Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/qKaLblB6qI7Bd1B3Rur2rBZuS4k.roa
File: qKaLblB6qI7Bd1B3Rur2rBZuS4k.roa (raw, json)
Hash identifier: 2Pg6qLHfXJRZqX0rlw8NIomHNhgYfbLO7yWS70r3WDM=
Subject key identifier: A8:A6:8B:6E:50:7A:A8:8E:C1:77:50:77:46:EA:F6:AC:16:6E:4B:89
Certificate issuer: /CN=3d0483538737453e2f57ffb57499c3922e83636d
Certificate serial: 019EA766C46903343FC967E22D55F6411944
Authority key identifier: 3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/qKaLblB6qI7Bd1B3Rur2rBZuS4k.roa
Signing time: Mon 08 Jun 2026 13:23:10 +0000
ROA not before: Mon 08 Jun 2026 13:23:10 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197170
IP address blocks: 45.156.87.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.mft
rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:a7:66:c4:69:03:34:3f:c9:67:e2:2d:55:f6:41:19:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3d0483538737453e2f57ffb57499c3922e83636d
Validity
Not Before: Jun 8 13:23:10 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8a68b6e507aa88ec177507746eaf6ac166e4b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:de:4c:eb:a9:92:31:39:5d:88:47:04:d7:e5:
8d:c5:b1:29:78:9c:86:e9:28:d6:36:28:b3:c3:37:
c4:9a:01:ce:d2:f9:89:7b:3b:7b:be:eb:81:da:3a:
39:83:db:84:86:ad:46:50:77:0e:63:02:74:22:b0:
c2:19:ed:60:22:7b:70:0c:22:40:d3:0c:72:7f:e7:
1e:60:81:17:bc:64:17:29:5a:51:29:ee:e0:6b:1a:
fb:ce:9f:4c:25:be:26:f8:b1:c7:45:ed:4d:7b:3a:
cc:3c:b8:b8:8d:2d:a5:41:95:2f:aa:f7:c5:95:2c:
7e:5c:27:53:cf:86:af:a0:62:3e:40:73:4d:47:17:
52:d4:d0:5d:dc:19:98:94:0c:dc:60:4e:f7:3a:17:
ac:b7:19:4b:98:fe:96:70:84:2e:0b:06:19:89:4f:
94:75:cd:ed:ff:00:11:5c:7f:b6:51:66:32:9d:a0:
f2:7d:b6:6e:f6:dd:ba:75:63:94:09:c6:a7:3c:48:
b4:f7:c1:37:f2:a6:7a:49:a1:7f:b8:77:5c:22:df:
dd:37:8a:34:4b:08:d1:cc:fc:55:11:7d:f9:8b:96:
c8:b4:35:25:45:3d:5c:4b:91:28:ba:d8:aa:1e:3e:
ab:44:79:2d:74:80:c1:09:bc:b2:50:90:2c:4b:50:
78:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A6:8B:6E:50:7A:A8:8E:C1:77:50:77:46:EA:F6:AC:16:6E:4B:89
X509v3 Authority Key Identifier:
keyid:3D:04:83:53:87:37:45:3E:2F:57:FF:B5:74:99:C3:92:2E:83:63:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PQSDU4c3RT4vV_-1dJnDki6DY20.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/qKaLblB6qI7Bd1B3Rur2rBZuS4k.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a5/e106c3-0b1f-4010-86f1-65a46c8e41e9/1/PQSDU4c3RT4vV_-1dJnDki6DY20.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.156.87.0/24
Signature Algorithm: sha256WithRSAEncryption
2d:44:49:ec:63:14:72:ed:19:18:36:07:7e:62:94:ec:6d:f0:
a5:10:05:87:f1:03:97:e0:32:25:c7:23:bd:cf:6a:37:9e:d2:
c1:be:32:c2:66:0f:b3:d3:2f:b0:a2:a5:f2:18:50:27:b5:82:
fc:a4:ad:93:31:dd:85:5a:b0:d9:78:5e:0d:3e:ac:83:90:17:
eb:a8:ef:cf:bf:85:e3:fd:78:cb:f5:f0:d5:7c:cc:84:07:f1:
ae:6e:b0:b1:53:ae:31:44:c1:ab:22:49:8e:cf:2f:0c:20:3c:
4f:2b:9f:fc:73:68:7c:d2:f6:2e:dd:3f:f5:b7:b7:ab:20:84:
fb:33:b5:95:78:fc:9e:12:3d:45:eb:8a:e7:08:b5:e0:62:69:
1f:a0:d0:7f:8a:8e:df:ec:b9:d0:ff:7c:54:ca:2b:13:18:1f:
e2:99:30:64:f7:cf:6d:6d:29:0c:4e:3b:1a:bd:37:4c:5a:c8:
b0:7c:d2:8a:62:88:6d:c9:b7:b9:97:f2:61:9e:f5:3c:90:fd:
04:85:e5:25:ec:87:cf:33:a4:40:d7:5c:1f:78:f2:be:11:5c:
55:4c:5c:c6:16:7b:49:a7:bd:42:1f:29:cd:85:a2:c3:09:9d:
cb:14:31:1a:28:6a:47:be:b4:37:48:9f:20:01:d3:7d:16:c7:
b6:93:34:fb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ6nZsRpAzQ/yWfiLVX2QRlEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkMDQ4MzUzODczNzQ1M2UyZjU3ZmZiNTc0OTljMzkyMmU4
MzYzNmQwHhcNMjYwNjA4MTMyMzEwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGE2OGI2ZTUwN2FhODhlYzE3NzUwNzc0NmVhZjZhYzE2NmU0Yjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlN5M66mSMTldiEcE1+WNxbEpeJyG
6SjWNiizwzfEmgHO0vmJezt7vuuB2jo5g9uEhq1GUHcOYwJ0IrDCGe1gIntwDCJA
0wxyf+ceYIEXvGQXKVpRKe7gaxr7zp9MJb4m+LHHRe1NezrMPLi4jS2lQZUvqvfF
lSx+XCdTz4avoGI+QHNNRxdS1NBd3BmYlAzcYE73OhestxlLmP6WcIQuCwYZiU+U
dc3t/wARXH+2UWYynaDyfbZu9t26dWOUCcanPEi098E38qZ6SaF/uHdcIt/dN4o0
SwjRzPxVEX35i5bItDUlRT1cS5EoutiqHj6rRHktdIDBCbyyUJAsS1B4hwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKimi25QeqiOwXdQd0bq9qwWbkuJMB8GA1UdIwQY
MBaAFD0Eg1OHN0U+L1f/tXSZw5Iug2NtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEt
NjVhNDZjOGU0MWU5LzEvcUthTGJsQjZxSTdCZDFCM1J1cjJyQlp1UzRrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNS9lMTA2YzMtMGIxZi00MDEwLTg2ZjEtNjVhNDZjOGU0MWU5
LzEvUFFTRFU0YzNSVDR2Vl8tMWRKbkRraTZEWTIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZxXMA0G
CSqGSIb3DQEBCwUAA4IBAQAtREnsYxRy7RkYNgd+YpTsbfClEAWH8QOX4DIlxyO9
z2o3ntLBvjLCZg+z0y+woqXyGFAntYL8pK2TMd2FWrDZeF4NPqyDkBfrqO/Pv4Xj
/XjL9fDVfMyEB/GubrCxU64xRMGrIkmOzy8MIDxPK5/8c2h80vYu3T/1t7erIIT7
M7WVePyeEj1F64rnCLXgYmkfoNB/io7f7LnQ/3xUyisTGB/imTBk989tbSkMTjsa
vTdMWsiwfNKKYohtybe5l/JhnvU8kP0EheUl7IfPM6RA11wfePK+EVxVTFzGFntJ
p71CHynNhaLDCZ3LFDEaKGpHvrQ3SJ8gAdN9Fse2kzT7
-----END CERTIFICATE-----
Generated at Sat Jun 13 11:07:57 2026 by rpki-client