Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qbwNpo6NHWC9JON8K2tZrBqz9hg.roa
File: qbwNpo6NHWC9JON8K2tZrBqz9hg.roa (raw, json)
Hash identifier: QDFT/1ldJVN56UqJKSUwi9wB4rxw8IL9fazzS1fUb3M=
Subject key identifier: A9:BC:0D:A6:8E:8D:1D:60:BD:24:E3:7C:2B:6B:59:AC:1A:B3:F6:18
Certificate issuer: /CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Certificate serial: 019F66F3E1E6E2D3B8FD41C6E9C57BD38928
Authority key identifier: 35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qbwNpo6NHWC9JON8K2tZrBqz9hg.roa
Signing time: Wed 15 Jul 2026 18:04:46 +0000
ROA not before: Wed 15 Jul 2026 18:04:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 195.58.40.0/22 maxlen: 22
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.mft
rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:66:f3:e1:e6:e2:d3:b8:fd:41:c6:e9:c5:7b:d3:89:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=35690f5e32d5c86af1e1349dfd4e8ceeb70e1ac7
Validity
Not Before: Jul 15 18:04:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9bc0da68e8d1d60bd24e37c2b6b59ac1ab3f618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:19:78:17:3b:4a:4f:44:7f:a7:9d:6e:51:3a:
8c:58:fb:b8:e8:20:7b:d7:e3:9a:7a:ce:4f:62:df:
d9:39:07:5c:9c:b1:ac:a0:8d:0c:68:03:85:a5:6e:
f4:5c:33:ab:a5:e8:b1:85:6c:dd:5e:99:cd:c3:da:
8c:e2:8b:1e:4a:c5:df:d9:a9:b4:4d:5d:26:44:da:
c2:70:42:01:27:95:f2:b9:83:5d:f8:4b:71:eb:f9:
e0:29:28:f8:1c:23:fa:f3:65:9b:eb:a2:b8:ea:7d:
1e:f5:b3:03:ec:a6:7f:c2:2d:ae:8c:db:e2:19:da:
c3:34:d6:a6:3f:3f:f2:a3:25:f4:45:cc:49:17:af:
b4:29:30:c5:df:b3:7b:49:d7:2a:92:e1:3f:39:26:
f7:46:a7:33:3b:5d:e5:a6:7e:c2:66:3e:6e:49:bb:
ed:aa:dd:b7:08:27:ee:8b:27:9f:f2:69:1f:3a:a4:
31:88:a4:05:86:2d:0c:be:d6:72:60:52:36:18:be:
02:d0:5d:35:4a:a6:b0:5a:68:59:d6:35:7b:bd:4c:
bd:ce:6a:56:30:11:67:a3:54:42:5f:21:f9:48:3e:
25:7c:a8:95:d6:08:7c:79:6b:bf:f9:d8:7c:11:2b:
f7:90:90:2c:67:01:fe:1e:29:29:3d:d9:b6:ee:29:
1a:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:BC:0D:A6:8E:8D:1D:60:BD:24:E3:7C:2B:6B:59:AC:1A:B3:F6:18
X509v3 Authority Key Identifier:
keyid:35:69:0F:5E:32:D5:C8:6A:F1:E1:34:9D:FD:4E:8C:EE:B7:0E:1A:C7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NWkPXjLVyGrx4TSd_U6M7rcOGsc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/qbwNpo6NHWC9JON8K2tZrBqz9hg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/00/e1447a-8f18-4a80-a422-5a42428f1143/1/NWkPXjLVyGrx4TSd_U6M7rcOGsc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.58.40.0/22
Signature Algorithm: sha256WithRSAEncryption
22:d1:f5:fc:06:fe:ae:46:60:35:87:aa:11:df:5d:e9:31:dd:
ba:37:bb:e9:7d:8e:fe:01:97:21:89:26:65:0f:28:64:22:5f:
66:d1:20:28:eb:2c:5b:38:d1:77:2f:35:ff:da:a4:a2:b0:1d:
e5:aa:66:be:2f:ba:48:b9:00:08:d4:57:51:b0:dd:2b:5a:02:
1c:87:f9:b1:16:09:8c:e8:63:d7:0e:e9:6b:85:eb:e3:51:5c:
2e:c2:cd:60:62:20:94:e9:dc:17:e3:f9:b7:cb:38:d4:c6:6c:
8a:e8:4c:4b:ea:47:62:04:0e:69:ef:6b:0f:d8:e8:16:6f:52:
ec:88:a4:8c:9a:be:71:3d:42:a0:62:4e:5f:50:c0:d7:d8:64:
bc:7b:90:8e:11:5e:d7:ed:5f:be:b7:dd:bc:f4:f6:54:fb:27:
68:db:7a:69:04:90:84:83:58:4b:25:c4:5c:49:41:d3:49:c7:
8d:de:d0:ef:99:03:dc:c1:5c:3a:47:b1:05:d5:34:46:92:f5:
c8:9f:68:bd:f6:53:ca:78:9f:de:dc:c3:03:9f:e1:ff:54:af:
4d:45:10:80:46:46:7e:6b:ef:93:39:76:db:6f:0f:a1:1a:1b:
e6:a8:49:87:6d:42:db:d1:48:0c:59:a5:ac:84:d3:8e:37:df:
c6:e4:cf:99
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ9m8+Hm4tO4/UHG6cV704koMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM1NjkwZjVlMzJkNWM4NmFmMWUxMzQ5ZGZkNGU4Y2VlYjcw
ZTFhYzcwHhcNMjYwNzE1MTgwNDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWJjMGRhNjhlOGQxZDYwYmQyNGUzN2MyYjZiNTlhYzFhYjNmNjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRl4FztKT0R/p51uUTqMWPu46CB7
1+Oaes5PYt/ZOQdcnLGsoI0MaAOFpW70XDOrpeixhWzdXpnNw9qM4oseSsXf2am0
TV0mRNrCcEIBJ5XyuYNd+Etx6/ngKSj4HCP682Wb66K46n0e9bMD7KZ/wi2ujNvi
GdrDNNamPz/yoyX0RcxJF6+0KTDF37N7SdcqkuE/OSb3RqczO13lpn7CZj5uSbvt
qt23CCfuiyef8mkfOqQxiKQFhi0MvtZyYFI2GL4C0F01SqawWmhZ1jV7vUy9zmpW
MBFno1RCXyH5SD4lfKiV1gh8eWu/+dh8ESv3kJAsZwH+HikpPdm27ika0wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKm8DaaOjR1gvSTjfCtrWawas/YYMB8GA1UdIwQY
MBaAFDVpD14y1chq8eE0nf1OjO63DhrHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjIt
NWE0MjQyOGYxMTQzLzEvcWJ3TnBvNk5IV0M5Sk9OOEsydFpyQnF6OWhnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMC9lMTQ0N2EtOGYxOC00YTgwLWE0MjItNWE0MjQyOGYxMTQz
LzEvTldrUFhqTFZ5R3J4NFRTZF9VNk03cmNPR3NjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwzooMA0G
CSqGSIb3DQEBCwUAA4IBAQAi0fX8Bv6uRmA1h6oR313pMd26N7vpfY7+AZchiSZl
DyhkIl9m0SAo6yxbONF3LzX/2qSisB3lqma+L7pIuQAI1FdRsN0rWgIch/mxFgmM
6GPXDulrhevjUVwuws1gYiCU6dwX4/m3yzjUxmyK6ExL6kdiBA5p72sP2OgWb1Ls
iKSMmr5xPUKgYk5fUMDX2GS8e5COEV7X7V++t9289PZU+ydo23ppBJCEg1hLJcRc
SUHTSceN3tDvmQPcwVw6R7EF1TRGkvXIn2i99lPKeJ/e3MMDn+H/VK9NRRCARkZ+
a++TOXbbbw+hGhvmqEmHbULb0UgMWaWshNOON9/G5M+Z
-----END CERTIFICATE-----
Generated at Sat Jul 18 00:45:17 2026 by rpki-client