Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/QCsqrfUiODWI7Ix3wXo63vBGezU.roa
File: QCsqrfUiODWI7Ix3wXo63vBGezU.roa (raw, json)
Hash identifier: Wto8UR5S/N/e0V0/wYA1ZhPiFTAkJXvxYZMvZFyTs34=
Subject key identifier: 40:2B:2A:AD:F5:22:38:35:88:EC:8C:77:C1:7A:3A:DE:F0:46:7B:35
Certificate issuer: /CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Certificate serial: 019E4F1CA0D82F055C06D24F174D5A4A6E80
Authority key identifier: 5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/QCsqrfUiODWI7Ix3wXo63vBGezU.roa
Signing time: Fri 22 May 2026 09:55:36 +0000
ROA not before: Fri 22 May 2026 09:55:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13287
IP address blocks: 87.232.94.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.mft
rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 00:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:4f:1c:a0:d8:2f:05:5c:06:d2:4f:17:4d:5a:4a:6e:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5fe53c0bfc3c8fb56b81191317144443e0e29d25
Validity
Not Before: May 22 09:55:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=402b2aadf522383588ec8c77c17a3adef0467b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:8c:3f:c4:92:41:02:11:25:60:f5:63:74:be:
ee:a7:df:1e:ef:9b:ce:41:72:71:05:7b:1c:c7:f8:
ec:84:e4:d2:1a:99:1a:ac:03:63:3d:70:e9:43:86:
e9:92:6c:c1:82:65:0f:d6:d9:5c:3f:9c:54:f9:ec:
ab:b6:d4:52:20:71:01:41:21:ea:10:26:ca:cc:ca:
6c:66:4c:97:a7:ed:e0:ac:7d:3d:e1:53:40:d8:15:
bc:ea:56:72:d3:76:bf:80:7a:00:15:dd:6a:6d:8c:
7d:fa:2d:e3:75:d4:99:b7:df:b8:7f:e4:55:5e:ce:
97:12:09:84:b2:e7:ee:2c:1e:1d:8e:57:2b:57:3f:
22:79:aa:36:2f:9c:63:74:0f:31:ec:53:35:a0:23:
f2:6e:4b:7a:16:cd:d1:14:bb:53:f2:5e:54:29:4f:
23:12:8d:d1:b4:26:1b:45:e9:43:90:5a:25:0b:77:
3d:df:f5:d2:82:5f:57:f7:c5:d4:bc:82:d6:d6:5e:
4e:29:b8:ce:71:74:cd:a2:84:8d:57:40:bb:e4:27:
ee:5d:6c:12:07:00:e1:33:28:34:3b:e8:82:f3:3d:
34:69:a9:2e:7e:d3:da:0b:56:a7:24:45:d6:2c:69:
51:5e:fc:ac:34:2c:f4:6d:7b:f3:84:c0:7a:96:46:
2f:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:2B:2A:AD:F5:22:38:35:88:EC:8C:77:C1:7A:3A:DE:F0:46:7B:35
X509v3 Authority Key Identifier:
keyid:5F:E5:3C:0B:FC:3C:8F:B5:6B:81:19:13:17:14:44:43:E0:E2:9D:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X-U8C_w8j7VrgRkTFxREQ-DinSU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/QCsqrfUiODWI7Ix3wXo63vBGezU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/bc6089-3d90-4529-bb47-5cf56ee435b3/1/X-U8C_w8j7VrgRkTFxREQ-DinSU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.94.0/24
Signature Algorithm: sha256WithRSAEncryption
59:f3:70:eb:f8:4b:3f:85:32:80:54:e8:b1:02:a6:76:cb:5f:
93:16:52:98:13:79:38:33:75:44:0b:65:82:6a:2f:c9:58:e3:
c6:04:cd:7d:83:05:3a:56:b6:53:fa:38:7c:e0:0e:01:8f:59:
f1:61:49:af:9d:fe:93:1a:a5:32:78:49:1a:8e:e8:ab:02:d5:
02:fb:60:da:99:51:65:26:d2:8b:e9:1a:15:18:12:9a:11:cb:
6b:10:39:30:e2:d8:cd:07:2a:00:e5:30:01:0b:6b:2f:05:43:
ee:54:23:ab:b5:3b:47:f2:36:f4:53:87:6d:5a:db:34:ad:b1:
e6:d2:71:08:ea:fc:8d:af:46:3f:92:2e:aa:6e:d0:aa:0c:12:
92:71:b1:b6:87:df:30:fc:7b:03:ab:f6:bd:bf:3c:ba:b5:86:
2e:88:49:c5:fc:4e:df:30:aa:99:ca:cd:ca:f5:db:67:95:fa:
3f:56:6f:e2:26:51:37:78:d0:30:d8:2a:64:53:03:56:fc:a7:
e2:bb:45:da:d0:f5:ad:1c:f9:54:c4:9d:d0:ee:57:8a:b2:7c:
9e:31:42:8a:df:58:58:05:0d:3c:36:ac:85:a3:55:94:fd:ce:
53:ff:c1:c9:b3:32:9c:e9:bb:d7:b6:aa:5f:cf:0f:a8:ba:34:
e5:11:b7:26
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ5PHKDYLwVcBtJPF01aSm6AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmZTUzYzBiZmMzYzhmYjU2YjgxMTkxMzE3MTQ0NDQzZTBl
MjlkMjUwHhcNMjYwNTIyMDk1NTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MDJiMmFhZGY1MjIzODM1ODhlYzhjNzdjMTdhM2FkZWYwNDY3YjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuow/xJJBAhElYPVjdL7up98e75vO
QXJxBXscx/jshOTSGpkarANjPXDpQ4bpkmzBgmUP1tlcP5xU+eyrttRSIHEBQSHq
ECbKzMpsZkyXp+3grH094VNA2BW86lZy03a/gHoAFd1qbYx9+i3jddSZt9+4f+RV
Xs6XEgmEsufuLB4djlcrVz8ieao2L5xjdA8x7FM1oCPybkt6Fs3RFLtT8l5UKU8j
Eo3RtCYbRelDkFolC3c93/XSgl9X98XUvILW1l5OKbjOcXTNooSNV0C75CfuXWwS
BwDhMyg0O+iC8z00aakuftPaC1anJEXWLGlRXvysNCz0bXvzhMB6lkYvxwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEArKq31Ijg1iOyMd8F6Ot7wRns1MB8GA1UdIwQY
MBaAFF/lPAv8PI+1a4EZExcUREPg4p0lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDct
NWNmNTZlZTQzNWIzLzEvUUNzcXJmVWlPRFdJN0l4M3dYbzYzdkJHZXpVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC9iYzYwODktM2Q5MC00NTI5LWJiNDctNWNmNTZlZTQzNWIz
LzEvWC1VOENfdzhqN1ZyZ1JrVEZ4UkVRLURpblNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV+heMA0G
CSqGSIb3DQEBCwUAA4IBAQBZ83Dr+Es/hTKAVOixAqZ2y1+TFlKYE3k4M3VEC2WC
ai/JWOPGBM19gwU6VrZT+jh84A4Bj1nxYUmvnf6TGqUyeEkajuirAtUC+2DamVFl
JtKL6RoVGBKaEctrEDkw4tjNByoA5TABC2svBUPuVCOrtTtH8jb0U4dtWts0rbHm
0nEI6vyNr0Y/ki6qbtCqDBKScbG2h98w/HsDq/a9vzy6tYYuiEnF/E7fMKqZys3K
9dtnlfo/Vm/iJlE3eNAw2CpkUwNW/Kfiu0Xa0PWtHPlUxJ3Q7leKsnyeMUKK31hY
BQ08NqyFo1WU/c5T/8HJszKc6bvXtqpfzw+oujTlEbcm
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:56:22 2026 by rpki-client