Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Qa-CuFSNM2TqQMy1e4blbVBuZlo.roa
File: Qa-CuFSNM2TqQMy1e4blbVBuZlo.roa (raw, json)
Hash identifier: w1YyCsvVCJpSTiMdsITIdAbhzIjTB/O/XKqMaQ/nCoI=
Subject key identifier: 41:AF:82:B8:54:8D:33:64:EA:40:CC:B5:7B:86:E5:6D:50:6E:66:5A
Certificate issuer: /CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Certificate serial: 019F23690216FB0DC9ED69371543BAF7B71D
Authority key identifier: BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Qa-CuFSNM2TqQMy1e4blbVBuZlo.roa
Signing time: Thu 02 Jul 2026 15:18:32 +0000
ROA not before: Thu 02 Jul 2026 15:18:32 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 213690
IP address blocks: 89.213.134.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 04 Jul 2026 11:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:02:16:fb:0d:c9:ed:69:37:15:43:ba:f7:b7:1d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be5b8a2b106d334b0c6c61e177aa62f44fe0e3b6
Validity
Not Before: Jul 2 15:18:32 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41af82b8548d3364ea40ccb57b86e56d506e665a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:f3:0e:fd:60:3a:ee:66:2d:91:f9:37:69:f0:
15:e1:4c:fe:b6:b4:ed:a9:8f:4f:49:91:87:2c:b8:
62:1f:6d:34:a9:6b:1d:57:8d:a7:bd:c1:54:54:2d:
cf:f1:89:98:ec:dc:88:7b:33:5e:cc:77:bb:95:81:
29:e7:ce:6b:c0:a1:1e:0a:78:d9:a9:98:1f:f3:f1:
f4:99:7a:e6:69:1c:3a:f2:5c:2f:4c:d2:25:fb:bd:
e2:2c:b1:0d:26:c2:c9:ce:dc:78:12:64:3a:b8:98:
a3:c9:1c:13:48:04:59:57:07:ad:58:51:39:f2:3b:
53:fd:7b:bd:b5:70:e5:f1:12:26:6a:6c:3e:97:5d:
3b:4d:5b:ef:5c:e7:89:9f:75:55:66:83:07:a2:b6:
c9:96:a9:dd:30:c6:01:67:07:36:85:f5:93:ef:9d:
c6:65:6f:29:e8:f8:fb:04:d6:2f:8c:a0:c0:a0:92:
f8:08:79:f2:fb:74:0c:1f:6e:b4:68:af:e9:ac:6b:
a4:23:64:a8:98:2a:3e:69:36:e5:61:e5:8c:1c:64:
92:02:4c:66:88:73:f8:f5:06:a9:89:46:f4:36:31:
8d:c9:99:ab:41:31:af:03:5d:3f:f6:d5:96:40:29:
90:16:48:88:4e:7b:ad:eb:86:23:c6:25:b1:ff:c3:
e2:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:AF:82:B8:54:8D:33:64:EA:40:CC:B5:7B:86:E5:6D:50:6E:66:5A
X509v3 Authority Key Identifier:
keyid:BE:5B:8A:2B:10:6D:33:4B:0C:6C:61:E1:77:AA:62:F4:4F:E0:E3:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vluKKxBtM0sMbGHhd6pi9E_g47Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/Qa-CuFSNM2TqQMy1e4blbVBuZlo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/49dc00-97e2-4628-ae39-41228e39ff7c/1/vluKKxBtM0sMbGHhd6pi9E_g47Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.213.134.0/24
Signature Algorithm: sha256WithRSAEncryption
5c:69:d0:a1:cd:9e:07:ea:8c:e1:04:d4:d3:cf:dc:fd:ca:68:
4f:96:88:a6:da:1b:71:03:7c:a1:da:77:6c:80:bd:e1:90:77:
af:14:c6:50:dd:c6:65:f3:32:6e:e2:9f:ca:86:8a:38:fc:23:
94:55:aa:49:16:14:37:79:1c:c0:9b:31:28:71:11:f7:8a:46:
57:09:2a:bf:49:74:af:a1:eb:98:a5:81:c7:19:15:74:60:17:
b9:ef:ee:29:6d:f6:f6:82:8d:39:bc:dd:b6:b5:3a:f8:27:78:
b4:f1:dd:11:4f:c9:a8:7b:cf:44:fc:ba:8f:ad:53:1f:0b:ea:
9c:47:9d:31:66:7f:c7:20:35:d8:3d:0c:06:b5:f8:37:65:1b:
1e:18:01:2a:7b:55:65:ca:07:e9:2c:da:bb:17:67:9f:cb:88:
30:41:cb:16:9d:6c:55:5d:27:89:8a:bc:f4:04:af:3e:01:75:
39:05:3d:b1:ab:48:d3:7b:b2:8d:c2:85:f7:72:d7:b0:76:9a:
6f:5c:66:0f:f7:39:08:37:9a:90:f6:19:80:85:1b:4b:a1:11:
f7:9d:43:ec:6b:44:9b:80:3a:37:d1:84:bd:91:c3:16:37:f3:
cf:2a:96:15:06:58:71:6a:df:fd:d1:4b:4f:5f:19:a9:94:1e:
83:42:0f:a1
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaQIW+w3J7Wk3FUO697cdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNWI4YTJiMTA2ZDMzNGIwYzZjNjFlMTc3YWE2MmY0NGZl
MGUzYjYwHhcNMjYwNzAyMTUxODMyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWFmODJiODU0OGQzMzY0ZWE0MGNjYjU3Yjg2ZTU2ZDUwNmU2NjVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8PMO/WA67mYtkfk3afAV4Uz+trTt
qY9PSZGHLLhiH200qWsdV42nvcFUVC3P8YmY7NyIezNezHe7lYEp585rwKEeCnjZ
qZgf8/H0mXrmaRw68lwvTNIl+73iLLENJsLJztx4EmQ6uJijyRwTSARZVwetWFE5
8jtT/Xu9tXDl8RImamw+l107TVvvXOeJn3VVZoMHorbJlqndMMYBZwc2hfWT753G
ZW8p6Pj7BNYvjKDAoJL4CHny+3QMH260aK/prGukI2SomCo+aTblYeWMHGSSAkxm
iHP49QapiUb0NjGNyZmrQTGvA10/9tWWQCmQFkiITnut64YjxiWx/8PiFwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEGvgrhUjTNk6kDMtXuG5W1QbmZaMB8GA1UdIwQY
MBaAFL5biisQbTNLDGxh4XeqYvRP4OO2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzkt
NDEyMjhlMzlmZjdjLzEvUWEtQ3VGU05NMlRxUU15MWU0YmxiVkJ1WmxvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS80OWRjMDAtOTdlMi00NjI4LWFlMzktNDEyMjhlMzlmZjdj
LzEvdmx1S0t4QnRNMHNNYkdIaGQ2cGk5RV9nNDdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWdWGMA0G
CSqGSIb3DQEBCwUAA4IBAQBcadChzZ4H6ozhBNTTz9z9ymhPloim2htxA3yh2nds
gL3hkHevFMZQ3cZl8zJu4p/Khoo4/COUVapJFhQ3eRzAmzEocRH3ikZXCSq/SXSv
oeuYpYHHGRV0YBe57+4pbfb2go05vN22tTr4J3i08d0RT8moe89E/LqPrVMfC+qc
R50xZn/HIDXYPQwGtfg3ZRseGAEqe1VlygfpLNq7F2efy4gwQcsWnWxVXSeJirz0
BK8+AXU5BT2xq0jTe7KNwoX3ctewdppvXGYP9zkIN5qQ9hmAhRtLoRH3nUPsa0Sb
gDo30YS9kcMWN/PPKpYVBlhxat/90UtPXxmplB6DQg+h
-----END CERTIFICATE-----
Generated at Fri Jul 3 18:16:33 2026 by rpki-client