Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Q-vE9emot2LUsCKnX8xDh3PTbnc.roa
File: Q-vE9emot2LUsCKnX8xDh3PTbnc.roa (raw, json)
Hash identifier: R4rpXyK8KgCTYZYkoH+9L01D/jkscnll18ExlzVeUIU=
Subject key identifier: 43:EB:C4:F5:E9:A8:B7:62:D4:B0:22:A7:5F:CC:43:87:73:D3:6E:77
Certificate issuer: /CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Certificate serial: 019E5F7A15D8DBAD9694B90A143164319A44
Authority key identifier: 6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Q-vE9emot2LUsCKnX8xDh3PTbnc.roa
Signing time: Mon 25 May 2026 14:11:36 +0000
ROA not before: Mon 25 May 2026 14:11:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 5.183.206.0/24 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.mft
rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 03 Jun 2026 13:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:5f:7a:15:d8:db:ad:96:94:b9:0a:14:31:64:31:9a:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c8fd1a8ae5996c1e5692c1a8c42bfe9c3ba5745
Validity
Not Before: May 25 14:11:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=43ebc4f5e9a8b762d4b022a75fcc438773d36e77
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2b:d5:93:95:3c:84:9b:96:79:fe:c5:5c:fd:
b7:14:2f:46:8d:72:21:7c:ed:31:79:f4:71:74:98:
26:27:86:b5:97:a0:c9:f2:c1:ac:37:65:45:ea:2a:
91:a3:02:b2:1b:c7:fb:b9:78:78:c6:5d:53:1a:b0:
ba:59:51:c2:50:c2:49:2e:b9:d1:2f:33:ca:4c:36:
f3:c8:de:8c:7e:b8:13:8a:9b:80:7b:1b:b1:ac:b7:
61:a5:f6:5c:cb:30:bd:55:ab:84:f8:cc:a8:51:75:
37:e4:7d:57:ed:60:f4:4f:6a:b4:69:24:56:fe:a5:
8b:b5:ca:10:5b:f4:ee:07:8d:7f:5e:15:f6:5f:f7:
1f:00:ca:ce:5d:1c:7a:52:16:42:f9:59:ba:77:87:
48:bb:b2:93:cb:62:f5:63:2c:79:b4:bb:83:a3:6e:
e8:08:ea:f6:ba:82:aa:3a:7e:5c:2f:74:d3:62:81:
2d:45:ef:dd:89:23:a0:78:cc:6b:32:9f:08:18:8a:
1c:73:81:50:3b:e9:e4:e2:5d:37:24:0a:94:ae:81:
93:41:34:8d:f7:ed:23:e3:ef:53:44:ce:6f:47:cd:
b3:fb:ee:3f:43:42:95:7a:30:e3:3c:8e:ca:a8:22:
63:78:67:a6:2e:04:0d:f7:65:2c:28:52:f3:61:12:
a1:e3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:EB:C4:F5:E9:A8:B7:62:D4:B0:22:A7:5F:CC:43:87:73:D3:6E:77
X509v3 Authority Key Identifier:
keyid:6C:8F:D1:A8:AE:59:96:C1:E5:69:2C:1A:8C:42:BF:E9:C3:BA:57:45
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bI_RqK5ZlsHlaSwajEK_6cO6V0U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/Q-vE9emot2LUsCKnX8xDh3PTbnc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/492590-a02f-443e-aaa3-feac26eaecc2/1/bI_RqK5ZlsHlaSwajEK_6cO6V0U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
5.183.206.0/24
Signature Algorithm: sha256WithRSAEncryption
3a:35:73:3d:25:d6:39:27:ef:eb:b6:9b:a9:04:d6:d8:74:84:
b3:b4:29:a3:b1:22:c7:09:2f:5d:87:5c:33:f2:cf:97:3f:eb:
d5:7c:0f:ec:d8:c6:41:dc:dd:e3:e2:b9:e8:69:35:c0:d2:3f:
4f:ed:b7:15:6a:00:44:9d:02:16:c9:95:0e:61:b6:0e:12:2a:
b9:9c:4d:49:db:d8:3b:0b:70:ea:f8:90:b8:77:f0:1a:72:06:
cf:f3:e5:53:ce:01:77:51:07:6f:19:8e:71:a0:ad:a4:b3:a0:
e6:ae:13:69:a1:d7:41:a4:2b:55:d4:a7:79:96:ba:37:08:f7:
75:70:22:1f:fc:fb:83:23:8c:cf:5e:f5:9a:3a:74:b8:51:f3:
aa:30:61:f8:f0:6f:86:58:ee:19:b0:64:c7:cf:c1:b9:6c:23:
65:4c:62:4b:7d:48:43:f0:47:72:7f:e5:92:8a:29:9c:48:12:
2f:63:d3:06:40:26:47:7f:3f:43:90:88:dc:47:a4:38:8a:dc:
eb:fb:73:b3:89:f6:ea:7f:2e:8f:5d:70:6c:23:a4:0a:37:fb:
9e:c5:a1:35:9d:7c:fe:fd:58:d9:60:31:2c:9f:e0:ee:16:0b:
c6:83:08:11:22:85:f6:ed:19:c7:00:f8:c0:d9:ec:0e:20:c8:
b1:91:7d:b3
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5fehXY262WlLkKFDFkMZpEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjOGZkMWE4YWU1OTk2YzFlNTY5MmMxYThjNDJiZmU5YzNi
YTU3NDUwHhcNMjYwNTI1MTQxMTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0M2ViYzRmNWU5YThiNzYyZDRiMDIyYTc1ZmNjNDM4NzczZDM2ZTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSvVk5U8hJuWef7FXP23FC9GjXIh
fO0xefRxdJgmJ4a1l6DJ8sGsN2VF6iqRowKyG8f7uXh4xl1TGrC6WVHCUMJJLrnR
LzPKTDbzyN6MfrgTipuAexuxrLdhpfZcyzC9VauE+MyoUXU35H1X7WD0T2q0aSRW
/qWLtcoQW/TuB41/XhX2X/cfAMrOXRx6UhZC+Vm6d4dIu7KTy2L1Yyx5tLuDo27o
COr2uoKqOn5cL3TTYoEtRe/diSOgeMxrMp8IGIocc4FQO+nk4l03JAqUroGTQTSN
9+0j4+9TRM5vR82z++4/Q0KVejDjPI7KqCJjeGemLgQN92UsKFLzYRKh4wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEPrxPXpqLdi1LAip1/MQ4dz0253MB8GA1UdIwQY
MBaAFGyP0aiuWZbB5WksGoxCv+nDuldFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMt
ZmVhYzI2ZWFlY2MyLzEvUS12RTllbW90MkxVc0NLblg4eERoM1BUYm5jLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC80OTI1OTAtYTAyZi00NDNlLWFhYTMtZmVhYzI2ZWFlY2My
LzEvYklfUnFLNVpsc0hsYVN3YWpFS182Y082VjBVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQABbfOMA0G
CSqGSIb3DQEBCwUAA4IBAQA6NXM9JdY5J+/rtpupBNbYdISztCmjsSLHCS9dh1wz
8s+XP+vVfA/s2MZB3N3j4rnoaTXA0j9P7bcVagBEnQIWyZUOYbYOEiq5nE1J29g7
C3Dq+JC4d/AacgbP8+VTzgF3UQdvGY5xoK2ks6DmrhNpoddBpCtV1Kd5lro3CPd1
cCIf/PuDI4zPXvWaOnS4UfOqMGH48G+GWO4ZsGTHz8G5bCNlTGJLfUhD8Edyf+WS
iimcSBIvY9MGQCZHfz9DkIjcR6Q4itzr+3Ozifbqfy6PXXBsI6QKN/uexaE1nXz+
/VjZYDEsn+DuFgvGgwgRIoX27RnHAPjA2ewOIMixkX2z
-----END CERTIFICATE-----
Generated at Tue Jun 2 21:36:11 2026 by rpki-client