Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QaDUfWUKjLOu3jqXcqwcnPuN8oU.roa
File: QaDUfWUKjLOu3jqXcqwcnPuN8oU.roa (raw, json)
Hash identifier: tV6RuZ2tqY0l+q2nw0/+8ex8VwPdroJ0yECMjrogAPI=
Subject key identifier: 41:A0:D4:7D:65:0A:8C:B3:AE:DE:3A:97:72:AC:1C:9C:FB:8D:F2:85
Certificate issuer: /CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Certificate serial: 01A0B850A618DDEFE56ED6CD6C5AFCD6F3BC
Authority key identifier: 74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QaDUfWUKjLOu3jqXcqwcnPuN8oU.roa
Signing time: Sat 19 Sep 2026 06:18:07 +0000
ROA not before: Sat 19 Sep 2026 06:18:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218629
IP address blocks: 95.47.177.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.mft
rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 05:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:b8:50:a6:18:dd:ef:e5:6e:d6:cd:6c:5a:fc:d6:f3:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=749122c35438a4eb26233fdc6e4bb1df2daaef42
Validity
Not Before: Sep 19 06:18:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41a0d47d650a8cb3aede3a9772ac1c9cfb8df285
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b1:9f:d5:f7:7d:eb:e0:0f:7f:9e:94:75:1e:
68:d1:ea:ab:0a:02:d2:24:39:7a:7d:6e:f7:fc:7e:
2d:ab:0a:70:d0:c4:fe:f6:10:5a:3e:3b:c0:f9:30:
3f:65:b5:a7:23:70:29:af:22:ca:e5:d4:83:5d:b5:
1b:c0:c6:4f:b3:c7:db:64:6e:35:95:fe:e9:b0:7f:
46:ee:c5:7d:f5:3d:3f:b5:e1:9d:a7:93:51:f6:99:
29:11:e7:1f:d6:19:8e:0c:88:7f:f2:1c:52:35:74:
66:f4:aa:bc:4e:74:60:fb:19:33:ec:d1:b7:ee:1c:
4b:7c:2a:1b:b3:c0:66:b2:ba:07:28:64:2c:46:b9:
62:53:7b:48:4e:bb:a5:58:13:7d:ee:f8:71:e8:75:
9c:b2:10:ef:0d:5f:c0:76:7b:01:16:a3:19:1e:e3:
dc:b3:8d:3a:6c:04:aa:07:7c:2c:da:10:a8:fd:5f:
be:2c:37:c0:e3:1e:c1:f5:4c:77:4a:7e:5c:ff:95:
99:fa:70:4e:6b:2a:5b:d5:1e:f4:28:5f:ba:58:3d:
b5:76:5d:a7:27:b5:f7:03:11:76:03:86:27:31:bf:
1b:59:9f:13:1c:c6:0e:71:7c:b3:b4:8a:6c:11:45:
33:de:a4:4f:31:cc:08:38:6b:02:6d:ff:0b:05:1e:
05:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A0:D4:7D:65:0A:8C:B3:AE:DE:3A:97:72:AC:1C:9C:FB:8D:F2:85
X509v3 Authority Key Identifier:
keyid:74:91:22:C3:54:38:A4:EB:26:23:3F:DC:6E:4B:B1:DF:2D:AA:EF:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dJEiw1Q4pOsmIz_cbkux3y2q70I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/QaDUfWUKjLOu3jqXcqwcnPuN8oU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/18a91c-0e77-45c9-8cc4-062c6933abed/1/dJEiw1Q4pOsmIz_cbkux3y2q70I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
95.47.177.0/24
Signature Algorithm: sha256WithRSAEncryption
52:65:1e:ef:d2:5b:2a:c7:5c:5e:c4:d1:9e:5a:ae:b9:53:4c:
40:9a:7c:69:02:aa:22:9c:98:d4:6c:80:50:87:87:07:7b:16:
ab:2e:e2:0a:d2:9c:72:39:7a:8f:d0:2d:ed:b1:ff:dd:b3:eb:
14:c7:1f:fe:51:11:90:cf:1a:3c:51:cd:56:dd:8c:05:62:78:
fd:1d:19:54:6f:fc:3f:f9:64:1b:89:a0:ea:49:59:d1:ee:43:
f9:78:bf:bf:0f:c3:7a:37:27:08:05:f4:e2:25:a6:e9:be:06:
9e:c4:5e:4b:20:ce:74:b6:fd:2e:c4:db:3a:12:86:98:2e:a8:
6f:c9:93:04:9e:fc:6e:40:f3:67:17:79:69:cb:14:38:b0:9c:
e8:31:e6:2b:f7:6a:55:b2:2d:ae:6c:28:21:d4:ab:d3:25:1d:
eb:78:f2:2e:5b:ad:9b:a2:f6:5f:9c:02:ec:69:98:55:21:19:
0d:b2:72:e8:45:fc:80:fe:74:c6:e2:8e:20:4a:e1:35:8b:fb:
f5:07:f1:48:99:ba:a6:6b:e7:04:fb:e7:ea:7d:0d:32:bf:1e:
a0:1d:1c:b3:03:e2:82:f3:69:15:3b:b1:1d:04:8c:d8:82:57:
50:41:b3:0d:4e:c6:6a:29:49:f0:9a:7e:5b:3f:0d:66:15:d4:
4a:31:e2:0d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaC4UKYY3e/lbtbNbFr81vO8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0OTEyMmMzNTQzOGE0ZWIyNjIzM2ZkYzZlNGJiMWRmMmRh
YWVmNDIwHhcNMjYwOTE5MDYxODA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWEwZDQ3ZDY1MGE4Y2IzYWVkZTNhOTc3MmFjMWM5Y2ZiOGRmMjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLGf1fd96+APf56UdR5o0eqrCgLS
JDl6fW73/H4tqwpw0MT+9hBaPjvA+TA/ZbWnI3ApryLK5dSDXbUbwMZPs8fbZG41
lf7psH9G7sV99T0/teGdp5NR9pkpEecf1hmODIh/8hxSNXRm9Kq8TnRg+xkz7NG3
7hxLfCobs8BmsroHKGQsRrliU3tITrulWBN97vhx6HWcshDvDV/AdnsBFqMZHuPc
s406bASqB3ws2hCo/V++LDfA4x7B9Ux3Sn5c/5WZ+nBOaypb1R70KF+6WD21dl2n
J7X3AxF2A4YnMb8bWZ8THMYOcXyztIpsEUUz3qRPMcwIOGsCbf8LBR4FdQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEGg1H1lCoyzrt46l3KsHJz7jfKFMB8GA1UdIwQY
MBaAFHSRIsNUOKTrJiM/3G5Lsd8tqu9CMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQt
MDYyYzY5MzNhYmVkLzEvUWFEVWZXVUtqTE91M2pxWGNxd2NuUHVOOG9VLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8xOGE5MWMtMGU3Ny00NWM5LThjYzQtMDYyYzY5MzNhYmVk
LzEvZEpFaXcxUTRwT3NtSXpfY2JrdXgzeTJxNzBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAXy+xMA0G
CSqGSIb3DQEBCwUAA4IBAQBSZR7v0lsqx1xexNGeWq65U0xAmnxpAqoinJjUbIBQ
h4cHexarLuIK0pxyOXqP0C3tsf/ds+sUxx/+URGQzxo8Uc1W3YwFYnj9HRlUb/w/
+WQbiaDqSVnR7kP5eL+/D8N6NycIBfTiJabpvgaexF5LIM50tv0uxNs6EoaYLqhv
yZMEnvxuQPNnF3lpyxQ4sJzoMeYr92pVsi2ubCgh1KvTJR3rePIuW62bovZfnALs
aZhVIRkNsnLoRfyA/nTG4o4gSuE1i/v1B/FImbqma+cE++fqfQ0yvx6gHRyzA+KC
82kVO7EdBIzYgldQQbMNTsZqKUnwmn5bPw1mFdRKMeIN
-----END CERTIFICATE-----
Generated at Sun Sep 20 15:00:38 2026 by rpki-client