Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/Qb3PbnFDL4mdSjR2jyNA4d2qGd8.roa
File: Qb3PbnFDL4mdSjR2jyNA4d2qGd8.roa (raw, json)
Hash identifier: SSV+bssWPQAuqc5ovMdhlCtwycW1eCc9kZ2WzWI50JU=
Subject key identifier: 41:BD:CF:6E:71:43:2F:89:9D:4A:34:76:8F:23:40:E1:DD:AA:19:DF
Certificate issuer: /CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Certificate serial: 01A0A740F72228D9AAB1F394CC3839DC4C48
Authority key identifier: AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/Qb3PbnFDL4mdSjR2jyNA4d2qGd8.roa
Signing time: Tue 15 Sep 2026 22:47:27 +0000
ROA not before: Tue 15 Sep 2026 22:47:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 2.57.69.0/24 maxlen: 24
141.98.131.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:a7:40:f7:22:28:d9:aa:b1:f3:94:cc:38:39:dc:4c:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff6f85aad101c456c1ac9a01a7192fc5788e92c
Validity
Not Before: Sep 15 22:47:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41bdcf6e71432f899d4a34768f2340e1ddaa19df
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:f8:01:a3:13:1f:54:dd:ad:26:f0:49:7e:7d:
01:37:73:a9:75:31:46:53:cc:1d:34:60:50:8c:d3:
ce:31:92:99:d9:0d:25:6f:33:e6:6e:80:13:ff:8e:
6d:76:85:81:3a:cd:7e:96:97:0d:b6:6a:f6:58:98:
ce:0f:69:ab:7e:04:d8:7f:fe:7c:60:ae:77:90:53:
60:ab:8d:c1:20:03:1d:26:6a:17:7d:fe:ff:47:b1:
50:84:45:52:2d:27:52:7e:77:d4:05:cc:aa:45:d5:
18:cf:11:5b:34:fa:d5:b9:df:c4:46:6d:02:d8:51:
45:c3:00:05:43:04:aa:2b:05:12:ac:95:5c:72:f3:
ef:b8:b7:c9:6d:c7:c5:c7:e8:ce:99:33:35:ac:ca:
23:64:36:03:af:6e:ef:95:7b:0a:3b:20:99:ee:56:
48:20:7f:8a:a8:67:2c:a5:79:62:84:ae:65:01:d8:
6f:4f:7e:e6:3e:26:81:94:31:5d:59:5f:35:1c:39:
6b:54:6c:85:a6:53:95:4f:90:e9:c7:e8:cd:2a:9c:
ca:73:76:db:06:5e:09:01:c4:87:38:c5:a6:3f:74:
37:75:04:88:e1:4d:5a:12:3d:61:7f:7a:1a:57:8a:
0a:a8:7d:49:ee:81:7b:86:b9:fa:1e:92:16:a3:b9:
24:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:BD:CF:6E:71:43:2F:89:9D:4A:34:76:8F:23:40:E1:DD:AA:19:DF
X509v3 Authority Key Identifier:
keyid:AF:F6:F8:5A:AD:10:1C:45:6C:1A:C9:A0:1A:71:92:FC:57:88:E9:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/Qb3PbnFDL4mdSjR2jyNA4d2qGd8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/df719a-492f-47cb-9212-644bd0fc7f80/1/r_b4Wq0QHEVsGsmgGnGS_FeI6Sw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.57.69.0/24
141.98.131.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:09:17:c5:69:dd:20:4c:3d:95:d9:43:90:af:6c:68:d5:2b:
e5:5c:4f:8c:58:39:ba:0a:3c:6f:c0:91:6d:9c:54:60:25:ef:
8d:e2:c7:ae:0b:a6:fd:b5:6b:fd:95:c2:d1:89:fc:3d:d0:88:
87:17:8a:92:f9:26:54:0a:5a:c9:47:73:22:c3:3e:d6:73:c1:
7e:00:d7:23:6e:34:b0:6d:9c:72:02:e7:0c:8d:95:0b:34:4b:
15:4c:0f:66:a2:48:24:11:39:63:a9:32:84:2f:14:83:c4:0c:
57:93:9b:f9:b4:14:ce:57:40:d6:aa:b1:d8:81:6d:32:73:1e:
12:78:fa:74:b1:f5:df:0f:2e:31:a2:ad:e2:f0:26:64:14:98:
ae:5e:cd:93:a2:02:48:8b:cf:11:f2:5e:92:d2:91:05:a4:9f:
b8:b7:48:38:ba:c1:21:86:94:4e:83:80:e0:43:2a:3c:2f:16:
7b:e4:e3:36:0d:07:6b:02:00:b5:56:6e:a7:77:b8:cb:21:f1:
5e:4e:9f:98:ee:5e:8f:70:62:44:99:82:a2:46:a9:88:b6:30:
a1:c8:74:9b:51:fe:5c:cc:df:19:4f:57:a4:7f:88:c6:3d:27:
8b:fa:ee:6f:ac:58:ed:11:46:9b:c7:0b:57:e9:4f:05:e5:60:
04:0c:48:0f
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaCnQPciKNmqsfOUzDg53ExIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjZmODVhYWQxMDFjNDU2YzFhYzlhMDFhNzE5MmZjNTc4
OGU5MmMwHhcNMjYwOTE1MjI0NzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWJkY2Y2ZTcxNDMyZjg5OWQ0YTM0NzY4ZjIzNDBlMWRkYWExOWRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsvgBoxMfVN2tJvBJfn0BN3OpdTFG
U8wdNGBQjNPOMZKZ2Q0lbzPmboAT/45tdoWBOs1+lpcNtmr2WJjOD2mrfgTYf/58
YK53kFNgq43BIAMdJmoXff7/R7FQhEVSLSdSfnfUBcyqRdUYzxFbNPrVud/ERm0C
2FFFwwAFQwSqKwUSrJVccvPvuLfJbcfFx+jOmTM1rMojZDYDr27vlXsKOyCZ7lZI
IH+KqGcspXlihK5lAdhvT37mPiaBlDFdWV81HDlrVGyFplOVT5Dpx+jNKpzKc3bb
Bl4JAcSHOMWmP3Q3dQSI4U1aEj1hf3oaV4oKqH1J7oF7hrn6HpIWo7kkVQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEG9z25xQy+JnUo0do8jQOHdqhnfMB8GA1UdIwQY
MBaAFK/2+FqtEBxFbBrJoBpxkvxXiOksMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTIt
NjQ0YmQwZmM3ZjgwLzEvUWIzUGJuRkRMNG1kU2pSMmp5TkE0ZDJxR2Q4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi9kZjcxOWEtNDkyZi00N2NiLTkyMTItNjQ0YmQwZmM3Zjgw
LzEvcl9iNFdxMFFIRVZzR3NtZ0duR1NfRmVJNlN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAAjlFAwQA
jWKDMA0GCSqGSIb3DQEBCwUAA4IBAQAvCRfFad0gTD2V2UOQr2xo1SvlXE+MWDm6
CjxvwJFtnFRgJe+N4seuC6b9tWv9lcLRifw90IiHF4qS+SZUClrJR3Miwz7Wc8F+
ANcjbjSwbZxyAucMjZULNEsVTA9mokgkETljqTKELxSDxAxXk5v5tBTOV0DWqrHY
gW0ycx4SePp0sfXfDy4xoq3i8CZkFJiuXs2TogJIi88R8l6S0pEFpJ+4t0g4usEh
hpROg4DgQyo8LxZ75OM2DQdrAgC1Vm6nd7jLIfFeTp+Y7l6PcGJEmYKiRqmItjCh
yHSbUf5czN8ZT1ekf4jGPSeL+u5vrFjtEUabxwtX6U8F5WAEDEgP
-----END CERTIFICATE-----
Generated at Sun Sep 20 19:50:18 2026 by rpki-client