Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/QwIS_xAxWtopy8QdyOOJFylqkIU.roa
File: QwIS_xAxWtopy8QdyOOJFylqkIU.roa (raw, json)
Hash identifier: OfO0CFoPGD7TTheq/CPc7zZN8HOmEOMjrSqe/DUDRF0=
Subject key identifier: 43:02:12:FF:10:31:5A:DA:29:CB:C4:1D:C8:E3:89:17:29:6A:90:85
Certificate issuer: /CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Certificate serial: 019D492C7EB80048A14B6D314BCC3D3435DB
Authority key identifier: E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/QwIS_xAxWtopy8QdyOOJFylqkIU.roa
Signing time: Wed 01 Apr 2026 13:12:25 +0000
ROA not before: Wed 01 Apr 2026 13:12:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 56582
IP address blocks: 131.222.227.0/24 maxlen: 24
131.222.228.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.mft
rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:49:2c:7e:b8:00:48:a1:4b:6d:31:4b:cc:3d:34:35:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e0559ce889ae4241121fe0a1653e4b955f3edf4b
Validity
Not Before: Apr 1 13:12:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=430212ff10315ada29cbc41dc8e38917296a9085
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:d9:65:cc:15:f1:9b:75:19:09:a4:ff:a7:d1:
9a:15:6d:14:25:4b:be:c1:a1:9a:73:f1:ec:96:46:
f6:8b:cc:cc:ec:9f:b1:92:04:ae:c7:53:4d:b3:5b:
81:04:36:52:13:39:c3:ba:cd:e9:7b:29:d2:8e:15:
30:07:c6:ae:3f:ce:26:f8:27:b7:bc:0d:59:d2:42:
92:2d:c5:90:7d:ba:db:95:2d:96:d6:59:dc:68:a3:
61:6e:f7:41:99:9f:7f:b2:cd:8d:57:e0:77:bb:6e:
91:1b:c9:ec:2b:11:75:51:5e:01:37:29:9a:0a:4b:
4f:ca:1a:b6:cd:6f:0e:95:dd:c8:69:2c:8b:bd:29:
44:98:1e:63:2b:e7:17:17:e9:97:cc:9d:63:51:31:
d3:0c:23:0c:4d:bb:fc:40:3d:8b:d4:e4:2f:07:28:
67:ac:27:e3:13:42:cf:b0:76:73:70:d4:4d:5e:ca:
b7:05:2d:5a:6c:9e:0a:b9:82:19:67:b5:10:f7:fa:
34:4a:a9:d2:a6:62:c6:15:12:96:4a:07:e9:e8:6c:
e4:18:8f:43:34:f5:12:b9:17:de:d9:51:da:6c:d4:
bf:af:5d:06:66:3e:95:92:78:ba:a3:e3:54:3e:4a:
2c:e0:c1:53:3d:63:e2:38:1e:a4:09:e6:d9:eb:84:
0b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:02:12:FF:10:31:5A:DA:29:CB:C4:1D:C8:E3:89:17:29:6A:90:85
X509v3 Authority Key Identifier:
keyid:E0:55:9C:E8:89:AE:42:41:12:1F:E0:A1:65:3E:4B:95:5F:3E:DF:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4FWc6ImuQkESH-ChZT5LlV8-30s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/QwIS_xAxWtopy8QdyOOJFylqkIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/62/1fa4a1-9a1c-47de-aca6-9449957fd5a5/1/4FWc6ImuQkESH-ChZT5LlV8-30s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.222.227.0-131.222.228.255
Signature Algorithm: sha256WithRSAEncryption
3a:b1:64:9f:f1:0d:cb:b0:37:1c:79:a4:1b:dd:8d:13:14:43:
fd:fb:72:ab:08:1a:44:83:d2:41:21:67:1f:f9:a6:e1:65:90:
0f:a5:92:fd:c2:11:cb:97:b5:c4:2b:f7:75:8b:57:3c:48:cb:
d8:10:f6:97:10:fd:12:ee:c5:1c:71:02:31:85:1d:b8:79:22:
0f:ea:ea:f6:4f:7f:15:0b:36:9a:d4:17:38:e8:8c:67:6b:18:
1f:dd:9c:4a:bc:0a:02:b5:49:eb:0b:09:e2:75:c7:d2:b3:b5:
4f:b4:41:f6:bb:f4:18:66:f6:58:2c:fa:a1:74:15:8f:e0:d7:
af:d2:9c:0d:7f:c9:c3:18:16:9e:ec:e6:56:43:3d:e7:ae:49:
03:4b:b6:3a:57:43:2e:a0:c3:f4:d3:a2:cb:23:8a:43:a8:65:
7e:3b:c4:6e:93:19:84:c1:33:cd:05:34:8a:5a:f1:c5:83:dd:
9b:94:8d:c9:f9:a7:46:b7:c4:76:08:dc:70:78:ca:f3:2c:84:
bb:5c:c4:98:f2:d8:6f:e7:b1:18:c2:a2:9a:27:22:06:84:07:
74:3f:43:88:54:28:54:21:cf:06:1f:2a:f0:4f:ca:7a:68:ae:
d9:a6:d4:6f:9f:c1:74:c2:f7:f4:8d:a9:79:24:82:e1:55:1c:
75:cf:45:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 13:09:40 2026 by rpki-client