Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/QQUsIkD7aucZFTAZB0Xgl31TwLY.roa
File: QQUsIkD7aucZFTAZB0Xgl31TwLY.roa (raw, json)
Hash identifier: fDDmFwc7EZpq9AGdjyW09jRYkia9x5KvdRSDoooECTA=
Subject key identifier: 41:05:2C:22:40:FB:6A:E7:19:15:30:19:07:45:E0:97:7D:53:C0:B6
Certificate issuer: /CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Certificate serial: 019E4F619E154BCDE81DF20453F3E0E3FCA2
Authority key identifier: 6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/QQUsIkD7aucZFTAZB0Xgl31TwLY.roa
Signing time: Fri 22 May 2026 11:10:57 +0000
ROA not before: Fri 22 May 2026 11:10:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 18526
IP address blocks: 178.253.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 04 Jun 2026 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:61:9e:15:4b:cd:e8:1d:f2:04:53:f3:e0:e3:fc:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f84e4738a70ea39c08cef210432ae399ec7e915
Validity
Not Before: May 22 11:10:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41052c2240fb6ae7191530190745e0977d53c0b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:b5:4a:b9:6a:cb:58:5e:45:d9:d5:4d:8c:3e:
f4:85:af:35:dd:30:b9:2c:a9:93:32:4b:a4:50:0c:
3d:e4:91:c8:18:a4:bf:46:db:29:8b:c5:ef:81:82:
b8:c7:52:dc:c2:70:89:f1:65:f3:fd:b6:21:f2:a5:
96:30:f4:4a:5a:41:a5:0d:ec:2e:4d:35:e7:86:1e:
21:6b:2a:1d:6c:49:59:33:b7:7e:56:ce:28:ca:60:
54:c7:40:06:37:ce:1a:73:9f:d2:98:5a:2a:2f:69:
67:84:a5:25:8c:86:4f:85:81:18:b5:83:6b:42:1b:
e7:eb:95:e2:ed:af:64:2b:83:c9:14:fd:90:b4:20:
5f:28:12:30:43:6e:dd:88:a3:4d:d5:0c:6d:4c:de:
9f:80:54:39:6c:3f:10:a6:fc:3d:42:98:2b:9f:4a:
0c:b3:87:04:e6:a3:7f:a5:89:27:9b:49:dc:a1:01:
03:c7:d1:75:ed:81:83:42:23:47:c3:18:37:95:b9:
5d:52:d5:34:59:9d:33:c5:22:ec:02:96:9f:db:ea:
b0:0b:08:6f:87:dd:61:08:d8:57:9a:3e:8e:7f:23:
ad:0d:dc:6f:69:58:de:4b:7c:bf:84:07:4f:04:16:
ff:ac:fb:e8:5e:10:44:40:9c:9e:3e:a6:5c:ca:d3:
a2:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:05:2C:22:40:FB:6A:E7:19:15:30:19:07:45:E0:97:7D:53:C0:B6
X509v3 Authority Key Identifier:
keyid:6F:84:E4:73:8A:70:EA:39:C0:8C:EF:21:04:32:AE:39:9E:C7:E9:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/QQUsIkD7aucZFTAZB0Xgl31TwLY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/ddf8b3-1c08-495c-8ddf-fae5dbed3b1b/1/b4Tkc4pw6jnAjO8hBDKuOZ7H6RU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
178.253.237.0/24
Signature Algorithm: sha256WithRSAEncryption
3c:a7:64:59:ce:b0:da:f7:49:2e:3b:8b:f6:7b:ef:24:50:87:
70:24:ba:40:b4:36:e4:d1:51:09:43:c7:49:24:8a:dc:52:32:
70:dc:26:b0:f7:68:cb:b5:fc:30:4a:84:ce:43:4a:ce:db:a3:
2f:20:53:31:ea:c5:33:9c:10:74:4c:4a:e0:02:98:13:c5:76:
a3:5c:68:43:12:7b:98:8d:95:50:6e:7a:d1:2c:b4:0b:2d:3b:
2d:6e:77:56:44:14:fa:cc:e2:94:64:db:5e:25:29:c2:c0:83:
5f:3f:f8:d6:08:2a:0f:da:72:07:50:44:68:72:68:d6:e5:b4:
dd:3b:21:a1:cc:23:87:c8:66:fe:80:04:75:95:35:6c:ca:88:
54:c5:e6:8f:78:56:34:5b:85:41:9e:a8:15:45:e4:d6:4c:ab:
0e:6c:e3:5a:c9:47:80:24:95:0c:5c:ee:5e:e9:a5:06:91:d9:
74:58:57:6d:9c:4a:00:0e:e9:0d:3a:c4:ac:83:1c:42:b6:39:
70:6e:4e:b2:2b:73:04:83:6a:4c:0c:9e:80:6d:53:f4:7b:c2:
87:90:ba:66:28:99:d2:a4:a4:bd:45:25:ca:e5:48:4b:99:e9:
a6:b8:7c:52:d2:25:25:f4:fe:67:a2:fd:f0:d7:03:2c:46:60:
b6:df:b9:1a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5PYZ4VS83oHfIEU/Pg4/yiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmODRlNDczOGE3MGVhMzljMDhjZWYyMTA0MzJhZTM5OWVj
N2U5MTUwHhcNMjYwNTIyMTExMDU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTA1MmMyMjQwZmI2YWU3MTkxNTMwMTkwNzQ1ZTA5NzdkNTNjMGI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA17VKuWrLWF5F2dVNjD70ha813TC5
LKmTMkukUAw95JHIGKS/Rtspi8XvgYK4x1LcwnCJ8WXz/bYh8qWWMPRKWkGlDewu
TTXnhh4hayodbElZM7d+Vs4oymBUx0AGN84ac5/SmFoqL2lnhKUljIZPhYEYtYNr
Qhvn65Xi7a9kK4PJFP2QtCBfKBIwQ27diKNN1QxtTN6fgFQ5bD8Qpvw9Qpgrn0oM
s4cE5qN/pYknm0ncoQEDx9F17YGDQiNHwxg3lbldUtU0WZ0zxSLsApaf2+qwCwhv
h91hCNhXmj6OfyOtDdxvaVjeS3y/hAdPBBb/rPvoXhBEQJyePqZcytOiuQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEEFLCJA+2rnGRUwGQdF4Jd9U8C2MB8GA1UdIwQY
MBaAFG+E5HOKcOo5wIzvIQQyrjmex+kVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYt
ZmFlNWRiZWQzYjFiLzEvUVFVc0lrRDdhdWNaRlRBWkIwWGdsMzFUd0xZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi9kZGY4YjMtMWMwOC00OTVjLThkZGYtZmFlNWRiZWQzYjFi
LzEvYjRUa2M0cHc2am5Bak84aEJES3VPWjdINlJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAsv3tMA0G
CSqGSIb3DQEBCwUAA4IBAQA8p2RZzrDa90kuO4v2e+8kUIdwJLpAtDbk0VEJQ8dJ
JIrcUjJw3Caw92jLtfwwSoTOQ0rO26MvIFMx6sUznBB0TErgApgTxXajXGhDEnuY
jZVQbnrRLLQLLTstbndWRBT6zOKUZNteJSnCwINfP/jWCCoP2nIHUERocmjW5bTd
OyGhzCOHyGb+gAR1lTVsyohUxeaPeFY0W4VBnqgVReTWTKsObONayUeAJJUMXO5e
6aUGkdl0WFdtnEoADukNOsSsgxxCtjlwbk6yK3MEg2pMDJ6AbVP0e8KHkLpmKJnS
pKS9RSXK5UhLmemmuHxS0iUl9P5nov3w1wMsRmC237ka
-----END CERTIFICATE-----
Generated at Thu Jun 4 05:17:01 2026 by rpki-client