Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/qJw1Ux2nOLtPJ0s4mFdAIF0Su5Y.roa
File: qJw1Ux2nOLtPJ0s4mFdAIF0Su5Y.roa (raw, json)
Hash identifier: UuIkVvy/ToOd6wh3wO4nziYy2+uWkgcJTnow3IN8R7E=
Subject key identifier: A8:9C:35:53:1D:A7:38:BB:4F:27:4B:38:98:57:40:20:5D:12:BB:96
Certificate issuer: /CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Certificate serial: 019F4823A5C4C13765E133CED0E54CFC79AF
Authority key identifier: 13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/qJw1Ux2nOLtPJ0s4mFdAIF0Su5Y.roa
Signing time: Thu 09 Jul 2026 18:28:43 +0000
ROA not before: Thu 09 Jul 2026 18:28:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 43858
IP address blocks: 79.108.144.0/21 maxlen: 21
91.198.199.0/24 maxlen: 24
91.244.246.0/24 maxlen: 24
146.255.168.0/21 maxlen: 24
185.11.160.0/22 maxlen: 22
185.80.176.0/22 maxlen: 22
2a03:39c0::/29 maxlen: 32
2a03:39c7::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 29 Jul 2026 21:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:48:23:a5:c4:c1:37:65:e1:33:ce:d0:e5:4c:fc:79:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=13d83b225dd33860c51dc44aa88db5f03dc15a74
Validity
Not Before: Jul 9 18:28:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a89c35531da738bb4f274b38985740205d12bb96
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:8b:de:98:b9:08:85:80:53:3b:71:f3:c8:03:
71:d8:a4:d8:e8:ed:c4:ec:c6:95:bb:bc:c9:a7:93:
36:7a:fe:24:a1:23:91:5e:96:0f:6c:7d:29:28:9c:
c2:91:5c:f5:d7:f3:07:af:03:8c:00:61:75:ec:b8:
d8:cf:31:6a:8a:d1:ec:ca:a6:1d:b0:27:7f:48:0e:
81:13:3c:4d:00:0c:9b:c4:6f:b4:df:2b:44:4d:6e:
94:07:b8:98:fa:aa:f9:c1:09:8f:1b:6e:4c:2b:6d:
2e:52:5f:5d:c9:d8:52:eb:e0:c0:d5:5a:b7:35:8e:
24:c0:87:90:76:08:87:ba:fd:c3:c2:06:96:f3:e9:
02:53:85:47:c8:36:18:d1:79:2c:95:fe:65:b0:b3:
75:61:ea:b7:36:f8:34:ee:05:74:37:bb:43:51:ae:
85:d0:30:26:b4:4e:bb:82:b3:77:c6:7a:75:b4:3e:
bc:92:82:a8:98:00:be:7a:c8:84:57:90:19:98:8e:
d1:20:a1:3c:c3:47:14:46:f1:6b:9c:e3:33:42:4a:
ea:a1:38:29:52:1e:95:27:e0:c1:e6:12:11:ec:67:
0d:af:c9:7f:a3:ee:21:09:2d:45:1e:d8:d9:ad:16:
c4:06:94:b6:89:ab:1b:c6:c1:e6:39:2f:19:1d:46:
27:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:9C:35:53:1D:A7:38:BB:4F:27:4B:38:98:57:40:20:5D:12:BB:96
X509v3 Authority Key Identifier:
keyid:13:D8:3B:22:5D:D3:38:60:C5:1D:C4:4A:A8:8D:B5:F0:3D:C1:5A:74
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/E9g7Il3TOGDFHcRKqI218D3BWnQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/qJw1Ux2nOLtPJ0s4mFdAIF0Su5Y.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/f2111a-3f47-4ff0-a51d-b251377add86/1/E9g7Il3TOGDFHcRKqI218D3BWnQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.108.144.0/21
91.198.199.0/24
91.244.246.0/24
146.255.168.0/21
185.11.160.0/22
185.80.176.0/22
IPv6:
2a03:39c0::/29
Signature Algorithm: sha256WithRSAEncryption
08:05:39:03:b3:65:3b:e1:fd:05:ee:05:db:a1:52:2f:e3:3c:
76:8b:37:2a:aa:91:6c:0d:09:e2:6b:42:74:9b:96:c6:70:e1:
6e:b7:f6:5f:bf:21:ef:5c:72:fd:d9:1d:02:3b:c6:b9:f1:b3:
69:d5:2d:a1:b7:6e:3f:d8:e4:60:5b:cd:0b:fe:b4:42:48:34:
4e:0d:77:50:15:1b:46:8d:94:de:1d:97:83:2c:26:96:59:69:
7a:15:29:70:86:b2:c1:b5:28:24:5f:77:41:f7:f8:ec:53:4f:
0d:a4:14:44:ed:25:fc:fa:08:af:2f:28:ce:6b:9f:e5:f2:1d:
d1:48:b2:f6:db:f7:06:c4:0c:d5:98:9a:a2:04:4b:65:88:24:
f4:3b:e0:af:1b:64:b5:a3:2d:56:4a:fb:1f:88:96:b0:11:df:
fb:63:c5:d4:a6:00:0d:e1:c1:d1:c7:39:aa:68:9a:49:32:6d:
4d:f8:08:4f:de:21:5b:bc:6a:b1:17:c0:60:c2:67:05:a1:8f:
70:4c:56:b5:f0:e2:ab:30:57:19:c8:1b:2c:ad:d9:7c:e6:19:
3a:9a:5e:55:5a:fc:61:4a:3c:cc:50:31:bb:af:f3:c4:80:11:
4d:4a:63:d5:a9:a5:4e:52:9e:b6:89:ef:e9:32:18:82:7a:16:
eb:10:48:52
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZ9II6XEwTdl4TPO0OVM/HmvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEzZDgzYjIyNWRkMzM4NjBjNTFkYzQ0YWE4OGRiNWYwM2Rj
MTVhNzQwHhcNMjYwNzA5MTgyODQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODljMzU1MzFkYTczOGJiNGYyNzRiMzg5ODU3NDAyMDVkMTJiYjk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0IvemLkIhYBTO3HzyANx2KTY6O3E
7MaVu7zJp5M2ev4koSORXpYPbH0pKJzCkVz11/MHrwOMAGF17LjYzzFqitHsyqYd
sCd/SA6BEzxNAAybxG+03ytETW6UB7iY+qr5wQmPG25MK20uUl9dydhS6+DA1Vq3
NY4kwIeQdgiHuv3DwgaW8+kCU4VHyDYY0Xkslf5lsLN1Yeq3Nvg07gV0N7tDUa6F
0DAmtE67grN3xnp1tD68koKomAC+esiEV5AZmI7RIKE8w0cURvFrnOMzQkrqoTgp
Uh6VJ+DB5hIR7GcNr8l/o+4hCS1FHtjZrRbEBpS2iasbxsHmOS8ZHUYnuQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFKicNVMdpzi7TydLOJhXQCBdEruWMB8GA1UdIwQY
MBaAFBPYOyJd0zhgxR3ESqiNtfA9wVp0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9mMjExMWEtM2Y0Ny00ZmYwLWE1MWQt
YjI1MTM3N2FkZDg2LzEvcUp3MVV4Mm5PTHRQSjBzNG1GZEFJRjBTdTVZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9mMjExMWEtM2Y0Ny00ZmYwLWE1MWQtYjI1MTM3N2FkZDg2
LzEvRTlnN0lsM1RPR0RGSGNSS3FJMjE4RDNCV25RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQDT2yQAwQA
W8bHAwQAW/T2AwQDkv+oAwQCuQugAwQCuVCwMA0EAgACMAcDBQMqAznAMA0GCSqG
SIb3DQEBCwUAA4IBAQAIBTkDs2U74f0F7gXboVIv4zx2izcqqpFsDQnia0J0m5bG
cOFut/ZfvyHvXHL92R0CO8a58bNp1S2ht24/2ORgW80L/rRCSDRODXdQFRtGjZTe
HZeDLCaWWWl6FSlwhrLBtSgkX3dB9/jsU08NpBRE7SX8+givLyjOa5/l8h3RSLL2
2/cGxAzVmJqiBEtliCT0O+CvG2S1oy1WSvsfiJawEd/7Y8XUpgAN4cHRxzmqaJpJ
Mm1N+AhP3iFbvGqxF8BgwmcFoY9wTFa18OKrMFcZyBssrdl85hk6ml5VWvxhSjzM
UDG7r/PEgBFNSmPVqaVOUp62ie/pMhiCehbrEEhS
-----END CERTIFICATE-----
Generated at Wed Jul 29 01:53:59 2026 by rpki-client