Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/QVN9r5UaSNS6ZHGlLVWnFmnGcFY.roa
File: QVN9r5UaSNS6ZHGlLVWnFmnGcFY.roa (raw, json)
Hash identifier: hnbKkDbftBuvAa8vwX3rQQSx/8OuOGXHnpFHQ2CyWKo=
Subject key identifier: 41:53:7D:AF:95:1A:48:D4:BA:64:71:A5:2D:55:A7:16:69:C6:70:56
Certificate issuer: /CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
Certificate serial: 019F2368AD58A64E9C63B346B6791188E6EE
Authority key identifier: BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/QVN9r5UaSNS6ZHGlLVWnFmnGcFY.roa
Signing time: Thu 02 Jul 2026 15:18:10 +0000
ROA not before: Thu 02 Jul 2026 15:18:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203020
IP address blocks: 188.208.143.0/24 maxlen: 24
188.241.60.0/24 maxlen: 24
188.241.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 15:00:22 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:ad:58:a6:4e:9c:63:b3:46:b6:79:11:88:e6:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd244d7663ac4d1b1048bcbf697f1693f8853d9e
Validity
Not Before: Jul 2 15:18:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41537daf951a48d4ba6471a52d55a71669c67056
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:f5:15:54:79:99:71:34:b3:6c:1e:f8:52:
37:8f:c9:f3:8e:b2:77:9b:42:17:4e:79:14:c4:5d:
e7:2e:a6:9b:3c:7a:b1:51:c5:7d:af:ba:35:b3:4b:
19:db:ab:09:69:61:c7:20:57:9f:7f:b5:cd:6b:87:
ef:5d:6b:1d:9e:02:55:0a:90:f9:6c:ef:6e:8a:2e:
a4:95:c1:74:76:2b:45:2e:2b:8f:39:37:0d:25:ff:
1e:32:85:c7:93:2d:8f:21:60:0a:45:83:f3:2e:37:
a5:f4:38:5c:61:68:24:27:a4:02:f6:92:67:73:8c:
ef:73:73:c5:16:ae:ad:61:70:64:29:0a:bc:f3:ee:
40:c3:aa:73:73:9e:c7:e7:01:db:ab:be:a5:17:68:
cc:ed:97:5e:55:e1:8c:d4:a7:60:52:0c:c9:32:f3:
ff:c0:d0:41:c4:58:e7:8a:21:8b:8a:90:c2:cb:e0:
c4:5a:e8:73:6a:a6:7f:f3:a6:2d:bf:5e:39:fa:11:
9f:a1:6a:61:45:66:ca:0e:f6:5f:cb:f4:87:49:67:
82:35:f2:db:73:f4:58:bb:df:73:cb:2c:1d:53:1e:
e9:44:88:41:2d:90:6f:fe:e2:7c:2b:3d:a3:9e:1f:
f7:46:62:09:c0:aa:6a:ff:d3:94:11:36:5a:7c:bb:
40:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:53:7D:AF:95:1A:48:D4:BA:64:71:A5:2D:55:A7:16:69:C6:70:56
X509v3 Authority Key Identifier:
keyid:BD:24:4D:76:63:AC:4D:1B:10:48:BC:BF:69:7F:16:93:F8:85:3D:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/QVN9r5UaSNS6ZHGlLVWnFmnGcFY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/216973-516f-4501-9164-7f435bf5501c/1/vSRNdmOsTRsQSLy_aX8Wk_iFPZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
188.208.143.0/24
188.241.60.0/23
Signature Algorithm: sha256WithRSAEncryption
33:75:63:d6:4e:cc:e9:21:58:8b:b7:49:b8:ee:79:1e:de:5e:
7d:54:f5:f4:eb:9e:15:04:3d:02:d2:c1:f5:54:55:05:a4:36:
a0:0a:f3:64:a3:76:bf:71:d7:47:a6:ec:66:67:a8:ce:69:2a:
10:f0:be:ad:1e:a0:57:89:fc:3c:cf:ea:1a:d1:c4:62:cf:07:
5f:db:05:76:64:2e:b6:68:06:25:74:1b:b6:26:9d:35:27:55:
0e:d4:28:d0:9a:ff:d8:bd:91:db:3e:6d:49:31:7d:07:25:f2:
ec:af:e5:c6:7a:0e:50:56:f7:81:8f:c3:f3:84:88:8e:d2:bd:
1c:5a:dd:00:de:7a:ec:49:d0:49:e0:ed:a9:1d:da:1a:a3:82:
70:21:6f:bc:83:3f:69:4d:37:d4:e8:4e:9c:d3:f6:9f:b2:c9:
99:d2:13:6d:64:4c:af:bf:ab:81:9a:5e:ac:01:57:75:11:cb:
dc:62:14:cc:cc:70:d8:ef:3d:7d:27:ba:02:5f:6e:33:79:34:
c5:d3:a1:21:88:ee:f4:9f:c0:c1:39:b1:36:93:f2:3b:ab:2b:
0a:40:df:34:d8:09:61:3f:41:e0:f0:c9:f3:41:87:f6:0c:70:
53:72:b8:ff:10:d1:27:5f:51:23:60:72:83:9b:e9:b2:c5:1c:
b5:fb:57:24
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8jaK1Ypk6cY7NGtnkRiObuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkMjQ0ZDc2NjNhYzRkMWIxMDQ4YmNiZjY5N2YxNjkzZjg4
NTNkOWUwHhcNMjYwNzAyMTUxODEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTUzN2RhZjk1MWE0OGQ0YmE2NDcxYTUyZDU1YTcxNjY5YzY3MDU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDv1FVR5mXE0s2we+FI3j8nzjrJ3
m0IXTnkUxF3nLqabPHqxUcV9r7o1s0sZ26sJaWHHIFeff7XNa4fvXWsdngJVCpD5
bO9uii6klcF0ditFLiuPOTcNJf8eMoXHky2PIWAKRYPzLjel9DhcYWgkJ6QC9pJn
c4zvc3PFFq6tYXBkKQq88+5Aw6pzc57H5wHbq76lF2jM7ZdeVeGM1KdgUgzJMvP/
wNBBxFjniiGLipDCy+DEWuhzaqZ/86Ytv145+hGfoWphRWbKDvZfy/SHSWeCNfLb
c/RYu99zyywdUx7pRIhBLZBv/uJ8Kz2jnh/3RmIJwKpq/9OUETZafLtAAwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEFTfa+VGkjUumRxpS1VpxZpxnBWMB8GA1UdIwQY
MBaAFL0kTXZjrE0bEEi8v2l/FpP4hT2eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlNSTmRtT3NUUnNRU0x5X2FYOFdrX2lGUFo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQt
N2Y0MzViZjU1MDFjLzEvUVZOOXI1VWFTTlM2WkhHbExWV25GbW5HY0ZZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yMTY5NzMtNTE2Zi00NTAxLTkxNjQtN2Y0MzViZjU1MDFj
LzEvdlNSTmRtT3NUUnNRU0x5X2FYOFdrX2lGUFo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAvNCPAwQB
vPE8MA0GCSqGSIb3DQEBCwUAA4IBAQAzdWPWTszpIViLt0m47nke3l59VPX0654V
BD0C0sH1VFUFpDagCvNko3a/cddHpuxmZ6jOaSoQ8L6tHqBXifw8z+oa0cRizwdf
2wV2ZC62aAYldBu2Jp01J1UO1CjQmv/YvZHbPm1JMX0HJfLsr+XGeg5QVveBj8Pz
hIiO0r0cWt0A3nrsSdBJ4O2pHdoao4JwIW+8gz9pTTfU6E6c0/afssmZ0hNtZEyv
v6uBml6sAVd1EcvcYhTMzHDY7z19J7oCX24zeTTF06EhiO70n8DBObE2k/I7qysK
QN802AlhP0Hg8MnzQYf2DHBTcrj/ENEnX1EjYHKDm+myxRy1+1ck
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:14:25 2026 by rpki-client