Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/nqLy6vXc7QJkT8qVeO-NeJ41RTQ.roa
File: nqLy6vXc7QJkT8qVeO-NeJ41RTQ.roa (raw, json)
Hash identifier: UPdkXkVzcf45jUKtURLaO9b8juj9XHNGGiuikA8ZS84=
Subject key identifier: 9E:A2:F2:EA:F5:DC:ED:02:64:4F:CA:95:78:EF:8D:78:9E:35:45:34
Certificate issuer: /CN=2793356b72c1041ced79ca1145952b78cb466fc0
Certificate serial: 019E8335E2AA996EBFE88A3354844908E80F
Authority key identifier: 27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/nqLy6vXc7QJkT8qVeO-NeJ41RTQ.roa
Signing time: Mon 01 Jun 2026 12:43:27 +0000
ROA not before: Mon 01 Jun 2026 12:43:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198797
IP address blocks: 213.218.164.0/22 maxlen: 24
2a12:e940::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 01:00:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:83:35:e2:aa:99:6e:bf:e8:8a:33:54:84:49:08:e8:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2793356b72c1041ced79ca1145952b78cb466fc0
Validity
Not Before: Jun 1 12:43:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ea2f2eaf5dced02644fca9578ef8d789e354534
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:49:11:52:1d:ac:8a:68:d0:18:4f:87:54:1a:
ad:46:49:f5:39:b8:d5:f1:99:0a:fb:b2:50:3f:95:
25:85:fd:1d:37:c0:20:f4:17:00:d0:d7:51:3c:28:
38:14:84:9f:7d:d1:f1:b2:c9:d3:37:24:cd:aa:d1:
59:00:c9:69:00:91:ea:7c:a2:b5:b9:cb:05:c4:f1:
f4:70:56:f4:b1:8f:3b:22:79:16:4c:05:6e:f1:8a:
02:09:3f:31:ff:1e:bc:48:43:b4:44:60:2f:d9:07:
06:39:b1:83:46:c4:13:0a:fa:47:31:f7:58:79:85:
6b:40:fb:56:d0:a4:74:a3:47:7e:ba:14:2f:e3:a4:
50:57:f7:73:57:d1:e9:0d:4a:e2:fc:00:99:dc:20:
b0:1d:61:bb:6c:ca:fd:8d:11:18:c1:77:c8:8b:f2:
35:60:91:e8:ae:e2:39:43:d9:76:99:56:09:a5:99:
41:26:f2:9a:b1:ba:cf:03:73:9e:a2:2a:6e:10:3c:
8d:fa:74:18:83:59:95:cb:0c:d1:54:ad:18:5f:df:
d7:ef:33:db:e1:f3:ee:b9:e6:0f:bd:77:89:4e:64:
39:6a:02:13:e2:05:a4:00:32:98:2f:b3:2e:21:1f:
59:c1:58:7b:b8:cf:95:59:15:0f:c2:d3:8e:3d:7e:
d7:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A2:F2:EA:F5:DC:ED:02:64:4F:CA:95:78:EF:8D:78:9E:35:45:34
X509v3 Authority Key Identifier:
keyid:27:93:35:6B:72:C1:04:1C:ED:79:CA:11:45:95:2B:78:CB:46:6F:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/J5M1a3LBBBztecoRRZUreMtGb8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/nqLy6vXc7QJkT8qVeO-NeJ41RTQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/7a0ba3-b5ce-429b-9990-500a9eb9e40f/1/J5M1a3LBBBztecoRRZUreMtGb8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.218.164.0/22
IPv6:
2a12:e940::/29
Signature Algorithm: sha256WithRSAEncryption
82:03:68:39:01:42:f5:5f:7a:d8:63:7d:b9:b9:da:b6:4e:bf:
cf:d8:73:fc:39:2d:36:23:49:df:3a:69:11:bd:9d:4e:e8:a9:
4d:5a:38:9b:7a:0a:51:92:20:19:71:c1:17:9d:91:c6:76:80:
08:73:c5:32:dc:10:c2:b0:ef:38:49:70:f8:e7:1e:8f:07:84:
15:5a:ca:29:91:6f:29:fd:d1:cc:c5:c1:d7:a8:91:d7:b5:d6:
f2:78:20:de:b0:8b:66:35:7f:a0:e0:cd:a8:d4:63:1e:74:48:
47:33:cc:01:df:7b:06:39:c4:e5:cc:bd:29:a4:93:d6:18:63:
77:dd:19:51:a4:ce:81:42:df:e2:53:df:ae:ff:db:6e:e2:8a:
0c:e4:94:e8:6e:df:81:3c:32:38:c9:70:e3:92:c6:24:53:5e:
93:c2:0f:bb:75:d4:8d:ec:74:97:6f:ed:de:bc:db:71:59:f0:
b9:8a:50:39:a5:1b:be:0c:a1:35:ba:b7:90:c1:72:37:85:b9:
f1:55:63:d5:2c:2f:44:ca:88:b7:20:6c:dd:06:f5:19:89:25:
10:e2:41:03:b4:19:83:c9:b0:da:48:45:8a:31:d7:7c:f8:17:
3b:7b:ee:43:d1:25:ec:65:86:b2:88:20:0d:af:8b:49:94:93:
f8:31:73:2b
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ6DNeKqmW6/6IozVIRJCOgPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI3OTMzNTZiNzJjMTA0MWNlZDc5Y2ExMTQ1OTUyYjc4Y2I0
NjZmYzAwHhcNMjYwNjAxMTI0MzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWEyZjJlYWY1ZGNlZDAyNjQ0ZmNhOTU3OGVmOGQ3ODllMzU0NTM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkkRUh2simjQGE+HVBqtRkn1ObjV
8ZkK+7JQP5Ulhf0dN8Ag9BcA0NdRPCg4FISffdHxssnTNyTNqtFZAMlpAJHqfKK1
ucsFxPH0cFb0sY87InkWTAVu8YoCCT8x/x68SEO0RGAv2QcGObGDRsQTCvpHMfdY
eYVrQPtW0KR0o0d+uhQv46RQV/dzV9HpDUri/ACZ3CCwHWG7bMr9jREYwXfIi/I1
YJHoruI5Q9l2mVYJpZlBJvKasbrPA3OeoipuEDyN+nQYg1mVywzRVK0YX9/X7zPb
4fPuueYPvXeJTmQ5agIT4gWkADKYL7MuIR9ZwVh7uM+VWRUPwtOOPX7XKwIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFJ6i8ur13O0CZE/KlXjvjXieNUU0MB8GA1UdIwQY
MBaAFCeTNWtywQQc7XnKEUWVK3jLRm/AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSjVNMWEzTEJCQnp0ZWNvUlJaVXJlTXRHYjhBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy83YTBiYTMtYjVjZS00MjliLTk5OTAt
NTAwYTllYjllNDBmLzEvbnFMeTZ2WGM3UUprVDhxVmVPLU5lSjQxUlRRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy83YTBiYTMtYjVjZS00MjliLTk5OTAtNTAwYTllYjllNDBm
LzEvSjVNMWEzTEJCQnp0ZWNvUlJaVXJlTXRHYjhBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQC1dqkMA0E
AgACMAcDBQMqEulAMA0GCSqGSIb3DQEBCwUAA4IBAQCCA2g5AUL1X3rYY325udq2
Tr/P2HP8OS02I0nfOmkRvZ1O6KlNWjibegpRkiAZccEXnZHGdoAIc8Uy3BDCsO84
SXD45x6PB4QVWsopkW8p/dHMxcHXqJHXtdbyeCDesItmNX+g4M2o1GMedEhHM8wB
33sGOcTlzL0ppJPWGGN33RlRpM6BQt/iU9+u/9tu4ooM5JTobt+BPDI4yXDjksYk
U16Twg+7ddSN7HSXb+3evNtxWfC5ilA5pRu+DKE1ureQwXI3hbnxVWPVLC9Eyoi3
IGzdBvUZiSUQ4kEDtBmDybDaSEWKMdd8+Bc7e+5D0SXsZYayiCANr4tJlJP4MXMr
-----END CERTIFICATE-----
Generated at Sat Jun 13 07:56:25 2026 by rpki-client