Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/Qs1hssLabb1NjvqVqSw9CbC81jE.roa
File: Qs1hssLabb1NjvqVqSw9CbC81jE.roa (raw, json)
Hash identifier: g9MolklfJLJ3tqi1a6QtxQKXyR32cF42Xj5mXdUGJhc=
Subject key identifier: 42:CD:61:B2:C2:DA:6D:BD:4D:8E:FA:95:A9:2C:3D:09:B0:BC:D6:31
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 01A0B3412AD6533F2E9FE93FE511F0258D9F
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/Qs1hssLabb1NjvqVqSw9CbC81jE.roa
Signing time: Fri 18 Sep 2026 06:43:07 +0000
ROA not before: Fri 18 Sep 2026 06:43:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 135392
IP address blocks: 79.182.16.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 23:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b3:41:2a:d6:53:3f:2e:9f:e9:3f:e5:11:f0:25:8d:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Sep 18 06:43:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42cd61b2c2da6dbd4d8efa95a92c3d09b0bcd631
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:74:60:55:a3:ba:24:6c:2e:71:fc:75:8b:20:
36:b6:dd:55:ff:d9:f0:e2:34:42:c2:5a:24:3a:6a:
1f:8e:24:4c:db:a3:69:4d:4d:54:df:f0:a0:91:bc:
9f:4e:1f:24:88:b9:ef:48:53:45:e4:74:26:f8:54:
6e:3b:89:96:ff:76:25:d7:52:da:e4:a9:89:d1:f9:
0b:49:01:d7:e3:70:62:f4:de:d5:48:49:74:54:91:
4f:ff:c4:38:b4:eb:9e:02:19:62:d4:7d:c1:19:1d:
fe:9a:e6:a9:c2:eb:de:57:e0:22:dc:c5:a7:f5:8d:
80:40:15:5b:da:40:a8:bc:46:20:cc:ce:07:3c:46:
bb:0b:87:17:90:70:f1:0b:d0:f5:2b:40:56:ff:c8:
23:18:1e:b1:da:43:7f:ab:e6:3a:f8:a4:20:b8:95:
16:85:a7:7a:c1:21:78:87:13:c7:c3:b4:c2:f5:79:
4e:ac:00:08:45:88:89:21:8f:86:6b:e1:de:7e:f2:
ac:ea:99:1c:da:12:19:42:47:70:12:1b:ad:9e:c1:
95:38:81:62:53:d7:bd:0d:cc:0a:7c:ab:6b:46:29:
2a:d4:dd:dc:bb:aa:a6:45:77:39:3b:56:5f:13:92:
cc:18:63:72:85:eb:a1:15:0b:91:e4:5f:64:01:82:
7e:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:CD:61:B2:C2:DA:6D:BD:4D:8E:FA:95:A9:2C:3D:09:B0:BC:D6:31
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/Qs1hssLabb1NjvqVqSw9CbC81jE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.182.16.0/24
Signature Algorithm: sha256WithRSAEncryption
7f:ff:fd:1c:2c:70:43:6e:8a:76:9b:1d:fe:6c:92:00:d1:06:
15:15:f2:2e:7d:4f:be:26:71:9f:b7:a6:59:e8:27:01:49:da:
dd:4d:36:45:f4:da:b0:29:ef:8e:4d:d5:c5:ac:bb:46:85:95:
85:7d:78:48:d7:c6:73:3f:76:de:4d:d2:72:51:a5:c9:d9:28:
a9:2c:dd:82:26:e1:45:55:00:a2:ed:9e:e0:c9:cc:85:21:94:
6c:ed:57:b2:1b:c0:24:9d:40:78:c0:77:a1:5c:96:ec:3a:a2:
7e:82:d6:11:0f:5c:49:ad:92:5a:53:7e:d4:e7:d7:75:b9:8d:
b4:14:f3:68:d6:b2:a1:0c:8b:7a:57:d1:66:b3:1f:a3:6a:a9:
8f:65:11:39:cb:6d:b0:1b:7e:1c:38:32:b5:a9:8e:07:df:70:
ec:85:71:c4:ec:b2:95:1f:b5:dc:9c:ee:fe:5b:bc:bc:b4:e4:
04:94:ea:a8:07:cf:bb:c9:cd:3c:ed:db:73:ed:b0:37:71:9d:
94:c9:5f:73:5f:72:9f:2a:46:ca:2a:da:0c:45:cc:b8:aa:a5:
eb:f5:23:d2:e4:90:4a:fc:03:f3:f8:92:a0:69:68:e1:17:6f:
25:70:c5:ef:df:d5:61:3b:b6:87:68:f2:72:3b:a4:4d:f4:d4:
fd:3a:70:d9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCzQSrWUz8un+k/5RHwJY2fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwOTE4MDY0MzA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmNkNjFiMmMyZGE2ZGJkNGQ4ZWZhOTVhOTJjM2QwOWIwYmNkNjMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvnRgVaO6JGwucfx1iyA2tt1V/9nw
4jRCwlokOmofjiRM26NpTU1U3/CgkbyfTh8kiLnvSFNF5HQm+FRuO4mW/3Yl11La
5KmJ0fkLSQHX43Bi9N7VSEl0VJFP/8Q4tOueAhli1H3BGR3+muapwuveV+Ai3MWn
9Y2AQBVb2kCovEYgzM4HPEa7C4cXkHDxC9D1K0BW/8gjGB6x2kN/q+Y6+KQguJUW
had6wSF4hxPHw7TC9XlOrAAIRYiJIY+Ga+HefvKs6pkc2hIZQkdwEhutnsGVOIFi
U9e9DcwKfKtrRikq1N3cu6qmRXc5O1ZfE5LMGGNyheuhFQuR5F9kAYJ+pwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFELNYbLC2m29TY76laksPQmwvNYxMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvUXMxaHNzTGFiYjFOanZxVnFTdzlDYkM4MWpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAT7YQMA0G
CSqGSIb3DQEBCwUAA4IBAQB///0cLHBDbop2mx3+bJIA0QYVFfIufU++JnGft6ZZ
6CcBSdrdTTZF9NqwKe+OTdXFrLtGhZWFfXhI18ZzP3beTdJyUaXJ2SipLN2CJuFF
VQCi7Z7gycyFIZRs7VeyG8AknUB4wHehXJbsOqJ+gtYRD1xJrZJaU37U59d1uY20
FPNo1rKhDIt6V9Fmsx+jaqmPZRE5y22wG34cODK1qY4H33DshXHE7LKVH7XcnO7+
W7y8tOQElOqoB8+7yc087dtz7bA3cZ2UyV9zX3KfKkbKKtoMRcy4qqXr9SPS5JBK
/APz+JKgaWjhF28lcMXv39VhO7aHaPJyO6RN9NT9OnDZ
-----END CERTIFICATE-----
Generated at Mon Sep 21 10:38:34 2026 by rpki-client