Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/qH7c24JmkVBMYbJmi0p4XVjkvrA.roa
File: qH7c24JmkVBMYbJmi0p4XVjkvrA.roa (raw, json)
Hash identifier: +CSYNI9p5H8qPtanDM1P4+I8bU0tiGoJi7imMK4J3uA=
Subject key identifier: A8:7E:DC:DB:82:66:91:50:4C:61:B2:66:8B:4A:78:5D:58:E4:BE:B0
Certificate issuer: /CN=14d11465badc8bfdfe85b58aae6fc7dcc36d914b
Certificate serial: 019C6C8442082B5851AB41253857F189D80C
Authority key identifier: 14:D1:14:65:BA:DC:8B:FD:FE:85:B5:8A:AE:6F:C7:DC:C3:6D:91:4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/qH7c24JmkVBMYbJmi0p4XVjkvrA.roa
Signing time: Tue 17 Feb 2026 16:52:12 +0000
ROA not before: Tue 17 Feb 2026 16:52:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 214238
IP address blocks: 185.134.106.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.crl
rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.mft
rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:6c:84:42:08:2b:58:51:ab:41:25:38:57:f1:89:d8:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=14d11465badc8bfdfe85b58aae6fc7dcc36d914b
Validity
Not Before: Feb 17 16:52:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a87edcdb826691504c61b2668b4a785d58e4beb0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f7:f1:79:7a:0f:78:69:42:00:6a:b6:84:a8:90:
27:02:1a:37:72:89:9a:c4:bd:7b:78:0a:e4:46:a9:
b8:ee:7c:9d:b0:5b:b1:a4:60:64:57:79:33:93:34:
a9:79:08:fa:1d:c3:19:4d:74:a0:fe:2f:e3:22:38:
a1:8b:1a:40:86:15:73:56:aa:ea:84:b7:af:32:48:
67:4d:84:c8:7e:cd:ca:03:83:fb:a2:e6:4b:d2:07:
b0:a6:e8:23:5c:31:ba:6e:36:45:2f:42:ad:29:9c:
88:1f:48:30:06:e7:dc:61:e4:99:78:de:cf:94:90:
a4:dd:8e:32:24:f8:24:de:f8:7b:a0:ab:fd:76:d9:
56:1b:ef:de:87:32:9b:7b:a5:2c:c1:23:16:1c:3a:
87:0a:e7:3b:c8:98:8e:5b:dc:de:57:f6:8e:0b:93:
1a:9a:c3:71:b7:3a:5d:ba:e1:37:c8:c9:96:ec:2a:
5a:ee:ab:72:7b:05:4c:28:b9:16:19:21:53:19:7d:
ba:ce:c4:8b:9a:92:65:ab:19:99:af:aa:a5:8c:e0:
d9:92:61:82:ed:2d:b9:10:1b:99:4a:e4:27:08:f7:
fd:33:59:17:6b:30:0f:00:dc:da:cb:26:1e:f3:bf:
7a:8e:92:2d:5c:fe:b8:00:cb:0e:bb:22:e7:2e:0f:
b8:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7E:DC:DB:82:66:91:50:4C:61:B2:66:8B:4A:78:5D:58:E4:BE:B0
X509v3 Authority Key Identifier:
keyid:14:D1:14:65:BA:DC:8B:FD:FE:85:B5:8A:AE:6F:C7:DC:C3:6D:91:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FNEUZbrci_3-hbWKrm_H3MNtkUs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/qH7c24JmkVBMYbJmi0p4XVjkvrA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3a/2b9319-8a5e-47f7-aa5e-5c26adcd96a4/1/FNEUZbrci_3-hbWKrm_H3MNtkUs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.134.106.0/24
Signature Algorithm: sha256WithRSAEncryption
7b:36:3f:bb:aa:51:2e:e3:3a:f0:e0:a7:8f:7a:68:f4:9f:90:
04:a5:2f:c1:ee:64:fd:a7:e2:ac:fe:3d:8a:dd:5e:f8:57:4e:
90:4c:0a:d3:4e:94:fd:86:98:dc:0c:4f:82:5c:b8:b6:2f:15:
12:a5:34:37:10:24:f5:cc:cb:e1:28:10:3d:58:8a:c2:00:fd:
5f:a0:ee:aa:7d:c9:dd:61:c0:b4:e3:d0:79:be:54:16:c7:ff:
0f:a2:f8:68:52:35:6d:3a:e7:c3:4f:85:54:15:b2:06:99:76:
5f:f1:18:2c:98:14:29:87:25:12:4d:fb:85:7f:16:fa:0c:c4:
bb:00:4b:a9:30:7a:0b:4e:08:60:ae:ce:42:6d:38:5b:69:32:
05:11:e7:7f:14:e5:22:c4:21:28:df:4f:3d:9d:78:7a:6b:48:
36:25:0b:fb:81:2c:88:8d:30:a1:00:0d:ad:5b:cb:0b:40:08:
ec:5b:4e:c5:72:ff:9a:55:63:d4:93:77:dd:aa:ec:31:a7:73:
8a:a1:37:a0:c1:37:82:58:83:df:db:09:b0:be:2e:45:a9:be:
15:4d:f4:c3:0c:97:f5:71:1e:85:82:2f:28:08:9e:d0:c8:c2:
9b:3e:ab:22:6b:a2:39:96:64:68:e1:b4:4b:14:f0:ee:79:5c:
a8:60:48:8d
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxshEIIK1hRq0ElOFfxidgMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE0ZDExNDY1YmFkYzhiZmRmZTg1YjU4YWFlNmZjN2RjYzM2
ZDkxNGIwHhcNMjYwMjE3MTY1MjEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODdlZGNkYjgyNjY5MTUwNGM2MWIyNjY4YjRhNzg1ZDU4ZTRiZWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9/F5eg94aUIAaraEqJAnAho3coma
xL17eArkRqm47nydsFuxpGBkV3kzkzSpeQj6HcMZTXSg/i/jIjihixpAhhVzVqrq
hLevMkhnTYTIfs3KA4P7ouZL0gewpugjXDG6bjZFL0KtKZyIH0gwBufcYeSZeN7P
lJCk3Y4yJPgk3vh7oKv9dtlWG+/ehzKbe6UswSMWHDqHCuc7yJiOW9zeV/aOC5Ma
msNxtzpduuE3yMmW7Cpa7qtyewVMKLkWGSFTGX26zsSLmpJlqxmZr6qljODZkmGC
7S25EBuZSuQnCPf9M1kXazAPANzayyYe8796jpItXP64AMsOuyLnLg+4jQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKh+3NuCZpFQTGGyZotKeF1Y5L6wMB8GA1UdIwQY
MBaAFBTRFGW63Iv9/oW1iq5vx9zDbZFLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRk5FVVpicmNpXzMtaGJXS3JtX0gzTU50a1VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYS8yYjkzMTktOGE1ZS00N2Y3LWFhNWUt
NWMyNmFkY2Q5NmE0LzEvcUg3YzI0Sm1rVkJNWWJKbWkwcDRYVmprdnJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYS8yYjkzMTktOGE1ZS00N2Y3LWFhNWUtNWMyNmFkY2Q5NmE0
LzEvRk5FVVpicmNpXzMtaGJXS3JtX0gzTU50a1VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuYZqMA0G
CSqGSIb3DQEBCwUAA4IBAQB7Nj+7qlEu4zrw4KePemj0n5AEpS/B7mT9p+Ks/j2K
3V74V06QTArTTpT9hpjcDE+CXLi2LxUSpTQ3ECT1zMvhKBA9WIrCAP1foO6qfcnd
YcC049B5vlQWx/8PovhoUjVtOufDT4VUFbIGmXZf8RgsmBQphyUSTfuFfxb6DMS7
AEupMHoLTghgrs5CbThbaTIFEed/FOUixCEo3089nXh6a0g2JQv7gSyIjTChAA2t
W8sLQAjsW07Fcv+aVWPUk3fdquwxp3OKoTegwTeCWIPf2wmwvi5Fqb4VTfTDDJf1
cR6Fgi8oCJ7QyMKbPqsia6I5lmRo4bRLFPDueVyoYEiN
-----END CERTIFICATE-----
Generated at Mon Mar 2 01:53:27 2026 by rpki-client