
66:37:3b:fd:96:a1:b9:07:94:cd:aa:c2:6a:a1:c9:
fc:fc:5d:c9:07:50:14:10:51:1f:3b:34:cc:7c:aa:
4f:40:60:8c:a5:7c:c7:4c:78:21:e2:96:4f:08:48:
0c:09:a1:1d:79:38:90:79:51:b0:fe:33:89:ca:3b:
70:1d:c2:1b:75:30:d0:e8:ce:4c:3a:c0:e9:71:15:
ae:4d:83:56:41:9a:d0:07:ef:fb:5e:b3:0c:a0:72:
2d:c9:5d:62:9d:2d:42:1c:85:8f:a3:32:e1:e9:98:
30:2e:45:a5:cf:32:7c:72:97:28:74:8e:cb:f2:cc:
32:14:7e:b9:42:11:44:a2:6a:a7:3c:a2:c4:90:ca:
91:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:91:00:2F:2F:43:9E:1A:19:CA:B5:C7:8F:23:78:30:53:9E:83:5F
X509v3 Authority Key Identifier:
keyid:3A:3E:A3:3A:EA:8B:38:42:7F:2B:CE:F5:ED:4C:21:42:3A:2A:9D:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/q5EALy9DnhoZyrXHjyN4MFOeg18.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/067b07-5eb6-43f1-86ff-1d67c324501f/1/Oj6jOuqLOEJ_K8717UwhQjoqnWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a14:4b41:1320::/48
Signature Algorithm: sha256WithRSAEncryption
15:6b:70:4b:f4:bf:22:6d:8a:5e:0e:e7:13:00:80:eb:e0:ac:
4a:b6:33:fc:83:33:ad:cf:0b:b2:b7:a9:2f:16:a5:65:a7:14:
a3:64:87:b4:fb:f3:4b:0a:41:bc:2f:d9:61:9d:1b:64:f6:81:
c4:cc:c5:53:af:7b:16:ce:b6:b1:4f:4a:54:c2:4a:42:35:5a:
66:14:f9:44:ab:15:0b:09:8f:a3:50:a7:30:cf:f9:49:35:94:
34:d3:6e:b2:b6:ad:a4:2f:ed:2e:da:87:6e:9d:58:ad:e9:be:
2f:dd:e5:f9:21:ae:aa:4a:2e:4c:10:36:b2:6c:86:33:3d:3f:
b2:33:8e:06:f1:99:83:db:c6:6f:7c:ee:91:b6:fb:fc:78:ca:
2d:ef:3d:e8:e6:13:ce:c7:a6:c1:8c:64:e6:04:08:d1:90:fd:
e7:0e:ba:8b:fb:98:e8:7c:aa:88:3e:9b:3b:4c:b9:68:62:90:
85:e7:f4:50:43:82:36:03:90:a0:51:1f:1b:82:8f:03:a9:45:
81:dc:43:6e:45:43:a6:bf:9f:af:9b:05:6f:d9:05:de:e4:f7:
f8:84:57:48:9d:0d:b3:6f:0b:63:99:5f:71:0f:e4:18:be:77:
9e:74:cd:81:c7:79:c0:d6:01:f9:38:cc:29:51:26:d2:2d:28:
32:56:b1:a8
-----BEGIN CERTIFICATE-----
MIIFADCCA+igAwIBAgISAZ+DP/MyhIYCQKCq9ZV1tI2uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNhM2VhMzNhZWE4YjM4NDI3ZjJiY2VmNWVkNGMyMTQyM2Ey
YTlkNjQwHhcNMjYwNzIxMDU1NzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjkxMDAyZjJmNDM5ZTFhMTljYWI1Yzc4ZjIzNzgzMDUzOWU4MzVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApd68GTIoS6uQuGGhew/R78Yv7ZzE
+m9zYCvkzFOf8BgwmcrGVd9ThL+3Lbw62elKjjW0pmVtRLvg+bWudKV9ENTxaeg7
J+mC4f4eMSZZxMu8EYRzFERWXBGeOjYLu41BSHEykdnTuEYYJuyyEmeuy03JsGoh
vRVmNzv9lqG5B5TNqsJqocn8/F3JB1AUEFEfOzTMfKpPQGCMpXzHTHgh4pZPCEgM
CaEdeTiQeVGw/jOJyjtwHcIbdTDQ6M5MOsDpcRWuTYNWQZrQB+/7XrMMoHItyV1i
nS1CHIWPozLh6ZgwLkWlzzJ8cpcodI7L8swyFH65QhFEomqnPKLEkMqR6QIDAQAB
o4ICDDCCAggwHQYDVR0OBBYEFKuRAC8vQ54aGcq1x48jeDBTnoNfMB8GA1UdIwQY
MBaAFDo+ozrqizhCfyvO9e1MIUI6Kp1kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvT2o2ak91cUxPRUpfSzg3MTdVd2hRam9xbldRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8wNjdiMDctNWViNi00M2YxLTg2ZmYt
MWQ2N2MzMjQ1MDFmLzEvcTVFQUx5OURuaG9aeXJYSGp5TjRNRk9lZzE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8wNjdiMDctNWViNi00M2YxLTg2ZmYtMWQ2N2MzMjQ1MDFm
LzEvT2o2ak91cUxPRUpfSzg3MTdVd2hRam9xbldRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCIGCCsGAQUFBwEHAQH/BBMwETAPBAIAAjAJAwcAKhRLQRMg
MA0GCSqGSIb3DQEBCwUAA4IBAQAVa3BL9L8ibYpeDucTAIDr4KxKtjP8gzOtzwuy
t6kvFqVlpxSjZIe0+/NLCkG8L9lhnRtk9oHEzMVTr3sWzraxT0pUwkpCNVpmFPlE
qxULCY+jUKcwz/lJNZQ0026ytq2kL+0u2odunVit6b4v3eX5Ia6qSi5MEDaybIYz
PT+yM44G8ZmD28ZvfO6Rtvv8eMot7z3o5hPOx6bBjGTmBAjRkP3nDrqL+5jofKqI
Pps7TLloYpCF5/RQQ4I2A5CgUR8bgo8DqUWB3ENuRUOmv5+vmwVv2QXe5Pf4hFdI
nQ2zbwtjmV9xD+QYvneedM2Bx3nA1gH5OMwpUSbSLSgyVrGo
-----END CERTIFICATE-----
Generated at Tue Jul 21 15:54:11 2026 by rpki-client