Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Rq-fvX6Qzzw8WsafPGw_SdERTYY.roa
File: Rq-fvX6Qzzw8WsafPGw_SdERTYY.roa (raw, json)
Hash identifier: 4yqoDTZiQLwzBpVwlWP+hgEFE5DCV5ilCq7V0o/0AWU=
Subject key identifier: 46:AF:9F:BD:7E:90:CF:3C:3C:5A:C6:9F:3C:6C:3F:49:D1:11:4D:86
Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722
Certificate serial: 019C9F1349F0BA23550B00D5BAF32AB16709
Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Rq-fvX6Qzzw8WsafPGw_SdERTYY.roa
Signing time: Fri 27 Feb 2026 12:29:27 +0000
ROA not before: Fri 27 Feb 2026 12:29:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 200019
IP address blocks: 80.97.124.0/24 maxlen: 24
80.97.128.0/20 maxlen: 20
81.180.92.0/23 maxlen: 24
85.120.81.0/24 maxlen: 24
85.121.4.0/23 maxlen: 24
85.121.149.0/24 maxlen: 24
85.121.183.0/24 maxlen: 24
85.122.114.0/24 maxlen: 24
194.102.105.0/24 maxlen: 24
217.156.8.0/23 maxlen: 24
217.156.64.0/24 maxlen: 24
217.156.65.0/24 maxlen: 24
217.156.123.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft
rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:9f:13:49:f0:ba:23:55:0b:00:d5:ba:f3:2a:b1:67:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722
Validity
Not Before: Feb 27 12:29:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=46af9fbd7e90cf3c3c5ac69f3c6c3f49d1114d86
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:01:e9:c8:f0:d7:66:65:bf:44:f4:b4:a5:56:
6f:55:77:48:10:fb:ab:27:55:09:86:3d:11:95:fe:
c0:c1:29:2f:a2:0a:ef:cf:cf:71:4e:f3:4b:d4:11:
13:d5:59:62:2d:46:67:4e:22:70:58:f4:41:df:02:
91:cd:fe:e8:6b:29:0a:7e:2a:16:f3:db:dd:3f:be:
ce:05:2a:91:50:2d:cc:ca:91:83:d1:15:e8:53:85:
ef:0d:05:d6:bd:9e:8a:fb:8c:1e:53:75:8e:67:7c:
59:b8:f5:26:2c:6a:0a:a5:7e:c2:32:12:38:75:89:
9b:a4:77:13:95:af:7c:46:82:c7:72:ae:94:1f:e9:
5a:c8:de:8b:4b:7e:d2:85:35:82:2f:c7:7c:5e:9a:
db:71:cd:11:db:b3:e5:6f:bf:17:02:10:74:ef:36:
60:e0:34:f2:20:b0:4e:5a:a1:6d:93:89:69:3f:22:
94:ea:d4:c7:74:a0:c6:d5:44:b5:46:2c:1d:eb:98:
95:d7:b2:e4:08:f6:9b:db:86:6e:37:4d:52:70:6f:
a8:2f:e7:48:ed:ad:57:20:24:ac:99:ef:21:fc:65:
3d:c2:62:bc:2c:81:f9:94:fb:54:1d:3a:e7:c9:6d:
b1:90:7a:18:19:1f:51:2c:15:8c:a8:89:87:1d:ed:
16:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:AF:9F:BD:7E:90:CF:3C:3C:5A:C6:9F:3C:6C:3F:49:D1:11:4D:86
X509v3 Authority Key Identifier:
keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Rq-fvX6Qzzw8WsafPGw_SdERTYY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.97.124.0/24
80.97.128.0/20
81.180.92.0/23
85.120.81.0/24
85.121.4.0/23
85.121.149.0/24
85.121.183.0/24
85.122.114.0/24
194.102.105.0/24
217.156.8.0/23
217.156.64.0/23
217.156.123.0/24
Signature Algorithm: sha256WithRSAEncryption
15:33:9d:a9:52:24:26:db:a0:41:20:4b:1b:b5:71:f2:bc:23:
3c:ad:cb:65:a6:de:2f:55:e5:ae:32:2e:e5:0d:5a:02:04:a4:
0c:9b:51:7a:79:3d:51:29:da:9d:b6:d2:ed:6b:21:ba:aa:30:
96:6b:b7:c3:40:8f:b4:18:0c:d8:2a:e7:6e:d2:92:f7:e6:47:
ca:ab:b3:4a:25:23:ec:53:af:f7:3b:ef:fb:ae:bb:09:28:bb:
9a:d5:fa:f7:f0:1a:58:e2:29:0a:b4:e6:a9:ef:1f:26:7f:e3:
61:40:24:80:21:49:5d:c4:98:85:77:d8:93:e7:41:40:0d:a9:
b4:58:9a:4a:21:1b:dd:71:46:d3:20:6d:ee:8b:f9:86:64:6a:
23:f1:d2:b1:ce:21:2d:c7:6c:0b:fa:c5:b4:34:24:fc:12:7d:
be:7e:51:79:ed:82:4e:56:12:f4:7d:a2:cf:4a:98:b1:96:f4:
fc:d3:ce:b1:1b:bc:a5:93:d4:ca:33:27:c7:04:5a:f7:fa:2a:
e4:d2:57:4a:88:2b:99:b8:4d:a9:24:f1:80:09:71:6a:3a:43:
c2:73:98:ff:ec:72:25:95:c0:9c:47:f4:ea:65:7f:82:39:95:
ed:49:57:06:1e:27:62:4d:29:d3:78:c4:bb:83:cf:80:9c:16:
e4:35:ac:94
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAZyfE0nwuiNVCwDVuvMqsWcJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh
MTU3MjIwHhcNMjYwMjI3MTIyOTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0NmFmOWZiZDdlOTBjZjNjM2M1YWM2OWYzYzZjM2Y0OWQxMTE0ZDg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlwHpyPDXZmW/RPS0pVZvVXdIEPur
J1UJhj0Rlf7AwSkvogrvz89xTvNL1BET1VliLUZnTiJwWPRB3wKRzf7oaykKfioW
89vdP77OBSqRUC3MypGD0RXoU4XvDQXWvZ6K+4weU3WOZ3xZuPUmLGoKpX7CMhI4
dYmbpHcTla98RoLHcq6UH+layN6LS37ShTWCL8d8Xprbcc0R27Plb78XAhB07zZg
4DTyILBOWqFtk4lpPyKU6tTHdKDG1US1Riwd65iV17LkCPab24ZuN01ScG+oL+dI
7a1XICSsme8h/GU9wmK8LIH5lPtUHTrnyW2xkHoYGR9RLBWMqImHHe0WJwIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFEavn71+kM88PFrGnzxsP0nREU2GMB8GA1UdIwQY
MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt
ZjUyYzQ3YzIyNWRiLzEvUnEtZnZYNlF6enc4V3NhZlBHd19TZEVSVFlZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi
LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQAUGF8AwQE
UGGAAwQBUbRcAwQAVXhRAwQBVXkEAwQAVXmVAwQAVXm3AwQAVXpyAwQAwmZpAwQB
2ZwIAwQB2ZxAAwQA2Zx7MA0GCSqGSIb3DQEBCwUAA4IBAQAVM52pUiQm26BBIEsb
tXHyvCM8rctlpt4vVeWuMi7lDVoCBKQMm1F6eT1RKdqdttLtayG6qjCWa7fDQI+0
GAzYKudu0pL35kfKq7NKJSPsU6/3O+/7rrsJKLua1fr38BpY4ikKtOap7x8mf+Nh
QCSAIUldxJiFd9iT50FADam0WJpKIRvdcUbTIG3ui/mGZGoj8dKxziEtx2wL+sW0
NCT8En2+flF57YJOVhL0faLPSpixlvT8086xG7ylk9TKMyfHBFr3+irk0ldKiCuZ
uE2pJPGACXFqOkPCc5j/7HIllcCcR/TqZX+COZXtSVcGHidiTSnTeMS7g8+AnBbk
NayU
-----END CERTIFICATE-----
Generated at Mon Mar 2 16:39:17 2026 by rpki-client