Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/qPCUBD2bbfTxcQWu9VB4zfo4G48.roa
File: qPCUBD2bbfTxcQWu9VB4zfo4G48.roa (raw, json)
Hash identifier: FEXL3nhOq3hobNHqzeNwQeCLrsfr71pvMFrkUe+6jiU=
Subject key identifier: A8:F0:94:04:3D:9B:6D:F4:F1:71:05:AE:F5:50:78:CD:FA:38:1B:8F
Certificate issuer: /CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Certificate serial: 019FFB13D388B8F7043250FE2EB14F2124F9
Authority key identifier: 4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/qPCUBD2bbfTxcQWu9VB4zfo4G48.roa
Signing time: Thu 13 Aug 2026 12:23:28 +0000
ROA not before: Thu 13 Aug 2026 12:23:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213186
IP address blocks: 45.155.65.0/24 maxlen: 24
62.233.51.0/24 maxlen: 24
2a10:3c80::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.mft
rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 14 Aug 2026 12:23:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:fb:13:d3:88:b8:f7:04:32:50:fe:2e:b1:4f:21:24:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4f14112d05e9d876149d2778d48edaaa324db0a5
Validity
Not Before: Aug 13 12:23:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8f094043d9b6df4f17105aef55078cdfa381b8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:da:02:2f:04:7b:75:39:74:54:d1:91:3a:48:
9a:04:96:15:17:bb:a1:89:89:f0:5a:81:a1:a5:9c:
bd:05:16:ed:52:14:3a:34:e4:67:2d:31:39:75:d6:
94:2e:2f:9e:2b:62:b8:eb:be:cc:5d:79:bf:64:0e:
54:0b:5d:dc:a9:ef:af:2b:58:89:a1:62:5e:b5:ca:
8e:71:fd:09:77:3f:35:c7:dc:ab:78:ef:96:d5:bd:
00:4c:0c:89:c9:78:79:4a:dc:6d:18:ad:6e:2d:9d:
f7:0a:d7:73:a4:f2:cf:b4:59:bb:35:5e:ae:31:0f:
c4:9f:39:48:40:de:3c:dc:fe:fb:ff:08:88:bb:87:
32:7c:b6:ee:fe:27:9e:80:26:cc:19:2f:49:10:a7:
39:60:f9:23:2c:4d:5d:8a:71:09:f2:b1:db:ba:2a:
72:d6:cd:43:07:1a:e9:c7:a5:3a:9f:f1:ab:96:df:
93:ac:ad:34:82:20:8f:81:68:2f:b2:db:d5:16:13:
cb:cc:4c:2e:04:cd:d8:d3:54:26:0c:6a:b3:3c:7f:
1b:8f:ca:b5:ce:e2:a0:1c:92:72:38:82:de:5b:0a:
7c:4a:e4:ae:b1:f6:57:eb:e0:d0:0b:66:8c:0d:b0:
24:4f:64:da:6f:74:52:17:ba:7d:16:98:ce:a4:96:
2c:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F0:94:04:3D:9B:6D:F4:F1:71:05:AE:F5:50:78:CD:FA:38:1B:8F
X509v3 Authority Key Identifier:
keyid:4F:14:11:2D:05:E9:D8:76:14:9D:27:78:D4:8E:DA:AA:32:4D:B0:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TxQRLQXp2HYUnSd41I7aqjJNsKU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/qPCUBD2bbfTxcQWu9VB4zfo4G48.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/3caa51-7a21-499d-a545-bafbdfc8132a/1/TxQRLQXp2HYUnSd41I7aqjJNsKU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.155.65.0/24
62.233.51.0/24
IPv6:
2a10:3c80::/48
Signature Algorithm: sha256WithRSAEncryption
cd:40:d0:99:12:2e:95:e2:02:06:6e:64:48:00:af:95:4a:fd:
4f:09:b7:37:20:36:28:76:8b:3b:ef:d6:92:5c:80:e2:d4:5a:
8e:f8:19:ba:fe:99:c8:ae:cb:ed:5a:21:75:11:8f:d2:fa:7e:
7a:2a:3a:07:f3:61:9c:f7:c5:ec:dc:de:7e:72:0b:b6:07:4c:
a5:c6:84:80:f3:08:da:22:84:f2:6b:0a:75:14:72:75:c4:b6:
ff:a5:29:f8:7b:c9:36:f6:d7:5a:dd:b6:e7:1e:6d:a4:61:83:
f5:3b:8f:07:ff:f1:90:1a:e2:18:15:35:dc:57:d4:0c:91:bb:
ff:2c:ab:2f:4c:74:c7:1b:ab:7a:c4:1e:92:3d:f2:b9:00:6b:
62:42:2b:39:be:a2:65:bc:fe:99:43:d6:25:79:1d:d4:3b:0d:
b4:00:d5:9b:7d:51:1c:c1:5e:db:b3:4b:58:b2:fe:59:63:ff:
b5:9b:63:7a:43:38:58:f4:a0:5d:fd:c5:f5:64:eb:8b:80:f6:
05:06:4b:5c:a4:3e:01:29:36:95:e4:8a:c6:1f:4c:53:94:11:
96:88:8a:d0:e8:0b:38:2e:b0:78:4b:81:3f:5b:b8:84:4a:ca:
38:a8:85:6e:e3:d5:37:99:82:6d:ea:13:ab:5f:94:7d:23:e9:
b8:7c:e8:75
-----BEGIN CERTIFICATE-----
MIIFFDCCA/ygAwIBAgISAZ/7E9OIuPcEMlD+LrFPIST5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRmMTQxMTJkMDVlOWQ4NzYxNDlkMjc3OGQ0OGVkYWFhMzI0
ZGIwYTUwHhcNMjYwODEzMTIyMzI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGYwOTQwNDNkOWI2ZGY0ZjE3MTA1YWVmNTUwNzhjZGZhMzgxYjhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9oCLwR7dTl0VNGROkiaBJYVF7uh
iYnwWoGhpZy9BRbtUhQ6NORnLTE5ddaULi+eK2K4677MXXm/ZA5UC13cqe+vK1iJ
oWJetcqOcf0Jdz81x9yreO+W1b0ATAyJyXh5StxtGK1uLZ33CtdzpPLPtFm7NV6u
MQ/EnzlIQN483P77/wiIu4cyfLbu/ieegCbMGS9JEKc5YPkjLE1dinEJ8rHbuipy
1s1DBxrpx6U6n/Grlt+TrK00giCPgWgvstvVFhPLzEwuBM3Y01QmDGqzPH8bj8q1
zuKgHJJyOILeWwp8SuSusfZX6+DQC2aMDbAkT2Tab3RSF7p9FpjOpJYsQwIDAQAB
o4ICIDCCAhwwHQYDVR0OBBYEFKjwlAQ9m2308XEFrvVQeM36OBuPMB8GA1UdIwQY
MBaAFE8UES0F6dh2FJ0neNSO2qoyTbClMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUt
YmFmYmRmYzgxMzJhLzEvcVBDVUJEMmJiZlR4Y1FXdTlWQjR6Zm80RzQ4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS8zY2FhNTEtN2EyMS00OTlkLWE1NDUtYmFmYmRmYzgxMzJh
LzEvVHhRUkxRWHAySFlVblNkNDFJN2FxakpOc0tVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDYGCCsGAQUFBwEHAQH/BCcwJTASBAIAATAMAwQALZtBAwQA
PukzMA8EAgACMAkDBwAqEDyAAAAwDQYJKoZIhvcNAQELBQADggEBAM1A0JkSLpXi
AgZuZEgAr5VK/U8JtzcgNih2izvv1pJcgOLUWo74Gbr+mciuy+1aIXURj9L6fnoq
OgfzYZz3xezc3n5yC7YHTKXGhIDzCNoihPJrCnUUcnXEtv+lKfh7yTb211rdtuce
baRhg/U7jwf/8ZAa4hgVNdxX1AyRu/8sqy9MdMcbq3rEHpI98rkAa2JCKzm+omW8
/plD1iV5HdQ7DbQA1Zt9URzBXtuzS1iy/llj/7WbY3pDOFj0oF39xfVk64uA9gUG
S1ykPgEpNpXkisYfTFOUEZaIitDoCzgusHhLgT9buIRKyjiohW7j1TeZgm3qE6tf
lH0j6bh86HU=
-----END CERTIFICATE-----
Generated at Thu Aug 13 19:09:43 2026 by rpki-client