Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/QbfCrKvh2NIYI3oJ8ZG6em7JZc8.roa
File: QbfCrKvh2NIYI3oJ8ZG6em7JZc8.roa (raw, json)
Hash identifier: 2V3XqNeNFd0SSJuJmBFBmno3apI+YcUhq7UgO9I7f4o=
Subject key identifier: 41:B7:C2:AC:AB:E1:D8:D2:18:23:7A:09:F1:91:BA:7A:6E:C9:65:CF
Certificate issuer: /CN=dee623e2aff7b03afeb94260348c1633b54d9056
Certificate serial: 019C2A633E7488DF572AD25C12C5A95C2DDC
Authority key identifier: DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/QbfCrKvh2NIYI3oJ8ZG6em7JZc8.roa
Signing time: Wed 04 Feb 2026 20:41:12 +0000
ROA not before: Wed 04 Feb 2026 20:41:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 202354
IP address blocks: 194.127.108.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.mft
rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:2a:63:3e:74:88:df:57:2a:d2:5c:12:c5:a9:5c:2d:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dee623e2aff7b03afeb94260348c1633b54d9056
Validity
Not Before: Feb 4 20:41:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41b7c2acabe1d8d218237a09f191ba7a6ec965cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:16:6b:66:6b:90:e3:71:34:f6:6c:9a:2d:7b:
16:b4:02:2d:91:c1:09:06:15:c1:1c:58:4b:e1:26:
07:75:9b:ec:7c:87:ed:e0:a9:00:81:54:b1:3f:70:
99:46:e0:86:52:6f:f8:60:ee:6a:44:5b:f2:1c:f3:
6d:43:ff:47:ce:70:31:d1:16:ed:24:c9:b5:03:f5:
a8:69:40:ea:19:ea:56:01:29:ed:74:4c:34:4a:48:
c4:5a:ac:16:1f:11:8c:f0:92:01:3a:40:32:f5:00:
7f:d7:4c:04:98:ce:b4:d4:17:55:2e:6c:62:97:53:
40:8d:bc:92:59:dc:77:e0:e5:24:34:f1:77:95:d4:
d4:21:31:1e:0c:13:35:09:46:26:d2:90:98:8d:30:
be:5a:d9:c7:2b:3a:e3:10:82:32:69:7b:4b:a6:92:
b6:50:4a:d0:ad:0d:61:02:a2:ee:ae:cc:f7:b7:7e:
d5:8c:f9:7c:b8:12:53:eb:00:62:c4:d0:42:8d:73:
5c:77:3d:0f:27:1f:dd:c3:5b:cf:a3:70:c7:98:95:
bd:18:c4:3b:ba:ec:89:31:e0:a0:8d:01:6d:9e:c3:
f8:6d:3c:20:72:63:40:9d:92:e6:9e:99:0e:5e:b0:
b5:90:2d:46:f6:b7:15:22:53:d7:e6:41:64:1e:5d:
dc:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:B7:C2:AC:AB:E1:D8:D2:18:23:7A:09:F1:91:BA:7A:6E:C9:65:CF
X509v3 Authority Key Identifier:
keyid:DE:E6:23:E2:AF:F7:B0:3A:FE:B9:42:60:34:8C:16:33:B5:4D:90:56
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/3uYj4q_3sDr-uUJgNIwWM7VNkFY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/QbfCrKvh2NIYI3oJ8ZG6em7JZc8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/9871ff-3f26-4b94-a464-6cc1d3ea832e/1/3uYj4q_3sDr-uUJgNIwWM7VNkFY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.127.108.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:4c:97:74:75:2a:a3:25:7b:cf:be:20:b2:24:f0:18:9e:9e:
6f:15:a9:27:1c:1a:60:a8:e6:4c:8c:70:14:5a:01:1e:67:b3:
03:7c:0f:a8:1e:51:11:dc:73:27:19:22:96:c6:83:f3:10:8b:
d4:99:ce:50:63:56:73:2b:79:5c:b7:6a:6f:4a:72:d9:fc:8d:
ef:05:7d:e3:82:d1:f8:36:6b:51:56:79:6f:20:65:ea:4c:7a:
01:1b:ca:5b:08:fb:d4:fd:13:fc:3e:8e:45:cd:ea:84:42:e1:
aa:a8:34:8a:5d:27:55:a4:ec:00:2d:70:73:b3:84:6b:9a:12:
46:ca:6d:c9:17:05:72:37:6e:95:68:c6:41:7b:ff:6a:08:fd:
d0:85:77:e5:95:6d:33:d2:7c:90:a6:c7:09:e7:ab:e2:39:bf:
ae:7b:4a:56:57:b4:97:b9:a0:bd:80:df:a3:40:fb:d2:66:a5:
f9:4c:62:b6:be:12:3a:28:17:fd:04:69:13:a1:22:97:1e:3b:
82:54:fd:37:37:6a:44:39:59:83:ee:d3:39:98:74:29:2f:b4:
fb:4b:a1:ef:fb:00:fe:0f:b3:33:26:45:e9:ac:0d:8b:f5:65:
26:1d:27:ef:6b:bc:34:80:ec:ac:72:91:f5:80:91:bd:6d:98:
d7:68:15:c5
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZwqYz50iN9XKtJcEsWpXC3cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRlZTYyM2UyYWZmN2IwM2FmZWI5NDI2MDM0OGMxNjMzYjU0
ZDkwNTYwHhcNMjYwMjA0MjA0MTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWI3YzJhY2FiZTFkOGQyMTgyMzdhMDlmMTkxYmE3YTZlYzk2NWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xZrZmuQ43E09myaLXsWtAItkcEJ
BhXBHFhL4SYHdZvsfIft4KkAgVSxP3CZRuCGUm/4YO5qRFvyHPNtQ/9HznAx0Rbt
JMm1A/WoaUDqGepWASntdEw0SkjEWqwWHxGM8JIBOkAy9QB/10wEmM601BdVLmxi
l1NAjbySWdx34OUkNPF3ldTUITEeDBM1CUYm0pCYjTC+WtnHKzrjEIIyaXtLppK2
UErQrQ1hAqLursz3t37VjPl8uBJT6wBixNBCjXNcdz0PJx/dw1vPo3DHmJW9GMQ7
uuyJMeCgjQFtnsP4bTwgcmNAnZLmnpkOXrC1kC1G9rcVIlPX5kFkHl3ciwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEG3wqyr4djSGCN6CfGRunpuyWXPMB8GA1UdIwQY
MBaAFN7mI+Kv97A6/rlCYDSMFjO1TZBWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQt
NmNjMWQzZWE4MzJlLzEvUWJmQ3JLdmgyTklZSTNvSjhaRzZlbTdKWmM4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC85ODcxZmYtM2YyNi00Yjk0LWE0NjQtNmNjMWQzZWE4MzJl
LzEvM3VZajRxXzNzRHItdVVKZ05Jd1dNN1ZOa0ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCwn9sMA0G
CSqGSIb3DQEBCwUAA4IBAQA+TJd0dSqjJXvPviCyJPAYnp5vFaknHBpgqOZMjHAU
WgEeZ7MDfA+oHlER3HMnGSKWxoPzEIvUmc5QY1ZzK3lct2pvSnLZ/I3vBX3jgtH4
NmtRVnlvIGXqTHoBG8pbCPvU/RP8Po5FzeqEQuGqqDSKXSdVpOwALXBzs4RrmhJG
ym3JFwVyN26VaMZBe/9qCP3QhXfllW0z0nyQpscJ56viOb+ue0pWV7SXuaC9gN+j
QPvSZqX5TGK2vhI6KBf9BGkToSKXHjuCVP03N2pEOVmD7tM5mHQpL7T7S6Hv+wD+
D7MzJkXprA2L9WUmHSfva7w0gOyscpH1gJG9bZjXaBXF
-----END CERTIFICATE-----
Generated at Mon Mar 2 00:04:02 2026 by rpki-client