Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/QSUim-oJI7quDVdAPsLmjgxRP2Y.roa
File: QSUim-oJI7quDVdAPsLmjgxRP2Y.roa (raw, json)
Hash identifier: eJHNXVy0/883iOfWh3J9+VQsmwNkzJsJL/pzsURiO8s=
Subject key identifier: 41:25:22:9B:EA:09:23:BA:AE:0D:57:40:3E:C2:E6:8E:0C:51:3F:66
Certificate issuer: /CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Certificate serial: 019FB49CB04BD7AC33B25A0FB38D438CFE07
Authority key identifier: 2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/QSUim-oJI7quDVdAPsLmjgxRP2Y.roa
Signing time: Thu 30 Jul 2026 19:59:55 +0000
ROA not before: Thu 30 Jul 2026 19:59:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42375
IP address blocks: 2a06:7840::/29 maxlen: 29
2a09:3c80::/29 maxlen: 29
2a09:cb00::/29 maxlen: 29
2a0b:2a80::/29 maxlen: 29
2a0b:2d83::/32 maxlen: 32
2a0b:2d84::/32 maxlen: 32
2a0d:4440::/29 maxlen: 29
2a0d:fb40::/29 maxlen: 29
2a0f:f02::/32 maxlen: 32
2a0f:f03::/32 maxlen: 32
2a0f:f04::/30 maxlen: 30
2a0f:59c0::/29 maxlen: 29
2a0f:ff80::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.mft
rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 13 Aug 2026 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b4:9c:b0:4b:d7:ac:33:b2:5a:0f:b3:8d:43:8c:fe:07
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2e1164a9b5013d62f051344f6df91f13bc7ecb0f
Validity
Not Before: Jul 30 19:59:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4125229bea0923baae0d57403ec2e68e0c513f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:96:af:de:96:26:1d:a0:12:14:fa:77:a1:c7:
b9:44:78:e2:bf:fb:4c:fb:04:a0:6a:86:c9:8d:96:
03:60:c5:d2:ef:75:96:26:09:1d:a3:eb:99:97:9a:
1b:04:36:3c:62:7a:ac:7c:d5:ad:3a:24:dc:50:0f:
8a:9f:9f:96:fd:27:9e:b1:db:1f:51:e2:7f:a3:86:
45:84:a5:83:86:00:5c:da:01:78:30:6f:e3:97:c5:
b3:ab:6f:50:e1:36:f9:05:33:7f:a0:6e:42:ac:ef:
4e:68:87:fa:b3:76:1c:e2:c3:fd:65:79:6a:df:70:
15:75:39:30:7d:8a:bc:dd:10:66:96:e0:20:49:4d:
a6:53:7f:57:b9:16:12:41:53:49:8c:98:af:16:c3:
e5:d4:55:d3:6f:51:a9:0c:6d:cc:a6:29:96:55:ed:
b1:31:e7:c9:67:77:97:b2:e6:e7:a5:b8:e3:0f:fb:
c9:9a:e0:b4:b5:81:22:0e:46:97:9f:29:92:32:e6:
03:e8:77:2e:e1:d7:f2:2d:cd:d0:50:f4:32:af:6b:
b0:19:e1:22:85:c2:bb:a1:67:d4:29:95:bb:96:78:
88:79:f9:19:2f:d6:2c:58:3b:78:2c:76:ff:2e:22:
49:ee:d7:c9:fa:22:83:07:8d:14:68:08:29:22:51:
e7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:25:22:9B:EA:09:23:BA:AE:0D:57:40:3E:C2:E6:8E:0C:51:3F:66
X509v3 Authority Key Identifier:
keyid:2E:11:64:A9:B5:01:3D:62:F0:51:34:4F:6D:F9:1F:13:BC:7E:CB:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LhFkqbUBPWLwUTRPbfkfE7x-yw8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/QSUim-oJI7quDVdAPsLmjgxRP2Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/fb4696-678f-4d45-a091-fd7f17bb1a5c/1/LhFkqbUBPWLwUTRPbfkfE7x-yw8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a06:7840::/29
2a09:3c80::/29
2a09:cb00::/29
2a0b:2a80::/29
2a0b:2d83::-2a0b:2d84:ffff:ffff:ffff:ffff:ffff:ffff
2a0d:4440::/29
2a0d:fb40::/29
2a0f:f02::-2a0f:f07:ffff:ffff:ffff:ffff:ffff:ffff
2a0f:59c0::/29
2a0f:ff80::/29
Signature Algorithm: sha256WithRSAEncryption
80:d5:93:81:2a:46:79:d2:f3:b6:f1:cf:1f:75:a7:c2:32:dd:
3d:58:56:24:6b:e5:e6:41:56:1c:15:9f:76:4d:36:72:e4:d8:
3a:90:4e:fa:03:71:f7:77:39:91:e4:17:3c:7e:d0:c5:e8:f2:
77:65:56:15:0b:a4:bb:74:63:44:18:af:9d:ba:10:37:9a:a0:
92:88:24:87:e3:95:0d:9d:e9:ae:0e:d6:4e:62:94:3b:0a:98:
80:89:0a:04:70:e1:22:82:11:37:7a:3d:6f:06:fb:41:5f:a8:
72:7f:2d:99:8b:bc:cd:58:4a:44:81:38:b9:19:70:74:fd:6c:
3c:cd:ce:88:80:ed:7f:05:4b:11:0f:84:e3:0c:e1:cd:8f:8d:
8d:7a:c5:c5:83:18:dd:61:d7:a9:dd:e5:98:7b:44:27:cf:15:
e0:3c:80:97:99:32:93:f8:d7:23:16:54:35:7a:26:09:07:03:
09:f2:bc:ca:f7:78:29:dc:7b:49:ca:87:33:59:06:79:d8:6f:
d1:23:2b:b2:be:8b:3f:3c:8f:71:92:8d:1b:55:9c:5a:e2:f9:
41:23:6a:7c:f4:95:d7:61:cb:0e:60:45:06:63:80:ed:a0:ca:
01:76:11:f0:4a:9f:d1:48:b9:6e:ff:3b:86:7b:a2:e7:83:31:
ab:fd:77:09
-----BEGIN CERTIFICATE-----
MIIFTzCCBDegAwIBAgISAZ+0nLBL16wzsloPs41DjP4HMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJlMTE2NGE5YjUwMTNkNjJmMDUxMzQ0ZjZkZjkxZjEzYmM3
ZWNiMGYwHhcNMjYwNzMwMTk1OTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTI1MjI5YmVhMDkyM2JhYWUwZDU3NDAzZWMyZTY4ZTBjNTEzZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw5av3pYmHaASFPp3oce5RHjiv/tM
+wSgaobJjZYDYMXS73WWJgkdo+uZl5obBDY8YnqsfNWtOiTcUA+Kn5+W/Seesdsf
UeJ/o4ZFhKWDhgBc2gF4MG/jl8Wzq29Q4Tb5BTN/oG5CrO9OaIf6s3Yc4sP9ZXlq
33AVdTkwfYq83RBmluAgSU2mU39XuRYSQVNJjJivFsPl1FXTb1GpDG3MpimWVe2x
MefJZ3eXsubnpbjjD/vJmuC0tYEiDkaXnymSMuYD6Hcu4dfyLc3QUPQyr2uwGeEi
hcK7oWfUKZW7lniIefkZL9YsWDt4LHb/LiJJ7tfJ+iKDB40UaAgpIlHnKwIDAQAB
o4ICWzCCAlcwHQYDVR0OBBYEFEElIpvqCSO6rg1XQD7C5o4MUT9mMB8GA1UdIwQY
MBaAFC4RZKm1AT1i8FE0T235HxO8fssPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEt
ZmQ3ZjE3YmIxYTVjLzEvUVNVaW0tb0pJN3F1RFZkQVBzTG1qZ3hSUDJZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9mYjQ2OTYtNjc4Zi00ZDQ1LWEwOTEtZmQ3ZjE3YmIxYTVj
LzEvTGhGa3FiVUJQV0x3VVRSUGJma2ZFN3gteXc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHEGCCsGAQUFBwEHAQH/BGIwYDBeBAIAAjBYAwUDKgZ4QAMF
AyoJPIADBQMqCcsAAwUDKgsqgDAOAwUAKgstgwMFACoLLYQDBQMqDURAAwUDKg37
QDAOAwUBKg8PAgMFAyoPDwADBQMqD1nAAwUDKg//gDANBgkqhkiG9w0BAQsFAAOC
AQEAgNWTgSpGedLztvHPH3WnwjLdPVhWJGvl5kFWHBWfdk02cuTYOpBO+gNx93c5
keQXPH7Qxejyd2VWFQuku3RjRBivnboQN5qgkogkh+OVDZ3prg7WTmKUOwqYgIkK
BHDhIoIRN3o9bwb7QV+ocn8tmYu8zVhKRIE4uRlwdP1sPM3OiIDtfwVLEQ+E4wzh
zY+NjXrFxYMY3WHXqd3lmHtEJ88V4DyAl5kyk/jXIxZUNXomCQcDCfK8yvd4Kdx7
ScqHM1kGedhv0SMrsr6LPzyPcZKNG1WcWuL5QSNqfPSV12HLDmBFBmOA7aDKAXYR
8Eqf0Ui5bv87hnui54Mxq/13CQ==
-----END CERTIFICATE-----
Generated at Wed Aug 12 16:48:39 2026 by rpki-client