Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/qer8Zm5yFDRsKBjiojQKDvqBOU8.roa
File: qer8Zm5yFDRsKBjiojQKDvqBOU8.roa (raw, json)
Hash identifier: pOy4lGKfW8ltvH5pq/Bt4gPO6i5YRekWUnGvqHc6LFc=
Subject key identifier: A9:EA:FC:66:6E:72:14:34:6C:28:18:E2:A2:34:0A:0E:FA:81:39:4F
Certificate issuer: /CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Certificate serial: 019F92912821DE0E7D6814A32C740C8EF4B9
Authority key identifier: F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/qer8Zm5yFDRsKBjiojQKDvqBOU8.roa
Signing time: Fri 24 Jul 2026 05:20:14 +0000
ROA not before: Fri 24 Jul 2026 05:20:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49556
IP address blocks: 109.70.78.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 20:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:92:91:28:21:de:0e:7d:68:14:a3:2c:74:0c:8e:f4:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57d9c8ffc204b6dbde01205303bdf8b50638aa6
Validity
Not Before: Jul 24 05:20:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9eafc666e7214346c2818e2a2340a0efa81394f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:9c:b5:91:88:58:02:a5:cc:9d:1a:46:ce:7e:
e4:b1:cf:05:32:13:c0:0f:8e:c1:cd:9c:8d:7c:e4:
1d:c6:a9:e3:44:7a:d1:b4:50:d0:f6:90:63:a5:46:
3d:f7:47:53:80:59:77:d1:c8:ad:d1:09:05:ec:b8:
ef:7b:85:4f:76:f6:c3:70:a7:b6:90:01:2a:5f:a4:
0a:4b:13:41:83:f0:61:3c:59:86:61:bb:33:88:1e:
6e:82:92:ac:87:16:e9:2a:e4:48:b8:fb:85:f4:9c:
19:bd:7d:87:17:be:ad:52:27:89:90:bb:c4:8b:7a:
e4:8c:05:c6:55:6c:6a:9c:2c:be:c9:8e:48:ae:37:
86:32:60:5a:98:59:c7:5f:3f:70:0c:9a:eb:3d:94:
8c:7c:da:c3:e7:43:07:a9:ac:66:82:9a:8b:76:af:
39:8a:3e:cf:cd:35:5f:c4:3a:23:ab:d1:f9:86:d9:
24:68:84:58:aa:c5:d8:b5:bc:7e:bb:8e:18:9b:7e:
af:cd:8b:b0:2e:5e:47:7b:dc:96:8f:d9:70:5c:58:
1b:c4:0d:8e:02:fb:57:5b:d8:82:d1:69:75:ea:5d:
58:1f:eb:bb:e1:48:8e:72:39:3a:d5:bd:e5:f3:ca:
62:22:c2:e7:6e:42:78:f0:fb:9c:a0:22:54:b2:d7:
5c:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:EA:FC:66:6E:72:14:34:6C:28:18:E2:A2:34:0A:0E:FA:81:39:4F
X509v3 Authority Key Identifier:
keyid:F5:7D:9C:8F:FC:20:4B:6D:BD:E0:12:05:30:3B:DF:8B:50:63:8A:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X2cj_wgS2294BIFMDvfi1BjiqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/qer8Zm5yFDRsKBjiojQKDvqBOU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/e50b83-b292-4117-8991-b67d320990c6/1/9X2cj_wgS2294BIFMDvfi1BjiqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.70.78.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:55:da:2a:c6:71:22:be:11:68:7c:5b:af:15:0f:48:4a:c1:
ad:e0:71:18:d1:d3:38:6d:57:13:a0:10:af:0d:ee:45:e6:4c:
48:3e:af:59:39:ee:6b:11:11:b4:3d:13:66:09:f3:b8:47:56:
77:02:42:aa:90:02:f5:c1:7b:b1:7e:9c:c9:82:7d:56:af:01:
46:59:4e:bc:91:d4:2d:03:30:59:8e:60:bd:d1:02:11:65:35:
9c:67:d9:bd:bd:a9:5f:78:8b:a4:a4:ee:08:e1:3c:0e:68:d9:
6c:54:de:80:01:ee:d1:bb:11:29:ea:e7:be:a8:3f:a5:96:f5:
24:1a:1c:c5:6c:f5:1e:7c:89:a9:e9:e8:d4:80:cc:0a:f3:ef:
4c:50:4b:16:27:0f:54:12:31:e8:b4:af:fe:00:ea:96:6e:a6:
8a:a8:bd:a1:ed:b1:19:54:94:49:5b:a4:5d:44:a0:75:4e:c4:
79:d0:0a:0d:40:f8:f7:62:c7:b1:a3:c5:c6:e8:dc:96:43:e2:
b8:4e:31:00:01:39:9a:35:d9:7f:cd:c1:33:f9:82:01:e2:c2:
57:2d:76:f1:99:91:3a:f5:c7:b8:5b:70:c5:63:ed:8d:6e:8f:
a9:fd:43:41:69:b6:80:32:be:da:93:02:cc:ec:57:21:2a:cf:
d3:07:b8:36
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+SkSgh3g59aBSjLHQMjvS5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2Q5YzhmZmMyMDRiNmRiZGUwMTIwNTMwM2JkZjhiNTA2
MzhhYTYwHhcNMjYwNzI0MDUyMDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWVhZmM2NjZlNzIxNDM0NmMyODE4ZTJhMjM0MGEwZWZhODEzOTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAi5y1kYhYAqXMnRpGzn7ksc8FMhPA
D47BzZyNfOQdxqnjRHrRtFDQ9pBjpUY990dTgFl30cit0QkF7Ljve4VPdvbDcKe2
kAEqX6QKSxNBg/BhPFmGYbsziB5ugpKshxbpKuRIuPuF9JwZvX2HF76tUieJkLvE
i3rkjAXGVWxqnCy+yY5IrjeGMmBamFnHXz9wDJrrPZSMfNrD50MHqaxmgpqLdq85
ij7PzTVfxDojq9H5htkkaIRYqsXYtbx+u44Ym36vzYuwLl5He9yWj9lwXFgbxA2O
AvtXW9iC0Wl16l1YH+u74UiOcjk61b3l88piIsLnbkJ48PucoCJUstdcAQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKnq/GZuchQ0bCgY4qI0Cg76gTlPMB8GA1UdIwQY
MBaAFPV9nI/8IEttveASBTA734tQY4qmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS9lNTBiODMtYjI5Mi00MTE3LTg5OTEt
YjY3ZDMyMDk5MGM2LzEvcWVyOFptNXlGRFJzS0JqaW9qUUtEdnFCT1U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS9lNTBiODMtYjI5Mi00MTE3LTg5OTEtYjY3ZDMyMDk5MGM2
LzEvOVgyY2pfd2dTMjI5NEJJRk1EdmZpMUJqaXFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbUZOMA0G
CSqGSIb3DQEBCwUAA4IBAQA7VdoqxnEivhFofFuvFQ9ISsGt4HEY0dM4bVcToBCv
De5F5kxIPq9ZOe5rERG0PRNmCfO4R1Z3AkKqkAL1wXuxfpzJgn1WrwFGWU68kdQt
AzBZjmC90QIRZTWcZ9m9valfeIukpO4I4TwOaNlsVN6AAe7RuxEp6ue+qD+llvUk
GhzFbPUefImp6ejUgMwK8+9MUEsWJw9UEjHotK/+AOqWbqaKqL2h7bEZVJRJW6Rd
RKB1TsR50AoNQPj3Ysexo8XG6NyWQ+K4TjEAATmaNdl/zcEz+YIB4sJXLXbxmZE6
9ce4W3DFY+2Nbo+p/UNBabaAMr7akwLM7FchKs/TB7g2
-----END CERTIFICATE-----
Generated at Mon Jul 27 05:38:43 2026 by rpki-client