Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/QUnOfvmCl2kPqLLmxuIrGyRZkhs.roa
File: QUnOfvmCl2kPqLLmxuIrGyRZkhs.roa (raw, json)
Hash identifier: JF5SWAKUrt76z99iHXXzYEpv2mzJZ+Sthc/nJp1msLE=
Subject key identifier: 41:49:CE:7E:F9:82:97:69:0F:A8:B2:E6:C6:E2:2B:1B:24:59:92:1B
Certificate issuer: /CN=e58024b729d99f05133ec6d14390c73eb36db99e
Certificate serial: 019E6F44E768F471D06A535D986945D7310B
Authority key identifier: E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/QUnOfvmCl2kPqLLmxuIrGyRZkhs.roa
Signing time: Thu 28 May 2026 15:47:27 +0000
ROA not before: Thu 28 May 2026 15:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203919
IP address blocks: 80.91.65.0/24 maxlen: 24
80.91.86.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.mft
rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Jun 2026 19:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:6f:44:e7:68:f4:71:d0:6a:53:5d:98:69:45:d7:31:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e58024b729d99f05133ec6d14390c73eb36db99e
Validity
Not Before: May 28 15:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4149ce7ef98297690fa8b2e6c6e22b1b2459921b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:e1:0a:5e:21:d7:b9:f1:cb:a3:96:0c:77:0e:
44:ce:09:40:16:cd:2f:04:e9:dc:dc:41:5d:32:dc:
c5:98:5b:94:8c:ef:35:b1:63:b9:a1:9d:0d:d6:2b:
e3:42:5b:b9:54:a5:26:5a:51:cd:ad:cc:4f:f9:a1:
48:fb:d0:84:04:85:0f:a6:4f:a0:8c:f4:42:8b:62:
1c:89:ab:54:d2:f0:3c:26:51:9b:b0:97:61:7f:25:
f3:ef:f0:b0:38:4e:29:d7:bb:bc:70:57:24:e3:f1:
3f:4c:1c:ce:9a:f2:5b:40:b4:d2:d0:31:a8:1c:70:
e0:20:58:90:2e:f5:e8:5d:84:c0:7a:6f:df:d2:c1:
47:80:d4:e7:2d:00:68:b4:99:f8:68:40:ee:0c:34:
df:15:ea:fb:80:15:f6:2f:d2:89:53:dc:66:ce:0c:
f6:8a:2b:28:1e:26:ff:46:29:85:2b:10:c4:ad:1f:
88:aa:43:25:46:27:d1:4f:d5:c6:ab:0a:bd:dc:a7:
65:37:ce:fc:fa:db:99:ea:7f:07:8d:1b:d7:50:94:
81:fe:87:fc:4d:a8:2b:ce:3e:2b:3f:69:b6:86:2c:
19:35:9f:78:d6:49:7f:a8:ca:d2:ee:62:2e:cf:87:
4c:ff:94:25:59:48:61:e4:64:2f:47:61:2c:a7:dc:
44:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:49:CE:7E:F9:82:97:69:0F:A8:B2:E6:C6:E2:2B:1B:24:59:92:1B
X509v3 Authority Key Identifier:
keyid:E5:80:24:B7:29:D9:9F:05:13:3E:C6:D1:43:90:C7:3E:B3:6D:B9:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/5YAktynZnwUTPsbRQ5DHPrNtuZ4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/QUnOfvmCl2kPqLLmxuIrGyRZkhs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d0/d5628a-d9b1-4da9-a744-956f6b5c6170/1/5YAktynZnwUTPsbRQ5DHPrNtuZ4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.91.65.0/24
80.91.86.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:cc:6c:fc:16:52:4e:04:7a:6f:cd:a1:c9:22:46:94:c9:bf:
e1:2b:3a:2b:72:f4:06:c4:3e:01:cc:18:1f:f1:35:ed:ce:2e:
2a:07:76:16:d7:22:56:86:f7:56:cf:e8:0f:d5:61:e1:2e:7f:
14:07:4e:bf:63:f4:17:1d:09:92:51:a0:14:ea:3a:8a:5f:62:
ac:e5:61:92:24:b9:05:9c:97:4d:30:81:7a:49:d8:1f:c9:1c:
4d:1f:5d:8c:cb:12:fb:f6:55:ac:58:95:8e:1a:49:da:37:45:
60:a2:87:07:5d:f0:68:fe:8d:28:db:65:50:cc:01:5b:98:75:
fe:b0:2d:27:ca:48:20:90:64:87:bf:06:da:3c:7c:f3:9c:a3:
57:83:1d:7a:3b:bb:0a:c1:27:8d:a9:4f:2f:49:1e:15:0c:b0:
2e:97:f1:57:c0:69:63:ce:cf:e2:42:ae:6a:c6:a2:88:a9:c6:
d8:a1:84:1b:41:b8:d3:87:70:fb:4b:34:81:b2:c4:50:23:36:
01:0c:b7:84:c4:cd:b7:67:fb:b0:e0:22:c9:10:26:0c:14:e9:
c3:5e:34:07:07:f6:f7:8b:b3:00:96:7a:23:23:a5:4a:14:61:
b9:1b:3b:d1:47:0a:78:a5:67:a0:22:8d:4f:e9:96:24:a1:16:
22:3d:15:9d
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ5vROdo9HHQalNdmGlF1zELMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU1ODAyNGI3MjlkOTlmMDUxMzNlYzZkMTQzOTBjNzNlYjM2
ZGI5OWUwHhcNMjYwNTI4MTU0NzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTQ5Y2U3ZWY5ODI5NzY5MGZhOGIyZTZjNmUyMmIxYjI0NTk5MjFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsuEKXiHXufHLo5YMdw5EzglAFs0v
BOnc3EFdMtzFmFuUjO81sWO5oZ0N1ivjQlu5VKUmWlHNrcxP+aFI+9CEBIUPpk+g
jPRCi2IciatU0vA8JlGbsJdhfyXz7/CwOE4p17u8cFck4/E/TBzOmvJbQLTS0DGo
HHDgIFiQLvXoXYTAem/f0sFHgNTnLQBotJn4aEDuDDTfFer7gBX2L9KJU9xmzgz2
iisoHib/RimFKxDErR+IqkMlRifRT9XGqwq93KdlN878+tuZ6n8HjRvXUJSB/of8
Tagrzj4rP2m2hiwZNZ941kl/qMrS7mIuz4dM/5QlWUhh5GQvR2Esp9xEJQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEFJzn75gpdpD6iy5sbiKxskWZIbMB8GA1UdIwQY
MBaAFOWAJLcp2Z8FEz7G0UOQxz6zbbmeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQt
OTU2ZjZiNWM2MTcwLzEvUVVuT2Z2bUNsMmtQcUxMbXh1SXJHeVJaa2hzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMC9kNTYyOGEtZDliMS00ZGE5LWE3NDQtOTU2ZjZiNWM2MTcw
LzEvNVlBa3R5blpud1VUUHNiUlE1REhQck50dVo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUFtBAwQA
UFtWMA0GCSqGSIb3DQEBCwUAA4IBAQA/zGz8FlJOBHpvzaHJIkaUyb/hKzorcvQG
xD4BzBgf8TXtzi4qB3YW1yJWhvdWz+gP1WHhLn8UB06/Y/QXHQmSUaAU6jqKX2Ks
5WGSJLkFnJdNMIF6SdgfyRxNH12MyxL79lWsWJWOGknaN0VgoocHXfBo/o0o22VQ
zAFbmHX+sC0nykggkGSHvwbaPHzznKNXgx16O7sKwSeNqU8vSR4VDLAul/FXwGlj
zs/iQq5qxqKIqcbYoYQbQbjTh3D7SzSBssRQIzYBDLeExM23Z/uw4CLJECYMFOnD
XjQHB/b3i7MAlnojI6VKFGG5GzvRRwp4pWegIo1P6ZYkoRYiPRWd
-----END CERTIFICATE-----
Generated at Sat Jun 6 05:33:11 2026 by rpki-client