Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/qi-GOyMBSjRbYkq7WgkeRycVlwQ.roa
File: qi-GOyMBSjRbYkq7WgkeRycVlwQ.roa (raw, json)
Hash identifier: 43V/c1+hOszUxNWcQI07bQE0VxiRm591H0ynmrpSqL8=
Subject key identifier: AA:2F:86:3B:23:01:4A:34:5B:62:4A:BB:5A:09:1E:47:27:15:97:04
Certificate issuer: /CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Certificate serial: 019EBB340F7AD5C08794A89A96D330E71A3C
Authority key identifier: DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/qi-GOyMBSjRbYkq7WgkeRycVlwQ.roa
Signing time: Fri 12 Jun 2026 09:40:11 +0000
ROA not before: Fri 12 Jun 2026 09:40:11 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 205230
IP address blocks: 131.222.242.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:bb:34:0f:7a:d5:c0:87:94:a8:9a:96:d3:30:e7:1a:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfd046af5edc11964096dc20f6af1de55d9c9030
Validity
Not Before: Jun 12 09:40:11 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa2f863b23014a345b624abb5a091e4727159704
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:90:9f:34:e8:53:2c:ca:32:c3:83:1f:af:b8:
26:9f:5b:c0:45:ef:8e:35:6e:07:76:82:7b:ad:75:
c4:aa:3a:e4:07:d0:47:ee:35:a9:8d:15:fd:e7:ef:
fb:17:69:c7:6a:2e:0c:0f:5c:ac:29:41:60:cd:f6:
ca:d3:9f:ba:0f:76:4c:e3:cf:a2:a8:ed:a1:71:99:
7b:ed:ab:d7:f8:19:9c:d0:60:1a:2f:af:e3:1e:6d:
a3:8b:80:6a:a4:c7:f7:b3:4f:a5:85:3c:62:ca:1a:
20:6e:83:cf:6d:4a:b2:8c:a4:0e:ac:8a:df:cf:bc:
9a:53:a2:7f:9c:68:05:d5:eb:49:09:b4:c7:0f:5a:
5e:76:76:b5:69:52:69:4a:da:9e:09:02:82:7e:35:
e3:5e:59:53:be:62:b4:02:30:43:34:bb:fe:1e:bf:
71:b9:51:f0:30:c1:5c:c8:d7:21:27:10:d6:c2:91:
6e:f8:5f:c2:79:fb:e0:f4:5a:94:e1:15:06:04:2d:
d0:6f:2f:86:0f:b0:93:49:ad:7e:ef:40:ec:a0:f0:
f1:e2:45:d1:1f:d9:f1:2e:10:09:fd:10:0a:ed:f1:
44:a6:41:9c:47:81:2c:40:b3:e1:71:59:c6:47:ce:
26:4b:45:fa:d3:ca:19:7a:d6:59:32:f0:f7:c7:43:
04:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2F:86:3B:23:01:4A:34:5B:62:4A:BB:5A:09:1E:47:27:15:97:04
X509v3 Authority Key Identifier:
keyid:DF:D0:46:AF:5E:DC:11:96:40:96:DC:20:F6:AF:1D:E5:5D:9C:90:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/39BGr17cEZZAltwg9q8d5V2ckDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/qi-GOyMBSjRbYkq7WgkeRycVlwQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/bfd0ff-845e-4e12-ac7c-588e0d923c15/1/39BGr17cEZZAltwg9q8d5V2ckDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.242.0/24
Signature Algorithm: sha256WithRSAEncryption
5e:72:26:77:95:2f:ff:dc:3e:41:ca:90:9a:00:10:b0:68:e1:
1d:8e:fc:56:38:de:db:9a:23:06:30:6d:7d:95:3e:06:02:5e:
33:da:3b:3f:b5:d5:cc:0f:5d:64:96:cd:08:ab:3b:ec:fe:b7:
e8:06:a9:6b:9a:89:2b:e9:34:23:23:d9:33:c0:d2:77:d1:67:
66:56:51:80:88:ae:d5:c8:16:c8:5a:3e:69:68:43:ab:37:5a:
50:ee:90:a6:15:c4:a5:41:5b:15:fd:55:d3:72:bf:a0:03:42:
9f:66:66:38:b8:2b:a4:c5:c6:10:a3:be:1b:de:8c:ad:42:2d:
a9:64:74:34:f4:4e:b3:6b:4d:8e:75:2b:55:27:ba:cd:00:58:
48:3e:c1:ab:33:b5:ff:33:f9:4d:97:9f:58:8e:14:d2:b6:7d:
40:ba:3c:7a:bf:95:e9:31:30:7b:68:03:f3:63:f5:da:a9:e4:
9b:cc:cc:08:0e:13:db:7f:22:b9:55:cc:3c:14:9a:3a:a8:a1:
06:2c:8f:ac:89:88:b9:f4:f7:88:a7:77:b4:59:77:37:30:fc:
80:c8:45:1d:11:30:15:aa:7d:63:ed:66:78:54:b1:9d:e9:84:
e1:f7:51:74:64:89:83:22:f5:a9:e3:d8:da:ce:9b:9f:e9:5f:
44:6d:4d:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Jun 13 15:56:25 2026 by rpki-client