Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/qy_9N_JrjizvbiBUjnaZ-itA-nA.roa
File: qy_9N_JrjizvbiBUjnaZ-itA-nA.roa (raw, json)
Hash identifier: t0sRZS7A21+Dt38wYQdbj+9bcIrB1oFX+fEZMDP6N1I=
Subject key identifier: AB:2F:FD:37:F2:6B:8E:2C:EF:6E:20:54:8E:76:99:FA:2B:40:FA:70
Certificate issuer: /CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Certificate serial: 01A10C562D67888756978AEA80108300CC43
Authority key identifier: 09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/qy_9N_JrjizvbiBUjnaZ-itA-nA.roa
Signing time: Mon 05 Oct 2026 13:52:16 +0000
ROA not before: Mon 05 Oct 2026 13:52:16 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 51783
IP address blocks: 2a11:77c5::/32 maxlen: 32
2a11:bdc6::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.mft
rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 17:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:0c:56:2d:67:88:87:56:97:8a:ea:80:10:83:00:cc:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=093353c1fabe896af8b85fe7600e4634968fcc4c
Validity
Not Before: Oct 5 13:52:16 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab2ffd37f26b8e2cef6e20548e7699fa2b40fa70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8b:2f:ba:cf:79:44:cc:bf:a4:09:1d:a5:78:e1:
df:c8:48:ae:bb:34:c9:d7:66:ad:09:3f:95:d3:90:
bd:62:f1:74:0c:56:5f:05:59:ed:4e:98:f1:40:32:
97:89:e6:f9:c6:9f:e5:44:ad:8e:da:c1:89:12:a9:
41:f3:e0:53:c9:4d:c8:b0:27:55:64:97:69:ea:1d:
a8:f4:48:58:69:5e:4a:96:ac:4e:20:80:10:3c:2c:
7d:05:be:c9:81:26:21:ae:51:8a:9f:02:29:91:e0:
61:9d:53:83:66:e3:f7:b2:dc:37:59:6a:bd:06:67:
84:d5:1b:98:89:51:58:d9:da:02:96:e3:e8:8b:c5:
74:00:c2:4b:67:9d:4b:71:69:05:47:3e:11:b3:70:
83:64:29:95:8b:bf:a6:52:83:f0:94:2e:ff:b6:16:
07:9a:ab:1d:e9:22:62:eb:c2:0e:61:aa:5d:83:d0:
bd:69:be:3f:f6:4c:b3:12:ad:2f:4f:78:15:d2:d7:
5b:b7:1e:62:8b:4c:b3:de:9d:37:5c:5e:e6:b8:ee:
ac:e1:d0:e4:90:fd:e7:d3:6f:ad:e8:ae:f8:46:8e:
13:d5:6b:8f:9a:d4:ee:4b:df:ba:a4:fb:0f:0e:b1:
be:c7:76:85:ed:82:8a:3f:c5:17:30:5a:b6:e2:4e:
df:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:2F:FD:37:F2:6B:8E:2C:EF:6E:20:54:8E:76:99:FA:2B:40:FA:70
X509v3 Authority Key Identifier:
keyid:09:33:53:C1:FA:BE:89:6A:F8:B8:5F:E7:60:0E:46:34:96:8F:CC:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CTNTwfq-iWr4uF_nYA5GNJaPzEw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/qy_9N_JrjizvbiBUjnaZ-itA-nA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5b/7b9336-e9f8-4e27-af4b-239d2fe398b1/1/CTNTwfq-iWr4uF_nYA5GNJaPzEw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a11:77c5::/32
2a11:bdc6::/32
Signature Algorithm: sha256WithRSAEncryption
37:8e:da:1c:83:a4:e3:56:51:f2:a1:2b:cc:a0:93:68:2f:69:
f6:1b:e1:28:ef:7e:78:1a:a7:95:d9:58:c5:97:dd:01:d4:d9:
d8:d0:54:e5:71:d6:79:0f:ea:60:c9:b3:84:55:ea:59:b8:8d:
9d:f0:af:e7:a6:c5:33:34:61:46:b3:de:a0:15:7c:e8:c9:6c:
ef:8b:92:08:88:4a:86:5d:b7:fe:e1:9e:70:c7:ee:0a:4f:07:
ec:c4:04:a3:29:c3:32:9b:63:eb:14:ce:cf:25:33:3d:81:46:
be:54:12:d1:45:b8:da:f8:f4:ae:2a:29:57:df:d6:30:9e:da:
63:44:a9:a7:90:0a:b2:cb:f8:15:5f:da:71:85:3e:e8:de:ba:
0b:d6:19:23:5c:fc:e4:f8:43:61:93:49:65:55:b0:aa:d4:04:
db:fe:96:db:8e:c3:d6:b3:5f:d1:53:23:c3:fa:91:cc:40:66:
79:a1:29:43:cb:58:98:e1:11:8c:3b:0e:04:2f:16:29:40:42:
57:ca:41:f1:09:96:72:09:80:01:8d:db:23:dd:80:20:76:c3:
9a:50:e4:4e:b4:81:11:5a:fc:01:e5:28:fa:30:55:15:ce:4b:
a5:06:e3:4d:36:d6:7b:1a:08:b8:3f:9a:e0:12:9d:c0:9e:e5:
a6:fe:0e:0d
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaEMVi1niIdWl4rqgBCDAMxDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA5MzM1M2MxZmFiZTg5NmFmOGI4NWZlNzYwMGU0NjM0OTY4
ZmNjNGMwHhcNMjYxMDA1MTM1MjE2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjJmZmQzN2YyNmI4ZTJjZWY2ZTIwNTQ4ZTc2OTlmYTJiNDBmYTcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiy+6z3lEzL+kCR2leOHfyEiuuzTJ
12atCT+V05C9YvF0DFZfBVntTpjxQDKXieb5xp/lRK2O2sGJEqlB8+BTyU3IsCdV
ZJdp6h2o9EhYaV5KlqxOIIAQPCx9Bb7JgSYhrlGKnwIpkeBhnVODZuP3stw3WWq9
BmeE1RuYiVFY2doCluPoi8V0AMJLZ51LcWkFRz4Rs3CDZCmVi7+mUoPwlC7/thYH
mqsd6SJi68IOYapdg9C9ab4/9kyzEq0vT3gV0tdbtx5ii0yz3p03XF7muO6s4dDk
kP3n02+t6K74Ro4T1WuPmtTuS9+6pPsPDrG+x3aF7YKKP8UXMFq24k7fTwIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKsv/Tfya44s724gVI52mforQPpwMB8GA1UdIwQY
MBaAFAkzU8H6volq+Lhf52AORjSWj8xMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGIt
MjM5ZDJmZTM5OGIxLzEvcXlfOU5fSnJqaXp2YmlCVWpuYVotaXRBLW5BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yi83YjkzMzYtZTlmOC00ZTI3LWFmNGItMjM5ZDJmZTM5OGIx
LzEvQ1ROVHdmcS1pV3I0dUZfbllBNUdOSmFQekV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAAjAOAwUAKhF3xQMF
ACoRvcYwDQYJKoZIhvcNAQELBQADggEBADeO2hyDpONWUfKhK8ygk2gvafYb4Sjv
fngap5XZWMWX3QHU2djQVOVx1nkP6mDJs4RV6lm4jZ3wr+emxTM0YUaz3qAVfOjJ
bO+LkgiISoZdt/7hnnDH7gpPB+zEBKMpwzKbY+sUzs8lMz2BRr5UEtFFuNr49K4q
KVff1jCe2mNEqaeQCrLL+BVf2nGFPujeugvWGSNc/OT4Q2GTSWVVsKrUBNv+ltuO
w9azX9FTI8P6kcxAZnmhKUPLWJjhEYw7DgQvFilAQlfKQfEJlnIJgAGN2yPdgCB2
w5pQ5E60gRFa/AHlKPowVRXOS6UG40021nsaCLg/muASncCe5ab+Dg0=
-----END CERTIFICATE-----
Generated at Fri Oct 23 02:40:21 2026 by rpki-client