Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/QUfl3vC0AijBE9gxWtxJeJ66-d0.roa
File: QUfl3vC0AijBE9gxWtxJeJ66-d0.roa (raw, json)
Hash identifier: 8wj4uVOZlghlyIWBLuNvLWWLYHGut3Zij1oZ2ixoXwg=
Subject key identifier: 41:47:E5:DE:F0:B4:02:28:C1:13:D8:31:5A:DC:49:78:9E:BA:F9:DD
Certificate issuer: /CN=505127723ea0cfd0724713b291734caa353e20ea
Certificate serial: 01A0B54CC8328633D780693C740969D97667
Authority key identifier: 50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/QUfl3vC0AijBE9gxWtxJeJ66-d0.roa
Signing time: Fri 18 Sep 2026 16:15:03 +0000
ROA not before: Fri 18 Sep 2026 16:15:03 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 54252
IP address blocks: 160.238.97.0/24 maxlen: 24
160.238.98.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.mft
rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 19:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b5:4c:c8:32:86:33:d7:80:69:3c:74:09:69:d9:76:67
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=505127723ea0cfd0724713b291734caa353e20ea
Validity
Not Before: Sep 18 16:15:03 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4147e5def0b40228c113d8315adc49789ebaf9dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:b0:b3:a8:d2:ed:67:c5:d9:62:73:98:13:9c:
d0:6c:db:72:a9:94:e3:eb:b9:e6:ab:6f:99:d9:50:
8d:47:a3:62:f0:17:b9:0a:80:78:86:2d:7f:cb:7f:
ec:bb:8d:4e:e5:a9:5c:c9:d9:06:94:22:c3:20:46:
b0:83:15:03:10:0a:b1:da:06:fe:a0:dc:84:06:52:
fb:f6:b2:c1:e6:37:d5:c3:87:65:07:02:aa:e8:09:
3f:22:21:78:2f:ff:56:14:5a:cf:cd:53:7e:ba:db:
8e:9f:b8:06:47:9f:5b:83:86:d9:b4:a9:37:00:9a:
02:41:d7:65:98:d7:35:9a:58:50:41:47:80:83:fe:
c7:d8:c7:12:04:2d:4e:f9:59:d4:7a:d3:60:40:80:
85:6a:04:0f:bf:c9:ea:d9:64:25:c7:ec:b0:24:97:
59:bf:bb:b0:87:96:47:af:42:e5:ec:ba:24:f9:11:
ae:80:37:cf:f5:1e:52:8e:58:bb:40:83:7a:92:10:
02:fb:4e:33:bb:a9:09:ed:ab:20:7e:86:52:1e:f6:
ae:b5:c8:84:94:71:96:fc:fd:ea:28:ba:41:46:a4:
ac:0c:4d:fc:81:8e:d9:e2:25:68:99:73:d5:0d:6d:
04:50:72:e4:93:95:4d:8c:ef:d4:ec:48:dc:6a:2b:
9d:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:47:E5:DE:F0:B4:02:28:C1:13:D8:31:5A:DC:49:78:9E:BA:F9:DD
X509v3 Authority Key Identifier:
keyid:50:51:27:72:3E:A0:CF:D0:72:47:13:B2:91:73:4C:AA:35:3E:20:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UFEncj6gz9ByRxOykXNMqjU-IOo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/QUfl3vC0AijBE9gxWtxJeJ66-d0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a90423-0b4b-499f-be66-55608b694456/1/UFEncj6gz9ByRxOykXNMqjU-IOo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
160.238.97.0-160.238.98.255
Signature Algorithm: sha256WithRSAEncryption
78:17:ac:ef:88:37:ac:fb:58:74:24:e3:e4:6a:b6:1a:c7:7e:
2e:12:3a:d2:ec:bd:e9:1b:56:15:d1:07:db:7c:ca:6d:15:c8:
d5:ca:57:7a:b7:0d:14:3a:f2:f2:4f:e1:42:0d:ce:68:74:31:
73:fa:72:55:d6:dd:e0:cc:49:ec:b8:90:b8:b4:f9:4e:0a:c1:
5d:26:b4:41:76:c4:3f:02:e1:b2:0d:d1:df:fa:9f:31:33:6c:
53:fb:45:dc:b3:95:d3:50:12:09:e3:f9:02:48:c4:77:c4:4b:
37:90:b7:c8:60:5b:33:b2:5f:c4:fd:97:41:8a:3e:0f:a9:88:
d7:3d:4c:55:b5:e6:58:3e:75:a0:fb:3f:2d:f7:8e:fd:c3:64:
18:f3:51:55:ef:f2:c0:84:41:a2:ca:00:50:27:df:6c:dc:63:
3a:cb:4b:0c:99:85:ab:68:46:16:db:1b:6e:fb:5c:ad:82:38:
53:af:99:bd:b3:a3:35:03:ea:14:58:df:18:d8:8e:c5:96:b7:
97:cc:00:a6:ad:53:ce:ea:90:5d:2d:46:fa:07:a6:b9:95:56:
7f:00:c2:db:bd:62:3f:a1:45:03:81:b8:05:bd:40:36:f6:1f:
8d:d4:02:32:41:6c:2b:f4:24:eb:7d:85:90:a8:ea:2f:6e:42:
79:8a:3c:76
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAaC1TMgyhjPXgGk8dAlp2XZnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUwNTEyNzcyM2VhMGNmZDA3MjQ3MTNiMjkxNzM0Y2FhMzUz
ZTIwZWEwHhcNMjYwOTE4MTYxNTAzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MTQ3ZTVkZWYwYjQwMjI4YzExM2Q4MzE1YWRjNDk3ODllYmFmOWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0bCzqNLtZ8XZYnOYE5zQbNtyqZTj
67nmq2+Z2VCNR6Ni8Be5CoB4hi1/y3/su41O5alcydkGlCLDIEawgxUDEAqx2gb+
oNyEBlL79rLB5jfVw4dlBwKq6Ak/IiF4L/9WFFrPzVN+utuOn7gGR59bg4bZtKk3
AJoCQddlmNc1mlhQQUeAg/7H2McSBC1O+VnUetNgQICFagQPv8nq2WQlx+ywJJdZ
v7uwh5ZHr0Ll7Lok+RGugDfP9R5Sjli7QIN6khAC+04zu6kJ7asgfoZSHvautciE
lHGW/P3qKLpBRqSsDE38gY7Z4iVomXPVDW0EUHLkk5VNjO/U7Ejcaiud/wIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFEFH5d7wtAIowRPYMVrcSXieuvndMB8GA1UdIwQY
MBaAFFBRJ3I+oM/QckcTspFzTKo1PiDqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYt
NTU2MDhiNjk0NDU2LzEvUVVmbDN2QzBBaWpCRTlneFd0eEplSjY2LWQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hOTA0MjMtMGI0Yi00OTlmLWJlNjYtNTU2MDhiNjk0NDU2
LzEvVUZFbmNqNmd6OUJ5UnhPeWtYTk1xalUtSU9vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBACg7mED
BACg7mIwDQYJKoZIhvcNAQELBQADggEBAHgXrO+IN6z7WHQk4+RqthrHfi4SOtLs
vekbVhXRB9t8ym0VyNXKV3q3DRQ68vJP4UINzmh0MXP6clXW3eDMSey4kLi0+U4K
wV0mtEF2xD8C4bIN0d/6nzEzbFP7RdyzldNQEgnj+QJIxHfESzeQt8hgWzOyX8T9
l0GKPg+piNc9TFW15lg+daD7Py33jv3DZBjzUVXv8sCEQaLKAFAn32zcYzrLSwyZ
hatoRhbbG277XK2COFOvmb2zozUD6hRY3xjYjsWWt5fMAKatU87qkF0tRvoHprmV
Vn8Awtu9Yj+hRQOBuAW9QDb2H43UAjJBbCv0JOt9hZCo6i9uQnmKPHY=
-----END CERTIFICATE-----
Generated at Mon Sep 28 06:19:18 2026 by rpki-client