Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/QpiPdMpMBeLnHknQQRG4dYfRcik.roa
File: QpiPdMpMBeLnHknQQRG4dYfRcik.roa (raw, json)
Hash identifier: 6Jh7Sa4bkf2ZsuaXdkkFkFjyUbovhTDwlAmlETCkzik=
Subject key identifier: 42:98:8F:74:CA:4C:05:E2:E7:1E:49:D0:41:11:B8:75:87:D1:72:29
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 01A1626B0801E39EDF536B8AC0DAC304BE06
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/QpiPdMpMBeLnHknQQRG4dYfRcik.roa
Signing time: Thu 22 Oct 2026 07:02:23 +0000
ROA not before: Thu 22 Oct 2026 07:02:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 29802
IP address blocks: 77.67.49.0/24 maxlen: 24
194.77.200.0/24 maxlen: 24
212.189.116.0/24 maxlen: 24
212.189.124.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:62:6b:08:01:e3:9e:df:53:6b:8a:c0:da:c3:04:be:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Oct 22 07:02:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42988f74ca4c05e2e71e49d04111b87587d17229
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:15:60:07:e9:8a:97:17:da:6d:57:20:08:f3:
05:89:b0:f1:ba:a1:d1:34:14:73:ed:c5:9e:e6:42:
de:29:e0:88:6f:88:b4:c8:78:fd:a1:89:a2:f1:fa:
da:e9:b0:33:c1:4c:c7:41:17:58:86:32:75:69:8a:
71:97:ee:44:2c:c0:c5:3a:90:7f:b5:39:9b:9c:95:
58:b3:42:0c:e6:5c:8b:20:20:9b:ec:76:3f:4a:dc:
a8:91:79:d3:10:18:17:47:a3:53:af:ed:e6:58:80:
78:13:aa:fd:0c:1d:8c:6c:d1:34:ab:58:a6:35:25:
d0:9c:60:90:7d:78:63:95:94:23:8a:a3:fb:a7:99:
a5:fd:60:c2:e8:1d:2c:46:43:94:65:ec:af:1c:fb:
1a:ee:4d:7b:dc:29:a8:a8:0f:d1:f0:c9:c5:89:d8:
1f:ff:4b:62:8f:d4:2f:9b:9c:a1:bf:4c:9a:4f:6f:
02:40:93:a7:af:4f:35:33:71:a1:5c:94:2e:dc:c0:
a2:31:98:1c:b8:50:c9:9d:92:7e:ca:ca:3e:9e:76:
60:4a:7c:87:cb:8f:06:6f:63:0e:db:11:f5:b2:ea:
bc:ac:37:b3:0e:76:68:8f:12:9f:17:8f:0f:c4:18:
0d:ee:3d:b5:5a:c2:22:45:cf:0c:9a:46:00:e9:24:
74:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:98:8F:74:CA:4C:05:E2:E7:1E:49:D0:41:11:B8:75:87:D1:72:29
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/QpiPdMpMBeLnHknQQRG4dYfRcik.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.67.49.0/24
194.77.200.0/24
212.189.116.0/24
212.189.124.0/24
Signature Algorithm: sha256WithRSAEncryption
0b:05:c7:21:92:f3:de:01:69:c5:fe:85:2d:15:ba:f2:5c:eb:
90:ab:47:f4:be:69:63:54:d8:6b:dc:a0:29:e2:0f:5d:aa:59:
38:f8:81:96:ac:a5:fd:e8:cf:5f:75:0f:34:01:41:88:a6:93:
88:57:34:47:37:a8:6b:cf:62:b4:75:44:03:d1:c2:68:31:52:
2d:bd:3f:f6:f8:c6:2e:da:8c:90:5b:b2:b3:91:c3:af:26:42:
b5:f3:dc:f0:a6:2d:f1:81:b2:f3:41:6b:94:16:51:35:6a:4d:
2e:1a:c3:69:de:4a:6a:38:83:36:aa:44:85:52:02:e8:75:8c:
21:20:e7:4f:fe:1e:be:f0:eb:b9:88:5d:53:e3:2b:2f:dc:e7:
28:c6:15:a2:0f:4e:1b:3f:e0:ac:d0:b6:ac:00:92:aa:6a:0a:
ce:5b:2e:9e:24:7e:e2:3c:70:79:aa:f6:f2:83:7d:59:d4:20:
36:8a:58:ed:3d:8b:eb:e6:a4:57:73:9e:c6:08:3e:0e:8d:86:
68:f2:a0:29:9e:b7:1a:84:a7:1f:d6:94:50:57:b3:62:93:27:
7b:96:82:7a:1f:df:83:e9:15:2c:5d:a8:48:0f:68:ee:5c:75:
43:dd:0d:06:b3:f0:30:dd:63:fe:9b:3e:3b:c4:30:e3:e2:6b:
0e:81:cc:a0
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaFiawgB457fU2uKwNrDBL4GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYxMDIyMDcwMjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mjk4OGY3NGNhNGMwNWUyZTcxZTQ5ZDA0MTExYjg3NTg3ZDE3MjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsRVgB+mKlxfabVcgCPMFibDxuqHR
NBRz7cWe5kLeKeCIb4i0yHj9oYmi8fra6bAzwUzHQRdYhjJ1aYpxl+5ELMDFOpB/
tTmbnJVYs0IM5lyLICCb7HY/StyokXnTEBgXR6NTr+3mWIB4E6r9DB2MbNE0q1im
NSXQnGCQfXhjlZQjiqP7p5ml/WDC6B0sRkOUZeyvHPsa7k173CmoqA/R8MnFidgf
/0tij9Qvm5yhv0yaT28CQJOnr081M3GhXJQu3MCiMZgcuFDJnZJ+yso+nnZgSnyH
y48Gb2MO2xH1suq8rDezDnZojxKfF48PxBgN7j21WsIiRc8MmkYA6SR0cQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFEKYj3TKTAXi5x5J0EERuHWH0XIpMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvUXBpUGRNcE1CZUxuSGtuUVFSRzRkWWZSY2lrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQATUMxAwQA
wk3IAwQA1L10AwQA1L18MA0GCSqGSIb3DQEBCwUAA4IBAQALBcchkvPeAWnF/oUt
FbryXOuQq0f0vmljVNhr3KAp4g9dqlk4+IGWrKX96M9fdQ80AUGIppOIVzRHN6hr
z2K0dUQD0cJoMVItvT/2+MYu2oyQW7KzkcOvJkK189zwpi3xgbLzQWuUFlE1ak0u
GsNp3kpqOIM2qkSFUgLodYwhIOdP/h6+8Ou5iF1T4ysv3OcoxhWiD04bP+Cs0Las
AJKqagrOWy6eJH7iPHB5qvbyg31Z1CA2iljtPYvr5qRXc57GCD4OjYZo8qApnrca
hKcf1pRQV7Nikyd7loJ6H9+D6RUsXahID2juXHVD3Q0Gs/Aw3WP+mz47xDDj4msO
gcyg
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:13:12 2026 by rpki-client