Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wqy-2UnGhLI0wa7gSIR1TApQjgA.roa
File: wqy-2UnGhLI0wa7gSIR1TApQjgA.roa (raw, json)
Hash identifier: v/0ggmHMoh+OkgeC4FTTnzxOxVlOvpvtBIniBIKuH/o=
Subject key identifier: C2:AC:BE:D9:49:C6:84:B2:34:C1:AE:E0:48:84:75:4C:0A:50:8E:00
Certificate issuer: /CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Certificate serial: 019F1C52A0BD2458BBD53D2C1DA0679244FF
Authority key identifier: 27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wqy-2UnGhLI0wa7gSIR1TApQjgA.roa
Signing time: Wed 01 Jul 2026 06:16:44 +0000
ROA not before: Wed 01 Jul 2026 06:16:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219393
IP address blocks: 217.8.197.0/24 maxlen: 24
217.8.199.0/24 maxlen: 24
217.8.201.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.mft
rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:52:a0:bd:24:58:bb:d5:3d:2c:1d:a0:67:92:44:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=279dbfdf4c20bdae8d6118566ece76444e46d171
Validity
Not Before: Jul 1 06:16:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c2acbed949c684b234c1aee04884754c0a508e00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:20:0f:8c:b2:09:9c:c5:83:7e:d5:e4:02:25:
4c:0b:2c:7c:cf:04:c7:ca:85:d0:57:65:71:5c:a5:
52:4b:7d:86:9f:7e:17:18:64:c9:44:27:0f:53:3d:
6e:95:8b:f7:b1:57:8a:7e:b9:69:39:84:f4:f5:4f:
96:05:c0:ca:da:d7:d2:d9:c9:cf:9e:ed:cb:da:fc:
dd:c2:2a:2b:82:21:7d:1c:fe:c0:49:4d:34:47:ec:
73:4c:6c:45:6d:40:a6:3d:8f:44:7f:12:d8:8d:ee:
76:39:5d:77:a6:dc:74:82:a7:20:f0:39:41:21:8a:
4b:ce:ad:7e:07:38:1f:77:8c:9b:29:a2:25:b9:3e:
10:5c:c6:da:1f:4a:39:01:2c:66:79:77:ac:54:e7:
36:39:95:62:20:56:79:2c:ec:e2:de:b1:17:a6:71:
a3:65:d6:8e:9d:33:75:b4:b4:e4:b0:10:c9:db:87:
e4:e7:77:7f:5c:c8:b0:fd:74:6f:09:41:c0:f7:9c:
68:50:40:a6:86:e3:2c:c6:5b:38:fd:75:35:5d:99:
bd:66:6c:c2:a4:a2:36:ba:d2:4d:ac:49:03:41:b2:
8a:9e:b2:44:c0:72:34:f3:3c:0c:5a:21:7d:4f:92:
65:e2:72:e6:f7:fe:c5:4f:32:9e:85:aa:ef:70:80:
4f:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:AC:BE:D9:49:C6:84:B2:34:C1:AE:E0:48:84:75:4C:0A:50:8E:00
X509v3 Authority Key Identifier:
keyid:27:9D:BF:DF:4C:20:BD:AE:8D:61:18:56:6E:CE:76:44:4E:46:D1:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J52_30wgva6NYRhWbs52RE5G0XE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/wqy-2UnGhLI0wa7gSIR1TApQjgA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/9d54a5-0135-4b18-961a-0cf1093d4548/1/J52_30wgva6NYRhWbs52RE5G0XE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
217.8.197.0/24
217.8.199.0/24
217.8.201.0/24
Signature Algorithm: sha256WithRSAEncryption
9c:7b:d0:51:a4:c0:7e:e9:8a:c7:99:7c:ab:f8:f1:2e:6b:09:
2d:b1:e3:82:73:f0:93:1a:22:4a:58:64:f7:c8:92:93:4a:77:
2b:d5:84:81:b5:6a:d1:50:1e:98:64:aa:f2:bb:fe:ca:88:cc:
47:ee:2b:f0:42:dd:7a:0c:b2:7d:18:3e:52:49:fb:77:df:df:
db:df:76:78:c3:46:ff:82:08:87:d8:a1:da:cc:8c:91:6b:b5:
28:37:82:c1:93:77:3d:e4:43:ce:3b:43:41:00:a3:45:22:3d:
bd:1c:ec:18:ca:a0:f3:97:11:13:7d:20:04:bd:51:42:6d:eb:
86:80:7d:22:ec:22:65:93:d9:39:e0:ea:ba:8c:35:46:b0:8c:
21:f0:08:5c:39:44:ea:4e:37:3a:07:d4:04:82:e5:1c:bc:ff:
0d:f7:02:c5:40:c3:ee:29:ef:45:5f:71:2d:98:1a:1c:35:cd:
f7:d4:fd:9c:42:18:a4:72:51:98:20:3f:e5:e3:86:2e:10:1a:
c5:dc:05:77:c6:df:ed:0b:49:7f:ea:84:26:da:b6:cb:ff:9f:
7f:c7:72:45:44:e4:6f:7c:a1:1c:d2:93:8f:98:f0:17:20:03:
f3:ba:6b:ff:4b:d2:73:f0:e3:be:6e:44:6d:9b:37:cf:80:77:
8b:d6:ed:ec
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ8cUqC9JFi71T0sHaBnkkT/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OWRiZmRmNGMyMGJkYWU4ZDYxMTg1NjZlY2U3NjQ0NGU0
NmQxNzEwHhcNMjYwNzAxMDYxNjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjMmFjYmVkOTQ5YzY4NGIyMzRjMWFlZTA0ODg0NzU0YzBhNTA4ZTAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAySAPjLIJnMWDftXkAiVMCyx8zwTH
yoXQV2VxXKVSS32Gn34XGGTJRCcPUz1ulYv3sVeKfrlpOYT09U+WBcDK2tfS2cnP
nu3L2vzdwiorgiF9HP7ASU00R+xzTGxFbUCmPY9EfxLYje52OV13ptx0gqcg8DlB
IYpLzq1+Bzgfd4ybKaIluT4QXMbaH0o5ASxmeXesVOc2OZViIFZ5LOzi3rEXpnGj
ZdaOnTN1tLTksBDJ24fk53d/XMiw/XRvCUHA95xoUECmhuMsxls4/XU1XZm9ZmzC
pKI2utJNrEkDQbKKnrJEwHI08zwMWiF9T5Jl4nLm9/7FTzKeharvcIBP3wIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFMKsvtlJxoSyNMGu4EiEdUwKUI4AMB8GA1UdIwQY
MBaAFCedv99MIL2ujWEYVm7OdkRORtFxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEt
MGNmMTA5M2Q0NTQ4LzEvd3F5LTJVbkdoTEkwd2E3Z1NJUjFUQXBRamdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS85ZDU0YTUtMDEzNS00YjE4LTk2MWEtMGNmMTA5M2Q0NTQ4
LzEvSjUyXzMwd2d2YTZOWVJoV2JzNTJSRTVHMFhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA2QjFAwQA
2QjHAwQA2QjJMA0GCSqGSIb3DQEBCwUAA4IBAQCce9BRpMB+6YrHmXyr+PEuawkt
seOCc/CTGiJKWGT3yJKTSncr1YSBtWrRUB6YZKryu/7KiMxH7ivwQt16DLJ9GD5S
Sft339/b33Z4w0b/ggiH2KHazIyRa7UoN4LBk3c95EPOO0NBAKNFIj29HOwYyqDz
lxETfSAEvVFCbeuGgH0i7CJlk9k54Oq6jDVGsIwh8AhcOUTqTjc6B9QEguUcvP8N
9wLFQMPuKe9FX3EtmBocNc331P2cQhikclGYID/l44YuEBrF3AV3xt/tC0l/6oQm
2rbL/59/x3JFRORvfKEc0pOPmPAXIAPzumv/S9Jz8OO+bkRtmzfPgHeL1u3s
-----END CERTIFICATE-----
Generated at Fri Jul 3 19:59:24 2026 by rpki-client