Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/QQl02eEvmbVx6fRAhZ-3IeY1GOk.roa
File: QQl02eEvmbVx6fRAhZ-3IeY1GOk.roa (raw, json)
Hash identifier: vAwBwFlvXfsBSzpPtezM8wWkFGOeVRS3N3r6l07Fmyo=
Subject key identifier: 41:09:74:D9:E1:2F:99:B5:71:E9:F4:40:85:9F:B7:21:E6:35:18:E9
Certificate issuer: /CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Certificate serial: 019ED5214685A5CA8C3DF0859A913492513E
Authority key identifier: 08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/QQl02eEvmbVx6fRAhZ-3IeY1GOk.roa
Signing time: Wed 17 Jun 2026 10:29:48 +0000
ROA not before: Wed 17 Jun 2026 10:29:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199107
IP address blocks: 216.236.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 22:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d5:21:46:85:a5:ca:8c:3d:f0:85:9a:91:34:92:51:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0837c99b2a4c062d5c20678f9dcf3207aefd5e78
Validity
Not Before: Jun 17 10:29:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=410974d9e12f99b571e9f440859fb721e63518e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:86:cd:d9:24:d9:e7:08:f4:78:19:9d:2d:8e:cb:
cd:a3:44:32:ae:0d:b7:42:53:52:59:65:5c:a6:92:
30:73:74:f7:d1:df:07:3a:d1:10:36:12:3e:d4:4b:
d6:5c:11:92:32:39:9c:a2:41:42:3c:13:0a:88:a5:
bf:92:12:95:66:fa:69:a0:85:7f:6f:2f:7c:90:4c:
7f:0a:bd:3f:57:db:99:4f:25:0a:0a:54:34:e6:27:
ab:db:e9:a7:e5:38:cd:9a:64:b5:58:ba:0e:49:78:
0a:e6:4d:e3:e5:fb:dc:54:bf:7d:cc:32:2b:7f:47:
a7:ff:3d:7b:47:35:e0:5d:b5:3b:88:e1:d9:c2:05:
8f:bf:c3:e7:63:11:16:5b:03:09:a4:f0:60:dd:a1:
6d:1c:12:f4:f7:cb:60:08:27:5b:ed:54:be:d1:14:
82:db:a3:45:c9:e0:b5:da:20:b5:4e:1b:81:8a:b1:
e0:7f:05:0e:16:58:a6:6c:21:f6:1b:08:e6:4e:c3:
2e:44:05:4e:5f:a2:ab:3a:f0:47:c2:ce:f4:99:bf:
28:61:80:bf:93:76:a4:c9:bc:1c:86:40:a2:e3:b2:
f3:a1:86:2a:c4:94:93:cf:b7:ae:3d:87:7e:d6:8f:
fb:80:87:79:a3:a9:21:5f:8e:fc:63:55:63:c8:0e:
5f:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:09:74:D9:E1:2F:99:B5:71:E9:F4:40:85:9F:B7:21:E6:35:18:E9
X509v3 Authority Key Identifier:
keyid:08:37:C9:9B:2A:4C:06:2D:5C:20:67:8F:9D:CF:32:07:AE:FD:5E:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDfJmypMBi1cIGePnc8yB679Xng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/QQl02eEvmbVx6fRAhZ-3IeY1GOk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/0895d2-b778-46c4-a691-f1237f4c5cf6/1/CDfJmypMBi1cIGePnc8yB679Xng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
216.236.51.0/24
Signature Algorithm: sha256WithRSAEncryption
ab:b3:3e:31:6d:0c:86:d5:50:96:51:46:b0:bb:14:3c:14:24:
4f:ab:a5:4d:39:a6:8f:9e:6c:b1:62:b8:87:43:37:f8:ac:7a:
0a:d6:27:11:aa:83:00:7b:38:8a:b6:e9:2f:c6:f8:3e:e9:bb:
ae:ae:ae:0f:00:63:97:a6:d1:fc:9e:a8:28:81:4c:df:7a:34:
95:c6:f4:d3:4e:37:b0:b3:32:f1:c8:98:f0:4e:50:97:71:44:
89:ab:ee:83:c4:23:4e:5c:44:5d:2b:05:fa:ac:34:5a:02:36:
24:92:4a:bc:b2:ba:ee:1d:35:42:51:b5:70:cd:54:0c:2b:1e:
9d:83:ce:a3:87:30:88:0e:ad:4f:8f:1e:de:2b:c5:1d:c2:3e:
df:4f:c4:27:6b:a7:b8:47:4c:24:0d:16:dd:4f:89:74:34:19:
46:f9:3f:bc:ad:c8:ed:aa:f4:49:8b:5a:f3:0b:78:d3:c1:33:
30:30:32:d2:de:20:24:29:a9:6f:db:fa:5a:08:52:a8:d0:a3:
49:5a:ba:53:d0:48:ec:b0:70:39:a7:ee:17:8d:fc:f2:eb:8b:
cd:f8:cd:6f:26:48:7d:0f:a4:cf:6f:c9:92:e5:e6:09:b5:ab:
23:b6:9e:64:ae:ee:79:c9:a2:17:97:02:b0:19:7b:e4:ae:3d:
07:d3:c9:7e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7VIUaFpcqMPfCFmpE0klE+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzdjOTliMmE0YzA2MmQ1YzIwNjc4ZjlkY2YzMjA3YWVm
ZDVlNzgwHhcNMjYwNjE3MTAyOTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTA5NzRkOWUxMmY5OWI1NzFlOWY0NDA4NTlmYjcyMWU2MzUxOGU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhs3ZJNnnCPR4GZ0tjsvNo0Qyrg23
QlNSWWVcppIwc3T30d8HOtEQNhI+1EvWXBGSMjmcokFCPBMKiKW/khKVZvppoIV/
by98kEx/Cr0/V9uZTyUKClQ05ier2+mn5TjNmmS1WLoOSXgK5k3j5fvcVL99zDIr
f0en/z17RzXgXbU7iOHZwgWPv8PnYxEWWwMJpPBg3aFtHBL098tgCCdb7VS+0RSC
26NFyeC12iC1ThuBirHgfwUOFlimbCH2GwjmTsMuRAVOX6KrOvBHws70mb8oYYC/
k3akybwchkCi47LzoYYqxJSTz7euPYd+1o/7gId5o6khX478Y1VjyA5fUQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEEJdNnhL5m1cen0QIWftyHmNRjpMB8GA1UdIwQY
MBaAFAg3yZsqTAYtXCBnj53PMgeu/V54MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEt
ZjEyMzdmNGM1Y2Y2LzEvUVFsMDJlRXZtYlZ4NmZSQWhaLTNJZVkxR09rLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS8wODk1ZDItYjc3OC00NmM0LWE2OTEtZjEyMzdmNGM1Y2Y2
LzEvQ0RmSm15cE1CaTFjSUdlUG5jOHlCNjc5WG5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQA2OwzMA0G
CSqGSIb3DQEBCwUAA4IBAQCrsz4xbQyG1VCWUUawuxQ8FCRPq6VNOaaPnmyxYriH
Qzf4rHoK1icRqoMAeziKtukvxvg+6buurq4PAGOXptH8nqgogUzfejSVxvTTTjew
szLxyJjwTlCXcUSJq+6DxCNOXERdKwX6rDRaAjYkkkq8srruHTVCUbVwzVQMKx6d
g86jhzCIDq1Pjx7eK8Udwj7fT8Qna6e4R0wkDRbdT4l0NBlG+T+8rcjtqvRJi1rz
C3jTwTMwMDLS3iAkKalv2/paCFKo0KNJWrpT0EjssHA5p+4Xjfzy64vN+M1vJkh9
D6TPb8mS5eYJtasjtp5kru55yaIXlwKwGXvkrj0H08l+
-----END CERTIFICATE-----
Generated at Sat Jul 18 05:43:31 2026 by rpki-client