Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Q2WeRe_yaIvjYn3-NsOv9G7CUPo.roa
File: Q2WeRe_yaIvjYn3-NsOv9G7CUPo.roa (raw, json)
Hash identifier: Vn5kohhOIE87H5SyXZzi8zhn7H25wapLrfhiWs9NILg=
Subject key identifier: 43:65:9E:45:EF:F2:68:8B:E3:62:7D:FE:36:C3:AF:F4:6E:C2:50:FA
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01A056E3EB054B89354E853B4377E485BE17
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Q2WeRe_yaIvjYn3-NsOv9G7CUPo.roa
Signing time: Mon 31 Aug 2026 08:16:12 +0000
ROA not before: Mon 31 Aug 2026 08:16:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 80.71.237.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:56:e3:eb:05:4b:89:35:4e:85:3b:43:77:e4:85:be:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Aug 31 08:16:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43659e45eff2688be3627dfe36c3aff46ec250fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:2e:b7:8f:cc:a0:ee:80:9c:dc:c0:20:06:d7:
36:b8:02:0d:6f:77:dd:d5:c5:60:93:e1:f5:5d:ef:
a8:4e:ce:10:35:bf:40:43:7a:21:5c:1c:0d:10:bc:
ca:59:0c:91:60:b9:a5:fb:02:50:a6:13:f6:bb:d5:
f9:12:7b:e1:d5:7e:2e:1c:a8:52:7d:6a:00:5b:f3:
f3:55:6b:84:05:f4:99:a0:d7:e4:a4:4c:99:e7:ad:
e0:8a:a9:30:0c:9b:d8:cb:30:1b:5e:9b:28:0a:58:
20:90:d6:0f:d5:2f:c3:ff:9d:a4:5b:7d:39:95:d7:
9a:b0:21:27:4d:90:c5:4b:6d:33:cc:00:0b:11:13:
ed:30:7a:48:dc:5c:93:c3:17:8b:45:b6:bd:4c:e9:
cf:28:0b:3f:2a:d1:a6:63:69:2f:6c:95:22:db:e5:
df:5a:85:66:ab:ba:27:3d:98:4a:30:93:c1:33:4a:
9e:10:ea:57:76:4b:5f:f6:7f:0d:6b:f7:b1:5b:be:
cc:f5:d9:e9:80:0a:f6:43:06:a9:4f:28:08:94:1f:
c3:28:14:04:cd:21:36:92:3a:8d:19:5d:4b:51:f1:
b5:a0:77:ab:dc:65:97:d2:81:e9:45:97:00:82:b3:
72:4d:8f:6d:4f:d5:d4:55:f7:6b:fa:d3:0f:d9:ab:
bc:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:65:9E:45:EF:F2:68:8B:E3:62:7D:FE:36:C3:AF:F4:6E:C2:50:FA
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/Q2WeRe_yaIvjYn3-NsOv9G7CUPo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.237.0/24
Signature Algorithm: sha256WithRSAEncryption
28:23:d0:04:9a:ec:91:91:88:1f:f5:9a:76:f2:2b:12:9c:f2:
f4:5e:cb:b1:a0:c3:2a:29:81:56:38:01:8f:3b:15:02:ab:3a:
31:d5:95:40:d4:61:f0:7e:92:47:9b:79:9d:42:49:d6:c4:5e:
84:c1:5c:f4:3e:ea:9e:02:c8:0c:e6:62:d9:ce:38:e0:ee:75:
68:d2:e5:25:e1:95:23:ee:39:c0:f5:6a:0d:4c:be:88:35:f2:
d5:7a:4e:d3:c2:97:81:cb:bb:87:96:3d:66:d8:f1:9c:df:54:
4f:71:e6:7b:cf:31:84:2c:f1:0c:b7:c0:1c:db:aa:45:a6:fc:
8c:3c:76:e9:96:97:45:4c:43:c1:d8:9a:e2:d3:f1:d0:03:67:
d7:40:f9:2c:7a:f6:d3:e4:46:3e:5c:50:d3:1d:07:bb:80:37:
4f:fb:7c:bb:c2:e2:e7:9d:d2:71:0d:f7:59:d9:d5:67:e9:42:
44:5c:d4:5e:05:45:0e:93:5b:d3:f1:1a:a4:29:c5:16:77:7f:
b2:5d:39:61:d1:92:4e:1a:54:d1:46:d2:96:24:0a:34:ae:91:
ec:03:79:21:3f:74:47:7d:e8:cc:dd:8e:a2:16:51:58:5d:33:
38:95:11:db:1d:30:89:f5:66:5f:9b:da:01:b6:ee:f8:bc:a4:
91:ad:30:d3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaBW4+sFS4k1ToU7Q3fkhb4XMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjYwODMxMDgxNjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MzY1OWU0NWVmZjI2ODhiZTM2MjdkZmUzNmMzYWZmNDZlYzI1MGZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9S63j8yg7oCc3MAgBtc2uAINb3fd
1cVgk+H1Xe+oTs4QNb9AQ3ohXBwNELzKWQyRYLml+wJQphP2u9X5Envh1X4uHKhS
fWoAW/PzVWuEBfSZoNfkpEyZ563giqkwDJvYyzAbXpsoClggkNYP1S/D/52kW305
ldeasCEnTZDFS20zzAALERPtMHpI3FyTwxeLRba9TOnPKAs/KtGmY2kvbJUi2+Xf
WoVmq7onPZhKMJPBM0qeEOpXdktf9n8Na/exW77M9dnpgAr2QwapTygIlB/DKBQE
zSE2kjqNGV1LUfG1oHer3GWX0oHpRZcAgrNyTY9tT9XUVfdr+tMP2au8rwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFENlnkXv8miL42J9/jbDr/RuwlD6MB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvUTJXZVJlX3lhSXZqWW4zLU5zT3Y5RzdDVVBvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUEftMA0G
CSqGSIb3DQEBCwUAA4IBAQAoI9AEmuyRkYgf9Zp28isSnPL0XsuxoMMqKYFWOAGP
OxUCqzox1ZVA1GHwfpJHm3mdQknWxF6EwVz0PuqeAsgM5mLZzjjg7nVo0uUl4ZUj
7jnA9WoNTL6INfLVek7TwpeBy7uHlj1m2PGc31RPceZ7zzGELPEMt8Ac26pFpvyM
PHbplpdFTEPB2Jri0/HQA2fXQPksevbT5EY+XFDTHQe7gDdP+3y7wuLnndJxDfdZ
2dVn6UJEXNReBUUOk1vT8RqkKcUWd3+yXTlh0ZJOGlTRRtKWJAo0rpHsA3khP3RH
fejM3Y6iFlFYXTM4lRHbHTCJ9WZfm9oBtu74vKSRrTDT
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:26:58 2026 by rpki-client