Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Qwn3SVqupSwJiuT-D0qcmtAsxCE.roa
File: Qwn3SVqupSwJiuT-D0qcmtAsxCE.roa (raw, json)
Hash identifier: rR4QoPpnbNvgvbnwt8O2F9G489ZYDOFohoV8G7JzO+I=
Subject key identifier: 43:09:F7:49:5A:AE:A5:2C:09:8A:E4:FE:0F:4A:9C:9A:D0:2C:C4:21
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A0398233752D8466B4798F30146FBF2687
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Qwn3SVqupSwJiuT-D0qcmtAsxCE.roa
Signing time: Tue 25 Aug 2026 15:20:29 +0000
ROA not before: Tue 25 Aug 2026 15:20:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18779
IP address blocks: 2a0c:47c0::/29 maxlen: 29
2a0c:7dc0::/29 maxlen: 29
2a0c:9ac0::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:33:75:2d:84:66:b4:79:8f:30:14:6f:bf:26:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4309f7495aaea52c098ae4fe0f4a9c9ad02cc421
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:fe:b0:8e:33:75:a2:cd:9b:ff:75:14:0b:ad:
f5:af:fd:00:82:09:8c:1c:71:ec:30:ed:dd:46:2b:
a6:29:63:5b:26:9f:68:ae:a0:92:72:09:39:3f:bb:
86:ad:90:3e:ff:d8:71:64:4a:e5:43:16:c6:f4:51:
6c:3c:6b:e2:44:29:0a:c3:d2:95:12:56:db:b2:48:
86:8a:a2:17:de:c0:c5:31:ac:b2:b6:c7:57:47:08:
b1:b9:65:ec:fa:5b:34:fb:84:ab:f1:7b:65:87:ed:
db:ba:ae:b5:d5:28:96:25:7a:9d:9d:47:9e:e6:b6:
e5:47:ac:6a:a3:3c:17:42:72:80:13:4f:cf:a1:e0:
65:24:4a:ee:85:9d:26:86:ce:f5:ea:42:47:a1:46:
94:d2:e0:29:9a:f4:b9:83:42:fe:d4:7b:fc:cf:63:
07:8c:2f:2e:6b:db:00:90:56:f4:ff:21:49:54:f4:
ee:53:90:75:3b:b1:58:fe:69:78:ba:24:4b:78:64:
26:09:3d:7c:8f:96:a2:dd:6d:9b:c3:4b:17:fd:09:
40:7c:d7:e6:47:7b:1e:74:b0:21:c0:a3:e4:15:fc:
8f:49:9e:7f:52:2e:e3:4d:40:1d:ce:f7:c6:84:e0:
a2:f9:e8:47:42:b7:a3:37:28:0d:78:50:d9:38:00:
ed:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:09:F7:49:5A:AE:A5:2C:09:8A:E4:FE:0F:4A:9C:9A:D0:2C:C4:21
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/Qwn3SVqupSwJiuT-D0qcmtAsxCE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a0c:47c0::/29
2a0c:7dc0::/29
2a0c:9ac0::/29
Signature Algorithm: sha256WithRSAEncryption
5f:74:c4:bd:7c:38:39:c8:2f:80:23:46:53:13:00:a6:b3:c4:
ea:1d:0f:77:2b:e2:fb:69:5c:87:37:98:3f:3c:30:55:c1:e7:
2d:62:92:0c:87:4e:0a:bb:50:5d:5f:7e:bf:9e:47:5c:d2:77:
60:7d:ab:f1:a8:7d:5e:a5:ff:2c:87:a8:04:f9:b2:70:8c:84:
67:a5:7b:74:f3:5b:74:f9:1e:98:bc:59:f1:35:7f:45:c9:1e:
30:af:d0:d1:eb:20:c5:5d:fa:0e:a8:16:3d:22:16:12:fb:30:
41:e2:b0:b3:2a:d9:1d:84:e3:1d:bb:78:97:4d:0d:17:c9:45:
09:af:2a:61:64:b4:ba:37:2a:21:11:52:fb:c1:e2:90:67:c8:
bf:72:ed:e8:de:c3:9a:62:ab:7b:c5:8a:fd:9b:0d:60:6b:5f:
18:17:0b:0b:bf:e9:fb:51:4f:af:0d:ce:ae:16:04:f6:44:2a:
85:3d:aa:dc:0e:8d:a8:01:e5:fe:c0:e7:7c:f6:7b:c0:33:df:
23:36:a8:92:75:48:d7:1a:c8:bf:80:36:26:6f:99:87:8a:b7:
e5:83:e5:bd:10:14:9e:20:da:e0:bf:8c:78:98:3a:08:14:dc:
a9:49:04:ed:54:52:da:97:4b:c5:4d:c5:27:48:a2:42:f9:04:
3c:20:37:b9
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaA5gjN1LYRmtHmPMBRvvyaHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzA5Zjc0OTVhYWVhNTJjMDk4YWU0ZmUwZjRhOWM5YWQwMmNjNDIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwf6wjjN1os2b/3UUC631r/0AggmM
HHHsMO3dRiumKWNbJp9orqCScgk5P7uGrZA+/9hxZErlQxbG9FFsPGviRCkKw9KV
ElbbskiGiqIX3sDFMayytsdXRwixuWXs+ls0+4Sr8Xtlh+3buq611SiWJXqdnUee
5rblR6xqozwXQnKAE0/PoeBlJEruhZ0mhs716kJHoUaU0uApmvS5g0L+1Hv8z2MH
jC8ua9sAkFb0/yFJVPTuU5B1O7FY/ml4uiRLeGQmCT18j5ai3W2bw0sX/QlAfNfm
R3sedLAhwKPkFfyPSZ5/Ui7jTUAdzvfGhOCi+ehHQrejNygNeFDZOADtEQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEMJ90larqUsCYrk/g9KnJrQLMQhMB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvUXduM1NWcXVwU3dKaXVULUQwcWNtdEFzeENFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAbBAIAAjAVAwUDKgxHwAMF
AyoMfcADBQMqDJrAMA0GCSqGSIb3DQEBCwUAA4IBAQBfdMS9fDg5yC+AI0ZTEwCm
s8TqHQ93K+L7aVyHN5g/PDBVwectYpIMh04Ku1BdX36/nkdc0ndgfavxqH1epf8s
h6gE+bJwjIRnpXt081t0+R6YvFnxNX9FyR4wr9DR6yDFXfoOqBY9IhYS+zBB4rCz
KtkdhOMdu3iXTQ0XyUUJryphZLS6NyohEVL7weKQZ8i/cu3o3sOaYqt7xYr9mw1g
a18YFwsLv+n7UU+vDc6uFgT2RCqFParcDo2oAeX+wOd89nvAM98jNqiSdUjXGsi/
gDYmb5mHirflg+W9EBSeINrgv4x4mDoIFNypSQTtVFLal0vFTcUnSKJC+QQ8IDe5
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:10 2026 by rpki-client