Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/1-qCzU7rt1XBn9cM66mOKV2JKpmM.roa
File: 1-qCzU7rt1XBn9cM66mOKV2JKpmM.roa (raw, json)
Hash identifier: 2yNm3gZsn/uIFKiYLjVHUVr0sDTSowqLDiGRvdYsMoM=
Subject key identifier: FA:A0:B3:53:BA:ED:D5:70:67:F5:C3:3A:EA:63:8A:57:62:4A:A6:63
Certificate issuer: /CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Certificate serial: 019C6596E1B82B78026307F65AE6FAB83A4A
Authority key identifier: B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/1-qCzU7rt1XBn9cM66mOKV2JKpmM.roa
Signing time: Mon 16 Feb 2026 08:35:12 +0000
ROA not before: Mon 16 Feb 2026 08:35:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5430
IP address blocks: 194.97.172.0/22 maxlen: 22
2a00:dca1::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.mft
rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 13:50:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:65:96:e1:b8:2b:78:02:63:07:f6:5a:e6:fa:b8:3a:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32ee2b39712377b4bfec9e66ac7e6e908efceec
Validity
Not Before: Feb 16 08:35:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=faa0b353baedd57067f5c33aea638a57624aa663
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:fc:82:e8:d1:1e:9b:2b:3d:87:52:49:54:b3:
ed:b5:dc:8a:a7:89:a1:f8:4b:c8:08:70:69:21:48:
f4:3a:9c:f0:23:98:24:b4:39:08:c9:91:d0:98:3e:
10:3a:25:0a:1a:e1:21:c4:4d:5e:b9:e6:e3:62:12:
ea:08:a4:c9:d8:f3:70:6d:c5:6d:94:e2:d4:e9:45:
a7:de:d5:0a:4d:e5:ff:dc:4c:87:15:aa:7b:53:d7:
ee:bc:25:de:b6:a4:b9:1c:bf:d2:80:df:b2:df:88:
90:b9:7a:ae:f8:3b:29:d9:79:4a:e8:00:01:8c:3a:
ed:66:fa:0d:fa:8d:8c:4a:9d:b3:63:ad:ee:69:cf:
b2:12:0f:9e:a1:83:14:ba:87:f8:13:90:81:6b:a8:
8f:60:0a:f4:dd:06:9d:3e:ff:aa:2d:d1:db:4c:4f:
b1:b9:ee:60:b8:96:dc:1f:ab:88:5c:fc:6b:84:43:
c7:a0:11:20:2e:65:98:a9:c4:5a:8b:6d:0b:9d:39:
60:a0:38:b4:b5:e3:db:a1:f4:97:90:e6:ed:f1:a6:
7a:fc:53:7f:f3:a3:7f:d8:38:9f:07:e2:2c:13:6d:
5e:c3:cd:44:de:f9:ed:f1:76:f5:c1:b5:b3:7f:e2:
6d:85:2d:3c:f1:45:33:7d:0e:50:c4:45:4c:9a:2e:
97:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:A0:B3:53:BA:ED:D5:70:67:F5:C3:3A:EA:63:8A:57:62:4A:A6:63
X509v3 Authority Key Identifier:
keyid:B3:2E:E2:B3:97:12:37:7B:4B:FE:C9:E6:6A:C7:E6:E9:08:EF:CE:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sy7is5cSN3tL_snmasfm6Qjvzuw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/1-qCzU7rt1XBn9cM66mOKV2JKpmM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/dfa51b-46aa-4084-a343-f016ca5da219/1/sy7is5cSN3tL_snmasfm6Qjvzuw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.97.172.0/22
IPv6:
2a00:dca1::/32
Signature Algorithm: sha256WithRSAEncryption
34:ac:9e:59:95:92:48:45:24:17:af:f3:28:43:7a:6a:7b:ab:
a5:38:a9:df:07:d4:63:1a:3d:da:20:bc:c2:bf:5f:9e:ea:ad:
2c:f2:d8:9a:b1:56:b1:aa:a4:94:a6:04:7e:75:e8:f1:73:66:
e3:37:5d:b6:8d:e3:b4:41:91:69:41:49:80:37:e6:af:51:82:
91:89:5d:6c:95:3e:20:ec:a5:e6:b5:ef:ae:7e:75:ef:80:00:
3b:aa:6e:55:b9:2d:6d:41:58:eb:5d:ee:db:a6:ed:dc:c6:13:
df:8e:a2:f6:dc:d4:f3:4e:81:f4:62:c2:0b:42:52:df:a0:ff:
f2:8e:3a:28:f9:28:eb:41:e4:bd:43:57:a8:c5:e1:83:1b:bd:
a2:04:96:cc:43:c6:6e:54:dd:b2:74:cb:35:4e:4e:a8:88:98:
94:32:7f:e0:e3:1a:a4:f2:98:4a:66:c1:cb:76:98:75:f2:86:
1a:8c:57:f4:cf:31:2a:a0:94:f3:17:f9:37:90:77:74:ed:48:
90:89:60:76:c8:1f:75:d5:81:ef:f3:3e:98:21:4d:ec:18:f0:
25:c1:b7:d1:a0:35:6e:b1:bd:9f:f7:3a:90:9d:2c:6f:30:2b:
19:46:cc:81:ad:a5:97:56:ed:75:51:69:51:58:22:87:9c:37:
af:a4:0a:d8
-----BEGIN CERTIFICATE-----
MIIFDTCCA/WgAwIBAgISAZxlluG4K3gCYwf2Wub6uDpKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMmVlMmIzOTcxMjM3N2I0YmZlYzllNjZhYzdlNmU5MDhl
ZmNlZWMwHhcNMjYwMjE2MDgzNTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmYWEwYjM1M2JhZWRkNTcwNjdmNWMzM2FlYTYzOGE1NzYyNGFhNjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuvyC6NEemys9h1JJVLPttdyKp4mh
+EvICHBpIUj0OpzwI5gktDkIyZHQmD4QOiUKGuEhxE1euebjYhLqCKTJ2PNwbcVt
lOLU6UWn3tUKTeX/3EyHFap7U9fuvCXetqS5HL/SgN+y34iQuXqu+Dsp2XlK6AAB
jDrtZvoN+o2MSp2zY63uac+yEg+eoYMUuof4E5CBa6iPYAr03QadPv+qLdHbTE+x
ue5guJbcH6uIXPxrhEPHoBEgLmWYqcRai20LnTlgoDi0tePbofSXkObt8aZ6/FN/
86N/2DifB+IsE21ew81E3vnt8Xb1wbWzf+JthS088UUzfQ5QxEVMmi6X5QIDAQAB
o4ICGTCCAhUwHQYDVR0OBBYEFPqgs1O67dVwZ/XDOupjildiSqZjMB8GA1UdIwQY
MBaAFLMu4rOXEjd7S/7J5mrH5ukI787sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3k3aXM1Y1NOM3RMX3NubWFzZm02UWp2enV3LmNlcjCB
jgYIKwYBBQUHAQsEgYEwfzB9BggrBgEFBQcwC4ZxcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9kZmE1MWItNDZhYS00MDg0LWEzNDMt
ZjAxNmNhNWRhMjE5LzEvMS1xQ3pVN3J0MVhCbjljTTY2bU9LVjJKS3BtTS5yb2Ew
gYEGA1UdHwR6MHgwdqB0oHKGcHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBvc2l0
b3J5L0RFRkFVTFQvMDIvZGZhNTFiLTQ2YWEtNDA4NC1hMzQzLWYwMTZjYTVkYTIx
OS8xL3N5N2lzNWNTTjN0TF9zbm1hc2ZtNlFqdnp1dy5jcmwwGAYDVR0gAQH/BA4w
DDAKBggrBgEFBQcOAjAuBggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAsJhrDAN
BAIAAjAHAwUAKgDcoTANBgkqhkiG9w0BAQsFAAOCAQEANKyeWZWSSEUkF6/zKEN6
anurpTip3wfUYxo92iC8wr9fnuqtLPLYmrFWsaqklKYEfnXo8XNm4zddto3jtEGR
aUFJgDfmr1GCkYldbJU+IOyl5rXvrn5174AAO6puVbktbUFY613u26bt3MYT346i
9tzU806B9GLCC0JS36D/8o46KPko60HkvUNXqMXhgxu9ogSWzEPGblTdsnTLNU5O
qIiYlDJ/4OMapPKYSmbBy3aYdfKGGoxX9M8xKqCU8xf5N5B3dO1IkIlgdsgfddWB
7/M+mCFN7BjwJcG30aA1brG9n/c6kJ0sbzArGUbMga2ll1btdVFpUVgih5w3r6QK
2A==
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:03:30 2026 by rpki-client