Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qnBlcf9JhW8TObXs73jvCcNhtKo.roa
File: qnBlcf9JhW8TObXs73jvCcNhtKo.roa (raw, json)
Hash identifier: TxuaE98VMv+izUH1dBB+VT7KFcTz64Gs4C9a9Q6XFPc=
Subject key identifier: AA:70:65:71:FF:49:85:6F:13:39:B5:EC:EF:78:EF:09:C3:61:B4:AA
Certificate issuer: /CN=c3c18527e3a206af2842028d95aec41338e8daf8
Certificate serial: 019F82FE0A55FA01AF7B056905E59C509872
Authority key identifier: C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qnBlcf9JhW8TObXs73jvCcNhtKo.roa
Signing time: Tue 21 Jul 2026 04:45:14 +0000
ROA not before: Tue 21 Jul 2026 04:45:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209425
IP address blocks: 213.176.24.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 13:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:82:fe:0a:55:fa:01:af:7b:05:69:05:e5:9c:50:98:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c3c18527e3a206af2842028d95aec41338e8daf8
Validity
Not Before: Jul 21 04:45:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa706571ff49856f1339b5ecef78ef09c361b4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:e6:15:ba:0c:85:b1:68:7b:ae:02:af:2f:d4:
59:fb:62:22:c7:14:4b:a8:64:e2:47:62:53:23:e5:
55:b1:e0:8c:ab:6e:18:5a:de:52:d2:97:5d:62:9c:
78:45:bc:2a:8b:08:0d:8c:90:eb:7e:05:47:44:74:
04:e7:c2:b3:b2:28:d2:5b:e3:c5:b4:72:54:fa:a3:
a2:e8:8f:06:07:31:52:e4:bb:8f:a4:fe:08:e5:4d:
22:70:9e:8d:e3:01:5b:07:12:f0:5c:6b:90:90:07:
d1:c6:a0:d5:4b:9c:7a:30:7c:8a:d0:4a:e5:b0:3b:
05:51:76:b8:5f:b1:c9:10:38:da:56:25:c5:52:07:
b6:bc:fe:f7:7e:42:a1:89:7d:43:a1:7a:3e:e8:23:
28:1c:d2:12:57:47:83:32:42:51:5c:f7:56:4c:ed:
01:9e:1b:b7:41:a6:ff:82:5a:e9:8d:c9:b1:7b:3b:
e2:ee:17:17:40:40:0e:1a:19:62:a2:e7:b2:74:a3:
6e:13:f7:e0:46:0d:b1:b0:58:a0:ec:09:97:c3:ca:
09:d1:63:22:ab:31:5a:eb:8e:92:c3:37:94:23:3a:
3e:9b:56:6c:0b:55:93:30:2c:70:36:69:c7:2e:a7:
58:cf:d5:e9:87:42:49:cd:09:9d:ea:09:4f:72:6a:
bb:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:70:65:71:FF:49:85:6F:13:39:B5:EC:EF:78:EF:09:C3:61:B4:AA
X509v3 Authority Key Identifier:
keyid:C3:C1:85:27:E3:A2:06:AF:28:42:02:8D:95:AE:C4:13:38:E8:DA:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/w8GFJ-OiBq8oQgKNla7EEzjo2vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/qnBlcf9JhW8TObXs73jvCcNhtKo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/1339df-8e06-41de-94f3-0cba33efc5bb/1/w8GFJ-OiBq8oQgKNla7EEzjo2vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.176.24.0/22
Signature Algorithm: sha256WithRSAEncryption
05:11:45:76:8c:80:3e:75:7c:07:2c:64:4c:09:bd:31:ba:35:
c9:b5:ba:cc:1b:24:1d:7a:00:29:23:ab:fb:69:2f:71:83:8c:
d7:87:2b:d7:f8:e5:59:e1:8c:7c:ee:a6:4d:06:82:b6:5d:ae:
43:21:d0:52:df:d4:44:b6:27:43:90:3a:db:fa:52:4a:cb:71:
81:cd:c0:91:2e:75:65:b5:89:d0:fb:39:aa:23:a9:b4:51:2c:
09:73:29:14:1d:c3:ae:94:57:0c:03:50:57:09:18:ec:ca:65:
39:26:88:ff:32:8b:84:50:6a:ee:2d:78:30:4d:5f:eb:5f:24:
9e:c3:17:14:b2:d8:fc:3b:30:af:cc:a9:68:27:33:8e:75:03:
d1:76:d9:3a:1c:a9:72:78:9f:55:bc:69:ca:1a:c0:09:55:37:
d5:5b:cd:85:d7:ef:39:0b:f3:56:0e:2d:0b:0c:6d:08:12:bc:
77:1a:7f:fc:b8:db:38:dc:c0:49:3c:04:75:af:fd:ac:49:5a:
e5:11:c1:76:ab:00:1b:2e:90:55:b5:4b:b0:6c:12:ab:95:26:
bb:98:24:db:74:d2:58:66:92:90:ab:d8:f5:09:db:16:d2:ed:
96:2c:e3:98:3c:4f:6d:e4:db:dd:11:0c:67:8a:67:d0:ee:e0:
e8:da:d0:5c
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+C/gpV+gGvewVpBeWcUJhyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGMzYzE4NTI3ZTNhMjA2YWYyODQyMDI4ZDk1YWVjNDEzMzhl
OGRhZjgwHhcNMjYwNzIxMDQ0NTE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTcwNjU3MWZmNDk4NTZmMTMzOWI1ZWNlZjc4ZWYwOWMzNjFiNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtOYVugyFsWh7rgKvL9RZ+2IixxRL
qGTiR2JTI+VVseCMq24YWt5S0pddYpx4RbwqiwgNjJDrfgVHRHQE58KzsijSW+PF
tHJU+qOi6I8GBzFS5LuPpP4I5U0icJ6N4wFbBxLwXGuQkAfRxqDVS5x6MHyK0Erl
sDsFUXa4X7HJEDjaViXFUge2vP73fkKhiX1DoXo+6CMoHNISV0eDMkJRXPdWTO0B
nhu3Qab/glrpjcmxezvi7hcXQEAOGhlioueydKNuE/fgRg2xsFig7AmXw8oJ0WMi
qzFa646SwzeUIzo+m1ZsC1WTMCxwNmnHLqdYz9Xph0JJzQmd6glPcmq7+QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKpwZXH/SYVvEzm17O947wnDYbSqMB8GA1UdIwQY
MBaAFMPBhSfjogavKEICjZWuxBM46Nr4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMt
MGNiYTMzZWZjNWJiLzEvcW5CbGNmOUpoVzhUT2JYczczanZDY05odEtvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy8xMzM5ZGYtOGUwNi00MWRlLTk0ZjMtMGNiYTMzZWZjNWJi
LzEvdzhHRkotT2lCcThvUWdLTmxhN0VFempvMnZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQC1bAYMA0G
CSqGSIb3DQEBCwUAA4IBAQAFEUV2jIA+dXwHLGRMCb0xujXJtbrMGyQdegApI6v7
aS9xg4zXhyvX+OVZ4Yx87qZNBoK2Xa5DIdBS39REtidDkDrb+lJKy3GBzcCRLnVl
tYnQ+zmqI6m0USwJcykUHcOulFcMA1BXCRjsymU5Joj/MouEUGruLXgwTV/rXySe
wxcUstj8OzCvzKloJzOOdQPRdtk6HKlyeJ9VvGnKGsAJVTfVW82F1+85C/NWDi0L
DG0IErx3Gn/8uNs43MBJPAR1r/2sSVrlEcF2qwAbLpBVtUuwbBKrlSa7mCTbdNJY
ZpKQq9j1CdsW0u2WLOOYPE9t5NvdEQxnimfQ7uDo2tBc
-----END CERTIFICATE-----
Generated at Tue Jul 21 21:41:52 2026 by rpki-client