Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/c2/75ea4b-e216-4f23-92eb-a5f04280dc25/1/QG8vUDgPENLAZsVF1gwAM9BbaFs.roa
File: QG8vUDgPENLAZsVF1gwAM9BbaFs.roa (raw, json)
Hash identifier: BWNRJVWMKuzNdYU27PeLSTd+Em4D6hRHlFgzONBGJPw=
Subject key identifier: 40:6F:2F:50:38:0F:10:D2:C0:66:C5:45:D6:0C:00:33:D0:5B:68:5B
Certificate issuer: /CN=e5d0c5968ef0261893e870b75c5ecd2f0a4b6ef5
Certificate serial: 01A03E5488892B4A2962FC528AEEFD63A500
Authority key identifier: E5:D0:C5:96:8E:F0:26:18:93:E8:70:B7:5C:5E:CD:2F:0A:4B:6E:F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5dDFlo7wJhiT6HC3XF7NLwpLbvU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/75ea4b-e216-4f23-92eb-a5f04280dc25/1/QG8vUDgPENLAZsVF1gwAM9BbaFs.roa
Signing time: Wed 26 Aug 2026 13:48:42 +0000
ROA not before: Wed 26 Aug 2026 13:48:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 8469
IP address blocks: 193.41.121.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/75ea4b-e216-4f23-92eb-a5f04280dc25/1/5dDFlo7wJhiT6HC3XF7NLwpLbvU.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/75ea4b-e216-4f23-92eb-a5f04280dc25/1/5dDFlo7wJhiT6HC3XF7NLwpLbvU.mft
rsync://rpki.ripe.net/repository/DEFAULT/5dDFlo7wJhiT6HC3XF7NLwpLbvU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 14 Sep 2026 21:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3e:54:88:89:2b:4a:29:62:fc:52:8a:ee:fd:63:a5:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e5d0c5968ef0261893e870b75c5ecd2f0a4b6ef5
Validity
Not Before: Aug 26 13:48:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=406f2f50380f10d2c066c545d60c0033d05b685b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:8f:0a:f1:ef:5d:d3:5c:b6:f7:79:2d:39:3f:
78:c7:ac:99:55:32:d9:af:3f:62:35:9e:44:08:cd:
f3:e8:c7:c7:61:52:40:7d:5b:5e:60:04:94:9c:52:
cb:4a:77:53:0e:fd:12:c4:4a:c1:e1:cb:29:54:08:
e8:1d:fe:d6:2c:1f:fc:87:ab:1d:44:a6:91:88:d0:
a6:6a:fd:61:7c:c7:d0:3f:77:72:e9:a1:26:3b:a4:
a8:dc:3b:8d:02:18:5a:01:58:05:f2:ee:d7:4c:30:
8e:c1:99:bc:4d:e2:8b:60:67:9a:09:51:c3:ac:ef:
27:ec:5b:25:c7:d9:77:22:6e:f1:0a:fa:30:ba:53:
1c:07:38:3c:33:fc:3f:17:a7:16:01:65:e7:f3:8d:
ac:fb:29:35:94:c2:07:d9:5d:6a:6d:5c:63:1e:1d:
8b:b4:f4:b8:e0:e7:33:5c:f5:5c:a1:b1:9d:c7:79:
14:19:8a:23:83:87:44:97:c2:12:ed:1e:7b:b1:68:
b1:22:c7:9f:5e:e3:c8:1e:95:60:be:ad:b1:e9:a1:
c7:01:fe:b0:1e:a9:f5:52:60:e7:b1:9f:f8:47:86:
e6:45:86:77:5c:69:10:a3:8b:97:bb:47:56:5a:eb:
1b:e1:26:8e:e8:60:e1:b4:56:fe:62:01:b7:48:83:
7a:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6F:2F:50:38:0F:10:D2:C0:66:C5:45:D6:0C:00:33:D0:5B:68:5B
X509v3 Authority Key Identifier:
keyid:E5:D0:C5:96:8E:F0:26:18:93:E8:70:B7:5C:5E:CD:2F:0A:4B:6E:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5dDFlo7wJhiT6HC3XF7NLwpLbvU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/75ea4b-e216-4f23-92eb-a5f04280dc25/1/QG8vUDgPENLAZsVF1gwAM9BbaFs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/75ea4b-e216-4f23-92eb-a5f04280dc25/1/5dDFlo7wJhiT6HC3XF7NLwpLbvU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
193.41.121.0/24
Signature Algorithm: sha256WithRSAEncryption
b5:4a:56:03:7d:60:a0:cf:25:ab:bb:45:78:29:42:52:6e:07:
09:78:8d:87:ce:d0:2d:a0:25:32:01:09:44:2a:1c:1b:b7:51:
09:68:02:bd:c4:84:9d:a3:e3:69:55:c2:09:8c:14:52:e2:38:
f9:80:d2:f0:66:29:c2:48:c0:3a:94:da:1f:b9:71:d8:20:99:
9e:41:33:09:1e:d2:87:ef:6f:c0:85:35:b0:18:4b:f6:b2:71:
9f:21:a9:6e:f4:64:31:b0:54:9e:ed:3b:05:ac:36:d4:de:e9:
c5:8c:34:69:65:e1:b2:9c:40:74:d3:d6:07:4e:79:25:ea:7e:
4e:48:41:fd:18:80:b1:f4:d1:58:b9:22:7c:ed:5a:36:7b:cd:
35:26:2a:68:7a:59:3c:6c:86:44:3f:7a:06:f3:d7:5c:c9:14:
5e:7a:70:d6:04:6f:ec:1e:22:dc:b6:93:89:23:54:e7:44:18:
5d:bd:0e:b1:a0:cb:50:fa:e1:9a:b6:ef:1f:95:93:54:a6:64:
1e:44:d3:29:3b:b3:76:55:2c:1a:bb:51:75:28:6c:86:dc:a1:
0a:6b:9c:7c:18:7a:df:54:f0:4a:cc:fe:19:4a:64:37:a6:27:
17:52:e3:62:a8:6f:99:e3:32:aa:24:40:0c:0c:46:ef:ed:47:
74:cf:d5:92
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA+VIiJK0opYvxSiu79Y6UAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ZDBjNTk2OGVmMDI2MTg5M2U4NzBiNzVjNWVjZDJmMGE0
YjZlZjUwHhcNMjYwODI2MTM0ODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDZmMmY1MDM4MGYxMGQyYzA2NmM1NDVkNjBjMDAzM2QwNWI2ODViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtY8K8e9d01y293ktOT94x6yZVTLZ
rz9iNZ5ECM3z6MfHYVJAfVteYASUnFLLSndTDv0SxErB4cspVAjoHf7WLB/8h6sd
RKaRiNCmav1hfMfQP3dy6aEmO6So3DuNAhhaAVgF8u7XTDCOwZm8TeKLYGeaCVHD
rO8n7Fslx9l3Im7xCvowulMcBzg8M/w/F6cWAWXn842s+yk1lMIH2V1qbVxjHh2L
tPS44OczXPVcobGdx3kUGYojg4dEl8IS7R57sWixIsefXuPIHpVgvq2x6aHHAf6w
Hqn1UmDnsZ/4R4bmRYZ3XGkQo4uXu0dWWusb4SaO6GDhtFb+YgG3SIN6cwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEBvL1A4DxDSwGbFRdYMADPQW2hbMB8GA1UdIwQY
MBaAFOXQxZaO8CYYk+hwt1xezS8KS271MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNWRERmxvN3dKaGlUNkhDM1hGN05Md3BMYnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi83NWVhNGItZTIxNi00ZjIzLTkyZWIt
YTVmMDQyODBkYzI1LzEvUUc4dlVEZ1BFTkxBWnNWRjFnd0FNOUJiYUZzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi83NWVhNGItZTIxNi00ZjIzLTkyZWItYTVmMDQyODBkYzI1
LzEvNWRERmxvN3dKaGlUNkhDM1hGN05Md3BMYnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwSl5MA0G
CSqGSIb3DQEBCwUAA4IBAQC1SlYDfWCgzyWru0V4KUJSbgcJeI2HztAtoCUyAQlE
Khwbt1EJaAK9xISdo+NpVcIJjBRS4jj5gNLwZinCSMA6lNofuXHYIJmeQTMJHtKH
72/AhTWwGEv2snGfIalu9GQxsFSe7TsFrDbU3unFjDRpZeGynEB009YHTnkl6n5O
SEH9GICx9NFYuSJ87Vo2e801Jipoelk8bIZEP3oG89dcyRReenDWBG/sHiLctpOJ
I1TnRBhdvQ6xoMtQ+uGatu8flZNUpmQeRNMpO7N2VSwau1F1KGyG3KEKa5x8GHrf
VPBKzP4ZSmQ3picXUuNiqG+Z4zKqJEAMDEbv7Ud0z9WS
-----END CERTIFICATE-----
Generated at Mon Sep 14 04:08:43 2026 by rpki-client