Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/Qoa0FcWT5eGn1deAYRLMmWtJw1A.roa
File: Qoa0FcWT5eGn1deAYRLMmWtJw1A.roa (raw, json)
Hash identifier: //Zu89adA8vidZqbvniFI74+X1OldRsqrkjpoajtNHc=
Subject key identifier: 42:86:B4:15:C5:93:E5:E1:A7:D5:D7:80:61:12:CC:99:6B:49:C3:50
Certificate issuer: /CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Certificate serial: 019F9E812F59DC3C6767ED9110ACAFFA6EC0
Authority key identifier: 7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/Qoa0FcWT5eGn1deAYRLMmWtJw1A.roa
Signing time: Sun 26 Jul 2026 12:58:14 +0000
ROA not before: Sun 26 Jul 2026 12:58:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 61177
IP address blocks: 185.16.96.0/24 maxlen: 24
185.16.97.0/24 maxlen: 24
185.16.98.0/24 maxlen: 24
185.16.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.mft
rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:9e:81:2f:59:dc:3c:67:67:ed:91:10:ac:af:fa:6e:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7eeb0aec63949f4125c73aa6177ea0b721d527bb
Validity
Not Before: Jul 26 12:58:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4286b415c593e5e1a7d5d7806112cc996b49c350
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:52:52:49:59:de:e4:37:35:b2:10:31:c6:7b:
0f:26:a2:85:09:aa:2b:ba:3a:7b:bd:94:d4:4c:bb:
ee:b2:e3:a4:b2:5c:86:9d:0e:7b:40:7d:33:8b:ef:
64:c4:90:84:76:25:09:c6:cc:e7:04:4f:6f:63:99:
51:04:44:d3:ba:1f:ed:9d:8f:27:f4:44:78:07:03:
e0:cc:f0:78:39:85:e3:ce:d8:af:f6:e1:1b:63:53:
cb:a3:03:9f:ee:34:b4:61:bf:16:ec:fe:cf:f4:ab:
b8:66:b5:37:36:79:23:f5:ba:d1:ef:34:23:4c:59:
a7:58:b6:17:be:ee:9f:04:ff:18:0c:a6:29:6a:51:
20:ed:f0:00:4d:fe:52:54:f8:54:3f:9b:fd:12:4e:
18:31:2c:35:20:42:4a:84:87:28:d7:16:22:67:ad:
17:b2:a2:70:5e:8b:38:2d:cd:33:88:55:a4:31:4b:
db:ad:dd:f1:95:ae:c3:06:3d:01:b2:44:88:50:61:
3b:6c:3e:52:ed:14:34:ca:18:f3:f9:0f:19:df:c8:
75:b4:1c:e0:5a:0d:f7:86:6e:d0:c0:31:59:02:1a:
a1:97:36:80:e0:c6:54:0a:d2:9a:4d:b6:85:05:76:
ec:2e:87:0d:53:1c:2e:e8:80:2f:20:ca:f7:94:5a:
2c:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:86:B4:15:C5:93:E5:E1:A7:D5:D7:80:61:12:CC:99:6B:49:C3:50
X509v3 Authority Key Identifier:
keyid:7E:EB:0A:EC:63:94:9F:41:25:C7:3A:A6:17:7E:A0:B7:21:D5:27:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fusK7GOUn0ElxzqmF36gtyHVJ7s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/Qoa0FcWT5eGn1deAYRLMmWtJw1A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/001edf-bffc-4960-a02c-d26d7d4c2505/1/fusK7GOUn0ElxzqmF36gtyHVJ7s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.16.96.0/22
Signature Algorithm: sha256WithRSAEncryption
23:6e:20:27:30:44:da:fd:13:54:7b:f8:ce:f6:dc:bb:2a:a7:
d7:4a:40:27:18:fe:fd:20:e3:90:c1:b2:02:e6:d7:c6:39:a4:
90:0e:da:e2:83:be:3c:3c:75:15:09:5c:35:4f:3e:3d:82:3c:
3c:ba:17:a4:74:9c:42:d8:a4:c6:b9:28:f2:97:20:1c:6e:38:
4b:35:16:6d:da:0a:a1:e7:c3:43:5f:2f:ae:17:85:37:14:f7:
d1:8f:b7:b8:7a:af:47:c1:27:01:58:98:83:e7:74:30:e1:3b:
9d:6b:48:87:70:cd:a9:bf:ae:8e:72:07:cb:eb:8d:4b:57:df:
ae:77:db:62:54:b3:54:2a:09:60:57:71:8d:c3:a6:84:7b:25:
97:c5:f1:04:60:cc:6b:36:fb:fe:ad:56:e8:8b:74:82:51:ad:
67:3c:75:bd:4b:81:d7:51:12:6f:95:13:fc:8b:b6:35:50:db:
60:7d:09:68:08:b9:21:bd:71:b0:39:29:38:0d:ce:3d:19:94:
ad:eb:e0:43:e1:16:5d:3c:89:67:c4:c3:a7:85:7e:39:ce:3d:
63:45:84:95:9a:36:c3:26:02:74:16:aa:50:82:56:d8:df:6f:
00:a4:3b:5a:61:40:66:78:67:f4:50:bd:d1:be:8b:32:f3:42:
9a:69:4e:75
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+egS9Z3DxnZ+2REKyv+m7AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlZWIwYWVjNjM5NDlmNDEyNWM3M2FhNjE3N2VhMGI3MjFk
NTI3YmIwHhcNMjYwNzI2MTI1ODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0Mjg2YjQxNWM1OTNlNWUxYTdkNWQ3ODA2MTEyY2M5OTZiNDljMzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq1JSSVne5Dc1shAxxnsPJqKFCaor
ujp7vZTUTLvusuOkslyGnQ57QH0zi+9kxJCEdiUJxsznBE9vY5lRBETTuh/tnY8n
9ER4BwPgzPB4OYXjztiv9uEbY1PLowOf7jS0Yb8W7P7P9Ku4ZrU3Nnkj9brR7zQj
TFmnWLYXvu6fBP8YDKYpalEg7fAATf5SVPhUP5v9Ek4YMSw1IEJKhIco1xYiZ60X
sqJwXos4Lc0ziFWkMUvbrd3xla7DBj0BskSIUGE7bD5S7RQ0yhjz+Q8Z38h1tBzg
Wg33hm7QwDFZAhqhlzaA4MZUCtKaTbaFBXbsLocNUxwu6IAvIMr3lFosvwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEKGtBXFk+Xhp9XXgGESzJlrScNQMB8GA1UdIwQY
MBaAFH7rCuxjlJ9BJcc6phd+oLch1Se7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZnVzSzdHT1VuMEVseHpxbUYzNmd0eUhWSjdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC8wMDFlZGYtYmZmYy00OTYwLWEwMmMt
ZDI2ZDdkNGMyNTA1LzEvUW9hMEZjV1Q1ZUduMWRlQVlSTE1tV3RKdzFBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC8wMDFlZGYtYmZmYy00OTYwLWEwMmMtZDI2ZDdkNGMyNTA1
LzEvZnVzSzdHT1VuMEVseHpxbUYzNmd0eUhWSjdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCuRBgMA0G
CSqGSIb3DQEBCwUAA4IBAQAjbiAnMETa/RNUe/jO9ty7KqfXSkAnGP79IOOQwbIC
5tfGOaSQDtrig748PHUVCVw1Tz49gjw8uhekdJxC2KTGuSjylyAcbjhLNRZt2gqh
58NDXy+uF4U3FPfRj7e4eq9HwScBWJiD53Qw4Tuda0iHcM2pv66OcgfL641LV9+u
d9tiVLNUKglgV3GNw6aEeyWXxfEEYMxrNvv+rVboi3SCUa1nPHW9S4HXURJvlRP8
i7Y1UNtgfQloCLkhvXGwOSk4Dc49GZSt6+BD4RZdPIlnxMOnhX45zj1jRYSVmjbD
JgJ0FqpQglbY328ApDtaYUBmeGf0UL3Rvosy80KaaU51
-----END CERTIFICATE-----
Generated at Wed Jul 29 09:03:03 2026 by rpki-client