Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/qNh0UmKDnVwJ1plmvMfwyW-_x6g.roa
File: qNh0UmKDnVwJ1plmvMfwyW-_x6g.roa (raw, json)
Hash identifier: uoI/K/0CWRIMUiMbHvxIttKDmhXri5vSIGGaQwk3CeE=
Subject key identifier: A8:D8:74:52:62:83:9D:5C:09:D6:99:66:BC:C7:F0:C9:6F:BF:C7:A8
Certificate issuer: /CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Certificate serial: 01A0AE6842053E1A3E1E8ADD4837EA9028E7
Authority key identifier: EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/qNh0UmKDnVwJ1plmvMfwyW-_x6g.roa
Signing time: Thu 17 Sep 2026 08:07:43 +0000
ROA not before: Thu 17 Sep 2026 08:07:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 215120
IP address blocks: 91.227.33.0/24 maxlen: 24
91.244.70.0/24 maxlen: 24
91.244.71.0/24 maxlen: 24
93.157.138.0/24 maxlen: 24
93.157.139.0/24 maxlen: 24
157.173.28.0/24 maxlen: 24
193.178.186.0/24 maxlen: 24
2a07:cec0:5::/48 maxlen: 48
2a07:cec0:4300::/48 maxlen: 48
2a07:cec0:4500::/48 maxlen: 48
2a07:cec0:4600::/48 maxlen: 48
2a07:cec0:4700::/48 maxlen: 48
2a07:cec4::/30 maxlen: 30
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.mft
rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 23 Sep 2026 14:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ae:68:42:05:3e:1a:3e:1e:8a:dd:48:37:ea:90:28:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=efa5b62347a1b64cea49a2ab3ab4983c34861fb2
Validity
Not Before: Sep 17 08:07:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8d8745262839d5c09d69966bcc7f0c96fbfc7a8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:07:59:94:89:2e:27:d7:29:94:06:d1:f0:8a:
fd:7c:6b:cd:78:f1:d1:f9:54:ed:fa:21:79:59:c4:
92:13:9b:66:29:a4:bc:49:fc:f4:04:6d:0e:b4:8b:
25:57:61:cb:33:3b:9f:35:e9:47:bb:b0:5d:ce:04:
37:b4:97:37:ee:4e:c3:52:95:c5:c4:00:0d:b1:7c:
db:5a:05:fc:b1:00:e9:e2:73:72:2f:fc:f1:61:07:
e8:69:24:0b:9d:30:95:ca:ba:d0:38:33:36:2a:49:
65:07:e5:5e:74:20:a5:0b:06:f9:e1:7c:66:67:08:
64:03:9d:44:7f:b8:40:a0:e3:80:d5:a8:2b:c7:3b:
ac:ac:36:58:0c:72:b0:54:a8:48:dc:86:ad:a8:ed:
af:15:01:93:a8:e8:53:19:83:30:34:1d:02:62:fe:
8b:2d:cf:51:8c:6e:cf:63:75:07:03:67:63:9c:33:
f9:69:0e:c1:ef:6d:9f:df:de:d1:ea:37:75:31:f8:
d7:a6:37:b6:2f:b8:db:78:e7:06:e4:46:ea:f8:fc:
be:10:1b:cc:cf:07:00:76:e5:b4:9f:7f:e8:ef:47:
70:6e:33:57:4a:cb:33:c2:b3:56:aa:5d:4c:e6:59:
3a:ad:9b:ed:2a:29:b9:d5:cb:a5:90:74:6b:72:e0:
52:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:D8:74:52:62:83:9D:5C:09:D6:99:66:BC:C7:F0:C9:6F:BF:C7:A8
X509v3 Authority Key Identifier:
keyid:EF:A5:B6:23:47:A1:B6:4C:EA:49:A2:AB:3A:B4:98:3C:34:86:1F:B2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/76W2I0ehtkzqSaKrOrSYPDSGH7I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/qNh0UmKDnVwJ1plmvMfwyW-_x6g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/24db21-efb9-407e-96ad-013d2a11c0a5/1/76W2I0ehtkzqSaKrOrSYPDSGH7I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.227.33.0/24
91.244.70.0/23
93.157.138.0/23
157.173.28.0/24
193.178.186.0/24
IPv6:
2a07:cec0:5::/48
2a07:cec0:4300::/48
2a07:cec0:4500::/48
2a07:cec0:4600::/48
2a07:cec0:4700::/48
2a07:cec4::/30
Signature Algorithm: sha256WithRSAEncryption
54:21:ea:ec:fc:29:ff:6d:42:a5:db:4e:74:2b:31:73:40:3a:
94:bc:4e:5b:45:14:d5:15:6d:07:02:a4:e3:5b:ee:4c:9a:4f:
b6:e6:7c:ca:4b:33:22:da:7f:a9:6d:fa:4a:38:ec:7c:11:47:
03:cc:5a:42:08:70:bc:02:a9:aa:f7:de:a6:4e:59:4e:03:18:
36:0e:61:9c:41:e3:a5:5d:9c:e6:47:3b:02:48:4d:70:6c:69:
cf:df:a9:b0:76:72:ac:30:af:d9:e6:24:da:52:56:21:6d:46:
61:88:42:ff:2a:a5:49:44:3d:98:7a:ae:68:79:be:51:af:86:
8a:7a:21:f2:d9:21:47:86:75:b2:89:de:ea:d0:a2:fc:f8:23:
fe:0f:02:6c:3e:99:76:51:44:c4:bb:e8:58:df:05:79:3c:27:
6c:03:b0:44:0b:c8:fd:bd:d5:0c:dd:d2:81:c8:33:f1:92:26:
e5:c1:bf:85:bb:af:bf:29:42:de:71:c1:f2:de:1f:69:6f:de:
35:7e:be:53:b0:35:85:7d:61:23:55:2b:c5:82:d8:d6:d7:5d:
bc:3a:49:f0:cc:32:20:0a:d0:ff:a2:99:07:90:31:97:11:36:
9d:44:a4:98:7f:2f:0f:85:28:63:48:d5:cb:3d:b8:b5:be:20:
46:06:c7:c9
-----BEGIN CERTIFICATE-----
MIIFUTCCBDmgAwIBAgISAaCuaEIFPho+HordSDfqkCjnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmYTViNjIzNDdhMWI2NGNlYTQ5YTJhYjNhYjQ5ODNjMzQ4
NjFmYjIwHhcNMjYwOTE3MDgwNzQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGQ4NzQ1MjYyODM5ZDVjMDlkNjk5NjZiY2M3ZjBjOTZmYmZjN2E4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQdZlIkuJ9cplAbR8Ir9fGvNePHR
+VTt+iF5WcSSE5tmKaS8Sfz0BG0OtIslV2HLMzufNelHu7BdzgQ3tJc37k7DUpXF
xAANsXzbWgX8sQDp4nNyL/zxYQfoaSQLnTCVyrrQODM2KkllB+VedCClCwb54Xxm
ZwhkA51Ef7hAoOOA1agrxzusrDZYDHKwVKhI3IatqO2vFQGTqOhTGYMwNB0CYv6L
Lc9RjG7PY3UHA2djnDP5aQ7B722f397R6jd1MfjXpje2L7jbeOcG5Ebq+Py+EBvM
zwcAduW0n3/o70dwbjNXSsszwrNWql1M5lk6rZvtKim51culkHRrcuBS4QIDAQAB
o4ICXTCCAlkwHQYDVR0OBBYEFKjYdFJig51cCdaZZrzH8Mlvv8eoMB8GA1UdIwQY
MBaAFO+ltiNHobZM6kmiqzq0mDw0hh+yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQt
MDEzZDJhMTFjMGE1LzEvcU5oMFVtS0RuVndKMXBsbXZNZnd5Vy1feDZnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8yNGRiMjEtZWZiOS00MDdlLTk2YWQtMDEzZDJhMTFjMGE1
LzEvNzZXMkkwZWh0a3pxU2FLck9yU1lQRFNHSDdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMHMGCCsGAQUFBwEHAQH/BGQwYjAkBAIAATAeAwQAW+MhAwQB
W/RGAwQBXZ2KAwQAna0cAwQAwbK6MDoEAgACMDQDBwAqB87AAAUDBwAqB87AQwAD
BwAqB87ARQADBwAqB87ARgADBwAqB87ARwADBQIqB87EMA0GCSqGSIb3DQEBCwUA
A4IBAQBUIers/Cn/bUKl2050KzFzQDqUvE5bRRTVFW0HAqTjW+5Mmk+25nzKSzMi
2n+pbfpKOOx8EUcDzFpCCHC8Aqmq996mTllOAxg2DmGcQeOlXZzmRzsCSE1wbGnP
36mwdnKsMK/Z5iTaUlYhbUZhiEL/KqVJRD2Yeq5oeb5Rr4aKeiHy2SFHhnWyid7q
0KL8+CP+DwJsPpl2UUTEu+hY3wV5PCdsA7BEC8j9vdUM3dKByDPxkiblwb+Fu6+/
KULeccHy3h9pb941fr5TsDWFfWEjVSvFgtjW1128OknwzDIgCtD/opkHkDGXETad
RKSYfy8PhShjSNXLPbi1viBGBsfJ
-----END CERTIFICATE-----
Generated at Tue Sep 22 18:55:39 2026 by rpki-client