Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/GQlxS2-2c8Qqe3N2rZ2XpSodHkw.roa
File: GQlxS2-2c8Qqe3N2rZ2XpSodHkw.roa (raw, json)
Hash identifier: MKwXwqWUiaVeAn/7/iSA8hVPROI+Jn0tqGxs7u6XJ/4=
Subject key identifier: 19:09:71:4B:6F:B6:73:C4:2A:7B:73:76:AD:9D:97:A5:2A:1D:1E:4C
Certificate issuer: /CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Certificate serial: 019DAFD776CC86F23811C173A7A82306CC96
Authority key identifier: 57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/GQlxS2-2c8Qqe3N2rZ2XpSodHkw.roa
Signing time: Tue 21 Apr 2026 11:40:26 +0000
ROA not before: Tue 21 Apr 2026 11:40:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35704
IP address blocks: 2a02:11ff:400::/46 maxlen: 46
2a02:11ff:404::/46 maxlen: 46
2a02:11ff:408::/46 maxlen: 46
2a02:11ff:40c::/46 maxlen: 46
2a02:11ff:410::/46 maxlen: 46
2a02:11ff:414::/46 maxlen: 46
2a02:11ff:418::/46 maxlen: 46
2a02:11ff:41c::/46 maxlen: 46
2a02:11ff:420::/46 maxlen: 46
2a02:11ff:424::/46 maxlen: 46
2a02:11ff:428::/46 maxlen: 46
2a02:11ff:42c::/46 maxlen: 46
2a02:11ff:430::/46 maxlen: 46
2a02:11ff:434::/46 maxlen: 46
2a02:11ff:438::/46 maxlen: 46
2a02:11ff:43c::/46 maxlen: 46
2a02:11ff:440::/46 maxlen: 46
2a02:11ff:444::/46 maxlen: 46
2a02:11ff:448::/46 maxlen: 46
2a02:11ff:44c::/46 maxlen: 46
2a02:11ff:450::/46 maxlen: 46
2a02:11ff:454::/46 maxlen: 46
2a02:11ff:458::/46 maxlen: 46
2a02:11ff:45c::/46 maxlen: 46
2a02:11ff:460::/46 maxlen: 46
2a02:11ff:464::/46 maxlen: 46
2a02:11ff:468::/46 maxlen: 46
2a02:11ff:46c::/46 maxlen: 46
2a02:11ff:470::/46 maxlen: 46
2a02:11ff:474::/46 maxlen: 46
2a02:11ff:478::/46 maxlen: 46
2a02:11ff:47c::/46 maxlen: 46
2a02:11ff:480::/46 maxlen: 46
2a02:11ff:484::/46 maxlen: 46
2a02:11ff:488::/46 maxlen: 46
2a02:11ff:48c::/46 maxlen: 46
2a02:11ff:490::/46 maxlen: 46
2a02:11ff:494::/46 maxlen: 46
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Apr 2026 20:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:af:d7:76:cc:86:f2:38:11:c1:73:a7:a8:23:06:cc:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57182aab5ad9efa380a6c6f06c016e158be977bc
Validity
Not Before: Apr 21 11:40:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1909714b6fb673c42a7b7376ad9d97a52a1d1e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:48:20:99:5d:21:fa:82:ef:a8:e3:8d:d5:72:
4b:4e:66:ef:05:cc:a2:45:70:e3:2d:36:30:fe:58:
5e:14:30:2f:be:03:cd:b0:93:f0:59:21:6f:86:1d:
13:a0:13:cc:52:ac:16:29:db:d5:7f:c4:88:7c:0a:
19:5f:24:02:7c:f2:bc:6e:37:4a:70:e3:5b:bc:04:
87:90:66:01:3f:df:d7:18:13:85:e7:63:d2:05:cd:
09:99:f4:e3:d3:a6:9d:19:61:98:72:2d:f6:3e:7a:
e4:be:4d:7f:e7:25:92:f8:12:fa:8f:f8:5a:df:fa:
4d:77:7d:3f:20:3d:a2:67:04:f5:30:7d:54:08:c2:
a9:b2:1f:aa:fe:bb:27:48:d6:e5:eb:67:35:d5:6d:
13:22:b2:dd:49:59:8f:df:b7:e4:48:65:dd:2d:fa:
12:59:f3:c7:ff:bb:fe:4f:16:b6:c7:42:53:52:85:
37:9d:66:7b:94:15:5c:ad:6b:bd:e4:19:d7:41:37:
81:8a:7b:b1:74:ac:eb:8b:a2:52:8c:e6:77:14:4f:
55:56:d1:23:76:a7:26:af:8e:ce:ad:24:8c:47:d1:
f2:67:3c:cd:a3:81:2b:01:bd:08:0f:eb:d6:bd:9c:
02:cc:c7:ae:b5:4a:66:e0:85:8f:b9:86:fc:b0:66:
95:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:09:71:4B:6F:B6:73:C4:2A:7B:73:76:AD:9D:97:A5:2A:1D:1E:4C
X509v3 Authority Key Identifier:
keyid:57:18:2A:AB:5A:D9:EF:A3:80:A6:C6:F0:6C:01:6E:15:8B:E9:77:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vxgqq1rZ76OApsbwbAFuFYvpd7w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/GQlxS2-2c8Qqe3N2rZ2XpSodHkw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/8c51cb-a3bd-476d-880f-a96c6266abdb/1/Vxgqq1rZ76OApsbwbAFuFYvpd7w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a02:11ff:400::-2a02:11ff:497:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
61:d3:f3:c0:e0:8a:90:0f:b6:96:52:35:4d:86:2c:cd:34:29:
59:b1:25:d6:f8:82:46:32:b6:75:b1:4a:a5:c4:0c:a3:74:02:
84:de:8a:ab:e2:3b:f1:1d:e3:f5:6f:23:86:07:0f:0e:63:0b:
1b:fb:49:46:79:f1:c5:e9:82:b6:6e:16:ff:00:de:e7:5b:18:
41:92:38:36:17:cc:39:ab:21:09:fa:02:25:eb:86:4d:47:07:
23:49:9b:bb:ff:06:36:66:7e:ba:5a:81:04:13:19:f3:2c:4f:
31:03:2f:11:8f:17:4d:3b:f4:4e:33:fd:ca:58:d7:43:59:b1:
b3:bc:19:1f:9b:90:3b:eb:47:d0:ed:d9:3c:ab:80:4f:6e:ed:
f7:54:92:18:47:f6:c1:19:71:21:5e:2c:0c:44:05:90:c3:6e:
3e:77:c4:ff:e1:c1:97:d4:f3:19:f1:e1:29:9a:bf:36:a2:55:
a2:60:5b:cc:f7:bf:2d:0c:47:8f:94:bf:fc:92:f5:06:9a:52:
a8:32:84:18:45:92:f4:53:39:49:eb:1e:6e:19:70:b5:1e:cf:
cf:fc:b0:e4:1a:b9:41:05:44:8a:e8:62:a2:fc:80:48:f2:51:
ae:a0:db:33:11:56:90:f2:9d:b4:d0:38:84:74:c9:53:65:3a:
2e:e8:9b:9a
-----BEGIN CERTIFICATE-----
MIIFCjCCA/KgAwIBAgISAZ2v13bMhvI4EcFzp6gjBsyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTgyYWFiNWFkOWVmYTM4MGE2YzZmMDZjMDE2ZTE1OGJl
OTc3YmMwHhcNMjYwNDIxMTE0MDI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxOTA5NzE0YjZmYjY3M2M0MmE3YjczNzZhZDlkOTdhNTJhMWQxZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1UggmV0h+oLvqOON1XJLTmbvBcyi
RXDjLTYw/lheFDAvvgPNsJPwWSFvhh0ToBPMUqwWKdvVf8SIfAoZXyQCfPK8bjdK
cONbvASHkGYBP9/XGBOF52PSBc0JmfTj06adGWGYci32Pnrkvk1/5yWS+BL6j/ha
3/pNd30/ID2iZwT1MH1UCMKpsh+q/rsnSNbl62c11W0TIrLdSVmP37fkSGXdLfoS
WfPH/7v+Txa2x0JTUoU3nWZ7lBVcrWu95BnXQTeBinuxdKzri6JSjOZ3FE9VVtEj
dqcmr47OrSSMR9HyZzzNo4ErAb0ID+vWvZwCzMeutUpm4IWPuYb8sGaVsQIDAQAB
o4ICFjCCAhIwHQYDVR0OBBYEFBkJcUtvtnPEKntzdq2dl6UqHR5MMB8GA1UdIwQY
MBaAFFcYKqta2e+jgKbG8GwBbhWL6Xe8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYt
YTk2YzYyNjZhYmRiLzEvR1FseFMyLTJjOFFxZTNOMnJaMlhwU29kSGt3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni84YzUxY2ItYTNiZC00NzZkLTg4MGYtYTk2YzYyNjZhYmRi
LzEvVnhncXExclo3Nk9BcHNid2JBRnVGWXZwZDd3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCwGCCsGAQUFBwEHAQH/BB0wGzAZBAIAAjATMBEDBgIqAhH/
BAMHAyoCEf8EkDANBgkqhkiG9w0BAQsFAAOCAQEAYdPzwOCKkA+2llI1TYYszTQp
WbEl1viCRjK2dbFKpcQMo3QChN6Kq+I78R3j9W8jhgcPDmMLG/tJRnnxxemCtm4W
/wDe51sYQZI4NhfMOashCfoCJeuGTUcHI0mbu/8GNmZ+ulqBBBMZ8yxPMQMvEY8X
TTv0TjP9yljXQ1mxs7wZH5uQO+tH0O3ZPKuAT27t91SSGEf2wRlxIV4sDEQFkMNu
PnfE/+HBl9TzGfHhKZq/NqJVomBbzPe/LQxHj5S//JL1BppSqDKEGEWS9FM5Sese
bhlwtR7Pz/yw5Bq5QQVEiuhiovyASPJRrqDbMxFWkPKdtNA4hHTJU2U6Luibmg==
-----END CERTIFICATE-----
Generated at Wed Apr 22 04:16:32 2026 by rpki-client