Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Qe79LUiT3PJfRIEGPLNCl6k0V64.roa
File: Qe79LUiT3PJfRIEGPLNCl6k0V64.roa (raw, json)
Hash identifier: moL8jegGz0VXRX21YyGo37edkpvRmar1XACAXINhLYI=
Subject key identifier: 41:EE:FD:2D:48:93:DC:F2:5F:44:81:06:3C:B3:42:97:A9:34:57:AE
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 019C8FBE6ECD0CD8358FCF8D6CD647420AEC
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Qe79LUiT3PJfRIEGPLNCl6k0V64.roa
Signing time: Tue 24 Feb 2026 13:02:27 +0000
ROA not before: Tue 24 Feb 2026 13:02:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 49608
IP address blocks: 185.220.197.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 18:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:8f:be:6e:cd:0c:d8:35:8f:cf:8d:6c:d6:47:42:0a:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Feb 24 13:02:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41eefd2d4893dcf25f4481063cb34297a93457ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:1b:ab:96:a8:af:18:89:51:8e:95:ea:ab:9f:
42:74:f6:48:e2:2c:1a:ba:49:ce:d8:00:f5:49:a0:
fc:e1:50:29:86:11:f8:54:b3:c9:60:a1:c9:94:79:
75:5a:76:08:55:9c:e9:75:cb:d8:de:e4:ff:fa:1a:
36:76:63:8f:bd:ce:7d:be:a7:f4:0a:93:08:3f:72:
35:7a:a0:95:9a:a9:53:08:72:0f:e9:c1:07:ab:95:
07:bf:58:18:4c:b2:c1:10:b6:9e:14:de:e3:40:70:
73:6a:41:ee:14:0d:06:e8:5e:d6:bb:6b:ce:cd:cd:
f6:ab:76:e3:a2:86:09:74:6d:30:54:5b:14:01:13:
d3:13:81:39:ef:7f:81:27:20:44:35:46:b6:d8:ec:
bf:ac:8b:96:17:92:e9:7b:f5:c0:68:c6:c3:1a:fa:
4e:91:15:5a:70:08:22:81:41:b3:73:9f:e3:7c:99:
8f:cd:4e:18:ce:1c:75:62:70:af:5b:b5:d6:85:c4:
69:31:10:57:d6:cd:56:97:91:8c:6a:87:3d:81:d4:
2d:fd:cd:e4:aa:11:7f:8f:f1:58:c3:9b:d8:65:0e:
48:43:35:54:d6:e6:2c:18:12:ab:6e:5a:6c:da:3a:
ca:03:c6:34:20:5f:6c:32:cc:34:bd:f7:3e:77:50:
06:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:EE:FD:2D:48:93:DC:F2:5F:44:81:06:3C:B3:42:97:A9:34:57:AE
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/Qe79LUiT3PJfRIEGPLNCl6k0V64.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.220.197.0/24
Signature Algorithm: sha256WithRSAEncryption
73:69:6b:61:75:78:14:99:29:01:b1:a1:bd:81:8a:c1:eb:1c:
ce:5e:61:27:a0:59:e0:57:8c:01:97:8d:7e:dc:08:b9:15:1d:
cd:20:9d:fe:42:03:e9:74:f1:2b:a7:5d:a7:c1:7c:6c:c2:e2:
e2:e2:0e:6a:5d:d9:16:64:49:b1:22:c1:fe:e6:73:84:4f:48:
8f:2c:3d:2d:a7:20:c0:0d:4d:64:72:4e:d8:14:0f:61:8b:fc:
d5:df:11:b7:56:55:83:b5:ee:29:b2:51:bb:40:a4:83:cd:c1:
8f:3b:35:45:29:8b:fe:a0:e7:ac:e1:97:bd:41:fd:40:a7:58:
eb:fc:b9:50:7b:1a:87:f5:e9:f9:1e:b1:21:61:7e:b9:81:54:
48:6d:55:f5:f4:8e:5f:8f:ca:1b:88:1a:15:2b:cb:22:bc:51:
65:1f:2f:54:c9:2b:54:70:c1:64:20:f0:75:7d:30:44:9b:ee:
ad:bc:25:cc:d4:14:4b:03:b4:72:17:47:ea:d6:88:5c:e7:c7:
1f:45:37:2f:e4:62:dc:c6:9b:36:55:88:23:4d:83:5c:d3:dd:
88:10:ab:d8:81:7b:04:3f:b1:c9:11:34:5a:ee:a6:39:cd:a9:
a6:be:d3:d9:22:df:3d:9e:68:64:4e:e5:2f:8e:28:2e:a8:1c:
fb:08:04:2e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZyPvm7NDNg1j8+NbNZHQgrsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4
ZjY2Y2MwHhcNMjYwMjI0MTMwMjI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWVlZmQyZDQ4OTNkY2YyNWY0NDgxMDYzY2IzNDI5N2E5MzQ1N2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hurlqivGIlRjpXqq59CdPZI4iwa
uknO2AD1SaD84VAphhH4VLPJYKHJlHl1WnYIVZzpdcvY3uT/+ho2dmOPvc59vqf0
CpMIP3I1eqCVmqlTCHIP6cEHq5UHv1gYTLLBELaeFN7jQHBzakHuFA0G6F7Wu2vO
zc32q3bjooYJdG0wVFsUARPTE4E573+BJyBENUa22Oy/rIuWF5Lpe/XAaMbDGvpO
kRVacAgigUGzc5/jfJmPzU4Yzhx1YnCvW7XWhcRpMRBX1s1Wl5GMaoc9gdQt/c3k
qhF/j/FYw5vYZQ5IQzVU1uYsGBKrblps2jrKA8Y0IF9sMsw0vfc+d1AGSQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEHu/S1Ik9zyX0SBBjyzQpepNFeuMB8GA1UdIwQY
MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt
YTFiOTZiOWI3MGY4LzEvUWU3OUxVaVQzUEpmUklFR1BMTkNsNmswVjY0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4
LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAudzFMA0G
CSqGSIb3DQEBCwUAA4IBAQBzaWthdXgUmSkBsaG9gYrB6xzOXmEnoFngV4wBl41+
3Ai5FR3NIJ3+QgPpdPErp12nwXxswuLi4g5qXdkWZEmxIsH+5nOET0iPLD0tpyDA
DU1kck7YFA9hi/zV3xG3VlWDte4pslG7QKSDzcGPOzVFKYv+oOes4Ze9Qf1Ap1jr
/LlQexqH9en5HrEhYX65gVRIbVX19I5fj8obiBoVK8sivFFlHy9UyStUcMFkIPB1
fTBEm+6tvCXM1BRLA7RyF0fq1ohc58cfRTcv5GLcxps2VYgjTYNc092IEKvYgXsE
P7HJETRa7qY5zammvtPZIt89nmhkTuUvjiguqBz7CAQu
-----END CERTIFICATE-----
Generated at Mon Mar 2 02:41:58 2026 by rpki-client