Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/QCfA9DhW_LqfFX-Esz5kIwPYAzg.roa
File: QCfA9DhW_LqfFX-Esz5kIwPYAzg.roa (raw, json)
Hash identifier: M69ZqcFPRJj+KBGgBu0O+FBYsQKc3GPhvLHPwKiBGjM=
Subject key identifier: 40:27:C0:F4:38:56:FC:BA:9F:15:7F:84:B3:3E:64:23:03:D8:03:38
Certificate issuer: /CN=36d6044966c57439aaf520310885f81d45275b2a
Certificate serial: 01A0A2E31971DA8453AE03977D6E68F2445D
Authority key identifier: 36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/QCfA9DhW_LqfFX-Esz5kIwPYAzg.roa
Signing time: Tue 15 Sep 2026 02:26:27 +0000
ROA not before: Tue 15 Sep 2026 02:26:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 152179
IP address blocks: 134.168.0.0/23 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 10:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a2:e3:19:71:da:84:53:ae:03:97:7d:6e:68:f2:44:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36d6044966c57439aaf520310885f81d45275b2a
Validity
Not Before: Sep 15 02:26:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4027c0f43856fcba9f157f84b33e642303d80338
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:d4:d7:a5:41:ad:51:a8:f2:f5:8a:c2:ef:1e:
ac:05:ee:83:aa:59:a4:0f:a2:01:1b:8d:69:68:d6:
27:8d:ad:c6:22:eb:e2:6c:30:13:f4:84:93:be:ea:
9b:94:16:87:25:de:43:f2:3e:eb:0a:5e:f3:fe:91:
7a:4e:9b:e9:b3:dc:71:aa:34:56:1f:62:22:4c:81:
ce:27:57:81:7e:e5:c5:63:51:bc:60:91:d8:58:27:
9c:c2:be:df:8a:32:8a:57:64:50:20:31:af:13:03:
5d:7a:78:48:1c:f9:78:dd:77:0c:db:25:60:3e:d3:
c5:98:a4:23:c1:8e:b7:28:94:b0:33:f4:43:4e:cb:
b4:c6:1c:cb:b9:78:bb:b7:b8:45:25:d0:b4:74:b4:
8d:26:de:95:ce:d3:bd:a5:9d:7b:b1:0c:ca:95:04:
dc:e1:ed:c2:d3:cf:f9:9b:57:90:b5:77:e5:1e:04:
50:89:4c:c4:b5:56:bf:c3:46:3e:da:c6:17:e9:80:
9c:ef:ca:b5:45:f4:97:cf:5a:42:1f:27:79:99:f3:
d8:eb:5d:09:b1:61:cd:74:ee:af:08:77:81:94:87:
e5:b1:b7:8a:ee:44:65:85:0b:f4:81:5a:bf:a5:7e:
ae:b3:63:0e:4e:a8:5e:ee:f5:e2:ed:11:84:0d:20:
6f:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:27:C0:F4:38:56:FC:BA:9F:15:7F:84:B3:3E:64:23:03:D8:03:38
X509v3 Authority Key Identifier:
keyid:36:D6:04:49:66:C5:74:39:AA:F5:20:31:08:85:F8:1D:45:27:5B:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NtYESWbFdDmq9SAxCIX4HUUnWyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/QCfA9DhW_LqfFX-Esz5kIwPYAzg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/0543e3-1bf0-4db3-b01e-a1d6054350d2/1/NtYESWbFdDmq9SAxCIX4HUUnWyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
134.168.0.0/23
Signature Algorithm: sha256WithRSAEncryption
e1:68:42:97:3c:ea:87:c8:06:fe:d9:99:00:d9:a0:00:30:7e:
23:d6:0b:1f:8f:30:0b:fc:79:eb:9c:ca:bb:6c:39:1b:91:67:
ba:b4:96:da:c5:f8:90:6f:b7:35:0c:44:af:ff:92:0b:11:57:
43:32:e7:1e:dc:d0:20:d1:f6:06:43:a0:ac:ee:65:61:d0:4b:
ef:c3:de:38:5e:24:6b:d2:b5:5d:d4:93:0b:3f:bd:d9:23:f2:
bd:2a:6a:f1:f7:21:21:da:ef:46:fb:ea:31:2c:48:4f:19:c0:
20:44:b4:39:6a:36:bd:4c:3c:af:2b:cd:09:b8:25:cf:a3:6e:
ee:e6:ec:d0:b0:a1:fd:98:2a:6f:d7:2d:70:b8:dd:83:a8:83:
60:4d:2c:07:78:70:49:31:9b:7f:10:5d:e9:b7:4c:40:f3:7f:
cc:12:5e:d6:aa:ed:55:b4:50:ab:06:53:f3:34:0b:19:60:f9:
98:9e:f3:a7:60:e2:83:a8:fb:e1:e2:ea:cb:89:e2:48:99:32:
8b:39:03:49:5c:4f:ef:64:64:22:b5:7c:51:34:0d:a7:7d:0f:
75:2a:87:77:48:4f:f6:b8:33:92:a0:4d:2f:9c:d4:3a:4e:88:
1b:b5:f0:f8:48:c8:48:5c:5c:45:a8:9a:f7:a3:ea:7a:68:f4:
86:74:97:d7
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCi4xlx2oRTrgOXfW5o8kRdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2ZDYwNDQ5NjZjNTc0MzlhYWY1MjAzMTA4ODVmODFkNDUy
NzViMmEwHhcNMjYwOTE1MDIyNjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDI3YzBmNDM4NTZmY2JhOWYxNTdmODRiMzNlNjQyMzAzZDgwMzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNTXpUGtUajy9YrC7x6sBe6Dqlmk
D6IBG41paNYnja3GIuvibDAT9ISTvuqblBaHJd5D8j7rCl7z/pF6Tpvps9xxqjRW
H2IiTIHOJ1eBfuXFY1G8YJHYWCecwr7fijKKV2RQIDGvEwNdenhIHPl43XcM2yVg
PtPFmKQjwY63KJSwM/RDTsu0xhzLuXi7t7hFJdC0dLSNJt6VztO9pZ17sQzKlQTc
4e3C08/5m1eQtXflHgRQiUzEtVa/w0Y+2sYX6YCc78q1RfSXz1pCHyd5mfPY610J
sWHNdO6vCHeBlIflsbeK7kRlhQv0gVq/pX6us2MOTqhe7vXi7RGEDSBvQQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEAnwPQ4Vvy6nxV/hLM+ZCMD2AM4MB8GA1UdIwQY
MBaAFDbWBElmxXQ5qvUgMQiF+B1FJ1sqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnRZRVNXYkZkRG1xOVNBeENJWDRIVVVuV3lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8wNTQzZTMtMWJmMC00ZGIzLWIwMWUt
YTFkNjA1NDM1MGQyLzEvUUNmQTlEaFdfTHFmRlgtRXN6NWtJd1BZQXpnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8wNTQzZTMtMWJmMC00ZGIzLWIwMWUtYTFkNjA1NDM1MGQy
LzEvTnRZRVNXYkZkRG1xOVNBeENJWDRIVVVuV3lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBhqgAMA0G
CSqGSIb3DQEBCwUAA4IBAQDhaEKXPOqHyAb+2ZkA2aAAMH4j1gsfjzAL/HnrnMq7
bDkbkWe6tJbaxfiQb7c1DESv/5ILEVdDMuce3NAg0fYGQ6Cs7mVh0Evvw944XiRr
0rVd1JMLP73ZI/K9Kmrx9yEh2u9G++oxLEhPGcAgRLQ5aja9TDyvK80JuCXPo27u
5uzQsKH9mCpv1y1wuN2DqINgTSwHeHBJMZt/EF3pt0xA83/MEl7Wqu1VtFCrBlPz
NAsZYPmYnvOnYOKDqPvh4urLieJImTKLOQNJXE/vZGQitXxRNA2nfQ91Kod3SE/2
uDOSoE0vnNQ6TogbtfD4SMhIXFxFqJr3o+p6aPSGdJfX
-----END CERTIFICATE-----
Generated at Mon Sep 21 17:53:48 2026 by rpki-client