Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/QKVIm5IN9DXhY0lZHIuK-tLCdjc.roa
File: QKVIm5IN9DXhY0lZHIuK-tLCdjc.roa (raw, json)
Hash identifier: B0l0KtZlg6feZIbRhT20JcRhbB1GlNPkc7c4bzQ8ZMk=
Subject key identifier: 40:A5:48:9B:92:0D:F4:35:E1:63:49:59:1C:8B:8A:FA:D2:C2:76:37
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 01A0AA929261DF4CE7094A13B9DE6D33349C
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/QKVIm5IN9DXhY0lZHIuK-tLCdjc.roa
Signing time: Wed 16 Sep 2026 14:15:27 +0000
ROA not before: Wed 16 Sep 2026 14:15:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 62563
IP address blocks: 179.255.184.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:aa:92:92:61:df:4c:e7:09:4a:13:b9:de:6d:33:34:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Sep 16 14:15:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=40a5489b920df435e16349591c8b8afad2c27637
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:aa:09:50:2c:7f:14:c8:99:eb:44:7c:37:de:
9a:03:5f:79:7d:ca:22:2d:43:0d:9a:01:d5:9c:a2:
a2:a3:4b:4f:44:bd:a7:8a:a8:85:02:00:fa:ad:4e:
7f:5c:4b:1c:63:b5:cb:d3:a7:59:e8:7a:33:14:b7:
c2:7c:65:87:63:51:c6:96:2e:22:57:07:8e:de:1b:
ca:92:6f:a9:09:a4:e4:81:0f:86:77:f5:7a:1a:3f:
52:7c:83:31:38:be:a7:31:ae:50:8e:10:ff:77:bc:
8c:69:0a:1e:d6:88:21:39:2d:56:67:77:76:09:4e:
66:e7:27:9c:c2:fa:ec:eb:07:bd:f5:65:c8:c0:f1:
53:bf:f0:f7:85:b3:5c:bc:8d:66:9b:40:a2:16:a9:
43:48:10:1a:5d:26:85:94:36:9d:93:ce:99:9f:e2:
c9:5f:b7:5c:35:d9:83:bd:1b:ad:d1:80:33:b2:6b:
0b:a3:3c:4f:41:7d:14:82:93:5f:1b:0d:ee:6a:71:
8c:23:e2:c5:1b:e2:53:92:15:54:fc:53:a1:67:38:
a7:21:b5:85:b3:ba:78:a7:28:78:ab:88:ea:9f:be:
61:f9:76:02:09:59:c3:3b:ba:4d:72:82:4f:d5:b9:
17:40:54:54:77:fe:cf:32:6b:12:32:c7:48:3e:67:
99:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:A5:48:9B:92:0D:F4:35:E1:63:49:59:1C:8B:8A:FA:D2:C2:76:37
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/QKVIm5IN9DXhY0lZHIuK-tLCdjc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.255.184.0/24
Signature Algorithm: sha256WithRSAEncryption
0d:c1:8b:27:45:42:fe:be:af:7e:71:3f:33:63:4e:5a:35:95:
0f:ab:46:3a:2a:7d:12:b8:8f:d8:6d:68:1e:d4:65:a7:0c:46:
3b:5b:aa:1f:7f:4b:a9:ad:7b:1a:c9:f1:48:e7:d3:b7:22:a9:
f4:e2:06:cf:95:3d:24:aa:51:8d:37:ab:c9:e6:68:2f:75:27:
6d:96:17:01:5d:5e:db:ad:8c:90:16:8f:81:cb:5f:3a:9b:79:
a1:eb:bb:79:0b:4d:45:60:50:68:32:c9:d1:b6:3d:26:20:86:
39:0c:43:90:4f:a7:1c:7c:87:8c:73:93:76:2a:85:78:33:bd:
08:fb:cc:16:1b:aa:1c:48:b9:f2:d3:f7:14:53:4d:9a:af:9d:
39:54:ba:33:ab:c2:f8:56:8a:83:45:ad:d4:99:88:34:31:2b:
94:0c:6f:84:3a:c5:a7:cf:fa:41:2b:57:4f:77:fe:7c:08:7b:
5c:bd:56:0e:fb:a6:9c:f0:44:36:3b:bb:03:3f:d9:8d:f3:bc:
61:e3:fb:87:a1:de:2e:0e:44:f8:f7:6d:ce:44:32:b5:d2:b2:
16:ad:e8:ac:c9:bd:6c:eb:01:bd:c7:d2:6c:37:1e:07:eb:3d:
29:72:17:44:4a:b5:9b:54:fc:a7:4f:b1:61:57:64:4c:2f:c1:
18:77:14:cc
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaCqkpJh30znCUoTud5tMzScMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZmEyNjIzYjIyMmQwOGQ5MzU2OTc1MDQ0Yjk0MDdiNWZl
YTQ4YmEwHhcNMjYwOTE2MTQxNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MGE1NDg5YjkyMGRmNDM1ZTE2MzQ5NTkxYzhiOGFmYWQyYzI3NjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoqoJUCx/FMiZ60R8N96aA195fcoi
LUMNmgHVnKKio0tPRL2niqiFAgD6rU5/XEscY7XL06dZ6HozFLfCfGWHY1HGli4i
VweO3hvKkm+pCaTkgQ+Gd/V6Gj9SfIMxOL6nMa5QjhD/d7yMaQoe1oghOS1WZ3d2
CU5m5yecwvrs6we99WXIwPFTv/D3hbNcvI1mm0CiFqlDSBAaXSaFlDadk86Zn+LJ
X7dcNdmDvRut0YAzsmsLozxPQX0UgpNfGw3uanGMI+LFG+JTkhVU/FOhZzinIbWF
s7p4pyh4q4jqn75h+XYCCVnDO7pNcoJP1bkXQFRUd/7PMmsSMsdIPmeZiQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEClSJuSDfQ14WNJWRyLivrSwnY3MB8GA1UdIwQY
MBaAFGn6JiOyItCNk1aXUES5QHtf6ki6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYt
NzJmYjk3ZDU5Y2U0LzEvUUtWSW01SU45RFhoWTBsWkhJdUstdExDZGpjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYtNzJmYjk3ZDU5Y2U0
LzEvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAs/+4MA0G
CSqGSIb3DQEBCwUAA4IBAQANwYsnRUL+vq9+cT8zY05aNZUPq0Y6Kn0SuI/YbWge
1GWnDEY7W6off0uprXsayfFI59O3Iqn04gbPlT0kqlGNN6vJ5mgvdSdtlhcBXV7b
rYyQFo+By186m3mh67t5C01FYFBoMsnRtj0mIIY5DEOQT6ccfIeMc5N2KoV4M70I
+8wWG6ocSLny0/cUU02ar505VLozq8L4VoqDRa3UmYg0MSuUDG+EOsWnz/pBK1dP
d/58CHtcvVYO+6ac8EQ2O7sDP9mN87xh4/uHod4uDkT4923ORDK10rIWreisyb1s
6wG9x9JsNx4H6z0pchdESrWbVPynT7FhV2RML8EYdxTM
-----END CERTIFICATE-----
Generated at Tue Sep 22 19:21:39 2026 by rpki-client