Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/QGyij8FTCXg6iCGmAqvDSbcqyz0.roa
File: QGyij8FTCXg6iCGmAqvDSbcqyz0.roa (raw, json)
Hash identifier: K9q/GSOlziIjG8q44EUUpZj5nAzzN7FcLEOjmv+Aex4=
Subject key identifier: 40:6C:A2:8F:C1:53:09:78:3A:88:21:A6:02:AB:C3:49:B7:2A:CB:3D
Certificate issuer: /CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Certificate serial: 019FB47AD13FFEA458F0A2A57A9C3BA4BB7D
Authority key identifier: 2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/QGyij8FTCXg6iCGmAqvDSbcqyz0.roa
Signing time: Thu 30 Jul 2026 19:22:55 +0000
ROA not before: Thu 30 Jul 2026 19:22:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 25198
IP address blocks: 85.115.210.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.mft
rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 24 Aug 2026 22:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:b4:7a:d1:3f:fe:a4:58:f0:a2:a5:7a:9c:3b:a4:bb:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2fa16ab06020067740a4c1fb47a912622f1d0722
Validity
Not Before: Jul 30 19:22:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=406ca28fc15309783a8821a602abc349b72acb3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:cd:b0:a8:06:a7:03:42:d0:f6:6b:23:5d:6e:
e4:c5:13:b3:ca:83:2d:3e:3a:74:83:bf:fc:89:c5:
6c:f7:c9:89:d4:af:68:82:d4:48:ef:97:d4:77:dc:
01:2b:19:04:d5:12:a4:72:e1:d6:d6:51:34:03:5f:
42:d6:af:5b:7e:97:11:cf:54:13:87:bc:71:9c:16:
7a:63:93:7c:4f:c5:63:56:b0:b7:68:33:76:b5:a5:
6f:ca:ed:69:c5:21:0d:a8:1b:6a:54:ba:b0:6d:75:
e0:03:30:14:e2:ad:55:ec:4d:09:7a:0b:4f:22:1a:
3f:73:57:00:bb:1f:db:07:b9:5c:bc:94:cb:aa:a2:
27:62:9c:7a:da:96:a4:02:40:48:27:b1:5a:d0:4e:
b4:64:91:57:52:d7:59:48:58:28:ca:20:71:3c:0f:
35:e3:f9:ba:2f:7b:f0:23:50:2d:2d:46:b1:61:35:
69:c4:21:74:c4:1d:45:f0:6d:38:28:4f:a2:5e:cc:
31:25:eb:d4:a1:2a:18:b9:cb:94:56:f2:dc:f1:0d:
e9:46:e4:7f:35:f7:e0:c7:37:b9:b6:93:8b:0f:50:
2f:e4:37:17:85:ff:bf:be:93:13:ce:ed:5e:ec:79:
50:35:a5:15:05:a8:fa:5b:97:f7:43:eb:59:dd:9d:
69:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6C:A2:8F:C1:53:09:78:3A:88:21:A6:02:AB:C3:49:B7:2A:CB:3D
X509v3 Authority Key Identifier:
keyid:2F:A1:6A:B0:60:20:06:77:40:A4:C1:FB:47:A9:12:62:2F:1D:07:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/L6FqsGAgBndApMH7R6kSYi8dByI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/QGyij8FTCXg6iCGmAqvDSbcqyz0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/7f2393-d01a-41f7-a52e-d242b6f3a8a1/1/L6FqsGAgBndApMH7R6kSYi8dByI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
85.115.210.0/24
Signature Algorithm: sha256WithRSAEncryption
58:db:ce:6c:9d:9b:7a:66:7d:49:d5:05:cf:92:d4:f3:6a:27:
54:67:46:f1:5f:c2:c1:41:72:ff:ec:2c:2d:5d:bc:50:4f:68:
27:c4:07:67:07:7f:8a:1b:02:45:30:b5:12:16:fc:41:05:69:
75:1c:84:7c:e1:ea:43:98:86:d2:b7:e8:db:04:7f:35:68:60:
67:41:0a:56:b8:ec:81:77:d8:3f:04:d9:a0:f6:73:35:ff:d4:
45:e3:d1:fd:ab:99:cc:4b:a3:45:d0:29:63:61:4c:6b:d1:cf:
eb:a5:88:b1:9b:c0:05:02:a1:4d:88:11:a4:81:62:00:d8:eb:
9a:6b:7c:02:cf:f9:a1:a8:90:36:79:66:27:e0:ae:a9:ce:81:
77:ac:84:b5:07:3f:83:ff:88:c4:3e:7d:f4:8c:27:17:33:4b:
6e:2d:7a:a9:f1:a5:fe:35:05:98:b8:6f:d8:63:08:73:70:39:
9e:a8:45:6b:2c:60:0f:86:9a:2d:04:17:46:1f:91:34:7e:f4:
0e:de:92:32:99:6f:1f:05:30:dc:9f:9b:ed:c9:39:0d:46:03:
dd:2b:a9:82:db:8b:7d:bb:74:bc:39:2e:f9:d0:1e:da:ee:74:
fb:a2:35:d1:8f:61:95:fb:ff:b3:7a:1e:ed:48:fa:63:03:e2:
24:52:d5:56
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+0etE//qRY8KKlepw7pLt9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDJmYTE2YWIwNjAyMDA2Nzc0MGE0YzFmYjQ3YTkxMjYyMmYx
ZDA3MjIwHhcNMjYwNzMwMTkyMjU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDZjYTI4ZmMxNTMwOTc4M2E4ODIxYTYwMmFiYzM0OWI3MmFjYjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4c2wqAanA0LQ9msjXW7kxROzyoMt
Pjp0g7/8icVs98mJ1K9ogtRI75fUd9wBKxkE1RKkcuHW1lE0A19C1q9bfpcRz1QT
h7xxnBZ6Y5N8T8VjVrC3aDN2taVvyu1pxSENqBtqVLqwbXXgAzAU4q1V7E0JegtP
Iho/c1cAux/bB7lcvJTLqqInYpx62pakAkBIJ7Fa0E60ZJFXUtdZSFgoyiBxPA81
4/m6L3vwI1AtLUaxYTVpxCF0xB1F8G04KE+iXswxJevUoSoYucuUVvLc8Q3pRuR/
Nffgxze5tpOLD1Av5DcXhf+/vpMTzu1e7HlQNaUVBaj6W5f3Q+tZ3Z1pGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEBsoo/BUwl4OoghpgKrw0m3Kss9MB8GA1UdIwQY
MBaAFC+harBgIAZ3QKTB+0epEmIvHQciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUt
ZDI0MmI2ZjNhOGExLzEvUUd5aWo4RlRDWGc2aUNHbUFxdkRTYmNxeXowLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy83ZjIzOTMtZDAxYS00MWY3LWE1MmUtZDI0MmI2ZjNhOGEx
LzEvTDZGcXNHQWdCbmRBcE1IN1I2a1NZaThkQnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAVXPSMA0G
CSqGSIb3DQEBCwUAA4IBAQBY285snZt6Zn1J1QXPktTzaidUZ0bxX8LBQXL/7Cwt
XbxQT2gnxAdnB3+KGwJFMLUSFvxBBWl1HIR84epDmIbSt+jbBH81aGBnQQpWuOyB
d9g/BNmg9nM1/9RF49H9q5nMS6NF0CljYUxr0c/rpYixm8AFAqFNiBGkgWIA2Oua
a3wCz/mhqJA2eWYn4K6pzoF3rIS1Bz+D/4jEPn30jCcXM0tuLXqp8aX+NQWYuG/Y
YwhzcDmeqEVrLGAPhpotBBdGH5E0fvQO3pIymW8fBTDcn5vtyTkNRgPdK6mC24t9
u3S8OS750B7a7nT7ojXRj2GV+/+zeh7tSPpjA+IkUtVW
-----END CERTIFICATE-----
Generated at Mon Aug 24 03:07:35 2026 by rpki-client