Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/QpBXQsqqnNurk_iM9-wU3I_cjjM.roa
File: QpBXQsqqnNurk_iM9-wU3I_cjjM.roa (raw, json)
Hash identifier: O16RS2ASzOuQMD40aTtlqa0eE2H8LfWM2cIfm0vuGd8=
Subject key identifier: 42:90:57:42:CA:AA:9C:DB:AB:93:F8:8C:F7:EC:14:DC:8F:DC:8E:33
Certificate issuer: /CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Certificate serial: 01A0E228669DF45B87CD3431E336147B24F1
Authority key identifier: 29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/QpBXQsqqnNurk_iM9-wU3I_cjjM.roa
Signing time: Sun 27 Sep 2026 09:18:13 +0000
ROA not before: Sun 27 Sep 2026 09:18:13 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197959
IP address blocks: 92.62.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 21 Oct 2026 17:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e2:28:66:9d:f4:5b:87:cd:34:31:e3:36:14:7b:24:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=29d2daff1c5bb61a0ac8b3caead4b8a1fa284d0f
Validity
Not Before: Sep 27 09:18:13 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42905742caaa9cdbab93f88cf7ec14dc8fdc8e33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:b8:fd:c1:ae:8b:69:af:5a:39:e6:35:b6:b5:
1a:e2:42:77:ed:c5:5e:95:08:ce:52:3a:28:89:81:
fc:b7:a2:de:74:64:70:d9:9f:f4:16:df:65:c7:26:
e0:fc:da:31:b7:e7:31:5b:cc:a9:36:46:4e:c9:cc:
77:86:a7:56:57:dd:b7:fe:40:b2:95:55:7c:db:7b:
4e:b6:0a:d7:5c:ab:2b:cb:87:ea:c3:ce:a5:30:41:
62:29:1d:70:6f:f7:c5:2c:57:9c:62:45:c7:02:5e:
01:c2:b7:73:2f:f7:31:06:66:e4:2a:09:77:99:c0:
b8:7c:eb:2d:ad:4a:f7:16:7b:a8:52:8b:a5:4d:0c:
9c:7c:02:84:9e:db:d0:47:8d:e0:71:bb:b4:47:4c:
19:82:e1:11:a2:93:a6:a6:52:94:d5:de:19:0e:c2:
5d:55:98:60:a9:c5:a8:2d:59:e8:bb:6b:9a:6d:a1:
1d:aa:70:ba:e9:da:b1:7c:78:7b:78:13:d4:9a:db:
a1:12:52:bd:73:0f:a4:41:f8:4c:bc:6a:c3:e2:3b:
8e:9d:ca:f2:61:8b:0a:9d:4f:f6:d2:dc:31:68:af:
fe:9c:c4:e8:dc:50:ab:0d:91:f2:9f:cc:bc:38:5f:
fd:b7:13:23:f5:ab:25:d5:01:f6:27:cb:59:35:93:
a2:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:90:57:42:CA:AA:9C:DB:AB:93:F8:8C:F7:EC:14:DC:8F:DC:8E:33
X509v3 Authority Key Identifier:
keyid:29:D2:DA:FF:1C:5B:B6:1A:0A:C8:B3:CA:EA:D4:B8:A1:FA:28:4D:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/KdLa_xxbthoKyLPK6tS4ofooTQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/QpBXQsqqnNurk_iM9-wU3I_cjjM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/e5ea98-9601-4add-a7f8-4f57d9cf5caa/1/KdLa_xxbthoKyLPK6tS4ofooTQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
92.62.242.0/24
Signature Algorithm: sha256WithRSAEncryption
47:40:24:69:14:dd:da:a2:21:b3:a6:31:fb:e9:c0:4a:79:13:
cd:46:44:cd:c9:be:1f:95:df:d8:01:82:79:df:08:0b:53:97:
86:0c:bf:8f:9f:7b:5b:51:0a:cb:89:75:6c:7f:08:32:c8:da:
8a:eb:e8:6d:00:0c:74:62:67:79:9a:75:b5:e9:29:47:22:ed:
5d:a4:16:41:00:52:95:33:9d:76:71:35:a3:d2:4f:35:99:2d:
11:8e:1f:4d:5b:6e:2e:02:15:a0:ce:97:db:09:77:37:25:29:
b4:47:0e:43:96:b5:3c:21:de:2d:01:c0:a9:b2:15:25:5b:9d:
fa:9f:80:f3:6e:fb:dd:f7:55:d2:0d:cc:61:44:a0:64:11:03:
8e:25:fd:02:2b:3c:4f:0f:d1:6c:26:a4:d9:00:5d:f7:04:8e:
9c:16:8a:47:41:09:6b:29:35:11:bd:ae:ea:ca:0f:15:69:a5:
08:64:4c:8a:ec:22:4c:e2:e7:d1:d9:a0:a1:bd:8f:2a:ff:b0:
26:a9:b8:39:c3:bd:03:4b:4e:89:07:2f:c6:20:1b:43:2d:4a:
c4:a8:c3:24:8e:78:d2:0d:55:de:b9:92:dd:0b:86:c4:5f:1c:
ac:9e:d5:ce:59:06:77:fd:a1:74:ea:65:f1:5c:b0:50:72:37:
be:7d:b0:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDiKGad9FuHzTQx4zYUeyTxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI5ZDJkYWZmMWM1YmI2MWEwYWM4YjNjYWVhZDRiOGExZmEy
ODRkMGYwHhcNMjYwOTI3MDkxODEzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjkwNTc0MmNhYWE5Y2RiYWI5M2Y4OGNmN2VjMTRkYzhmZGM4ZTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzbj9wa6Laa9aOeY1trUa4kJ37cVe
lQjOUjooiYH8t6LedGRw2Z/0Ft9lxybg/Noxt+cxW8ypNkZOycx3hqdWV923/kCy
lVV823tOtgrXXKsry4fqw86lMEFiKR1wb/fFLFecYkXHAl4BwrdzL/cxBmbkKgl3
mcC4fOstrUr3FnuoUoulTQycfAKEntvQR43gcbu0R0wZguERopOmplKU1d4ZDsJd
VZhgqcWoLVnou2uabaEdqnC66dqxfHh7eBPUmtuhElK9cw+kQfhMvGrD4juOncry
YYsKnU/20twxaK/+nMTo3FCrDZHyn8y8OF/9txMj9asl1QH2J8tZNZOi4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEKQV0LKqpzbq5P4jPfsFNyP3I4zMB8GA1UdIwQY
MBaAFCnS2v8cW7YaCsizyurUuKH6KE0PMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3Zjgt
NGY1N2Q5Y2Y1Y2FhLzEvUXBCWFFzcXFuTnVya19pTTktd1UzSV9jampNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy9lNWVhOTgtOTYwMS00YWRkLWE3ZjgtNGY1N2Q5Y2Y1Y2Fh
LzEvS2RMYV94eGJ0aG9LeUxQSzZ0UzRvZm9vVFE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXD7yMA0G
CSqGSIb3DQEBCwUAA4IBAQBHQCRpFN3aoiGzpjH76cBKeRPNRkTNyb4fld/YAYJ5
3wgLU5eGDL+Pn3tbUQrLiXVsfwgyyNqK6+htAAx0Ymd5mnW16SlHIu1dpBZBAFKV
M512cTWj0k81mS0Rjh9NW24uAhWgzpfbCXc3JSm0Rw5DlrU8Id4tAcCpshUlW536
n4Dzbvvd91XSDcxhRKBkEQOOJf0CKzxPD9FsJqTZAF33BI6cFopHQQlrKTURva7q
yg8VaaUIZEyK7CJM4ufR2aChvY8q/7Amqbg5w70DS06JBy/GIBtDLUrEqMMkjnjS
DVXeuZLdC4bEXxysntXOWQZ3/aF06mXxXLBQcje+fbBc
-----END CERTIFICATE-----
Generated at Wed Oct 21 03:55:40 2026 by rpki-client