Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/Qm9bE-GI0zpGIyQXKmibjGTghBs.roa
File: Qm9bE-GI0zpGIyQXKmibjGTghBs.roa (raw, json)
Hash identifier: VsN2fFZJM1gh3rfmfLU0muoVmQ/GoiIrwpbvbvg5qLo=
Subject key identifier: 42:6F:5B:13:E1:88:D3:3A:46:23:24:17:2A:68:9B:8C:64:E0:84:1B
Certificate issuer: /CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Certificate serial: 019B7B36A812EE2E1BC6DD9824787500A493
Authority key identifier: F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/Qm9bE-GI0zpGIyQXKmibjGTghBs.roa
Signing time: Thu 01 Jan 2026 20:18:58 +0000
ROA not before: Thu 01 Jan 2026 20:18:58 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208537
IP address blocks: 91.230.237.0/24 maxlen: 24
94.101.104.0/24 maxlen: 24
192.83.120.0/24 maxlen: 24
194.102.239.0/24 maxlen: 24
195.138.39.0/24 maxlen: 24
213.159.24.0/23 maxlen: 23
2a11:800::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.mft
rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7b:36:a8:12:ee:2e:1b:c6:dd:98:24:78:75:00:a4:93
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f6ada20bd98babdf74c3d56cd78ada66ed87a148
Validity
Not Before: Jan 1 20:18:58 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=426f5b13e188d33a462324172a689b8c64e0841b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:cb:95:d6:d3:de:c0:f8:94:4a:1c:95:4c:f0:
0d:9a:4b:db:2b:1c:b2:f1:87:ca:bc:54:e7:13:a1:
c7:a1:e0:36:83:4b:6a:ef:89:fc:99:dc:36:c0:2f:
f2:77:bc:11:73:ab:38:94:2a:a2:b0:c8:e3:31:34:
4f:02:0f:fc:4a:79:13:f7:cd:84:7d:14:9b:ea:55:
86:9a:94:e3:c2:b6:9b:3d:10:c8:24:e6:9c:a7:7a:
e0:99:ae:b2:8d:de:22:bc:18:e4:cd:17:69:6f:2e:
c8:91:4b:b8:f5:d3:10:7b:e8:1a:42:35:1b:43:93:
9a:99:13:5f:6a:99:4f:33:06:7c:65:75:d2:8d:59:
f1:aa:4a:6a:24:bc:49:3b:e9:47:db:42:18:1c:f9:
1e:51:7c:0c:c6:62:92:e5:30:0c:07:39:e5:5a:ed:
ff:de:fb:ff:74:0c:d4:30:ed:8f:ed:33:19:a8:93:
77:06:95:9e:27:d4:58:1a:1e:05:ae:32:00:ed:0f:
f7:65:cd:15:dd:50:05:46:e1:64:4f:fd:b5:16:c7:
be:cc:42:bc:72:95:2c:ea:1c:9c:58:3b:f3:f0:e4:
49:7d:f4:34:49:96:be:6c:37:a4:05:2a:12:46:e3:
21:0e:bd:08:98:81:41:37:60:6b:69:af:bd:3f:c9:
4d:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6F:5B:13:E1:88:D3:3A:46:23:24:17:2A:68:9B:8C:64:E0:84:1B
X509v3 Authority Key Identifier:
keyid:F6:AD:A2:0B:D9:8B:AB:DF:74:C3:D5:6C:D7:8A:DA:66:ED:87:A1:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9q2iC9mLq990w9Vs14raZu2HoUg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/Qm9bE-GI0zpGIyQXKmibjGTghBs.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/70/4d54b6-e03c-4310-9b39-9db17a5de463/1/9q2iC9mLq990w9Vs14raZu2HoUg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.230.237.0/24
94.101.104.0/24
192.83.120.0/24
194.102.239.0/24
195.138.39.0/24
213.159.24.0/23
IPv6:
2a11:800::/29
Signature Algorithm: sha256WithRSAEncryption
6f:00:1b:cc:93:2f:aa:2a:02:7a:73:a2:06:ab:39:bf:83:95:
83:22:76:b0:9f:93:0b:a1:b2:7c:03:b4:ec:42:83:49:f5:01:
7f:60:d5:d3:ad:7a:06:ad:1e:89:df:63:cd:e1:5b:16:9e:6f:
6f:72:d3:10:2e:f8:f4:75:36:28:37:6a:b1:4c:e1:35:73:91:
06:1e:5a:ae:b7:d6:fa:5f:91:5b:da:f4:4c:c6:66:d7:ff:21:
2c:0b:2e:58:e3:ca:66:5c:ec:48:19:5e:b9:a7:b6:8d:e8:36:
32:e2:60:e8:1a:cd:50:4d:a6:bf:c6:51:96:7e:92:c3:de:ee:
09:73:60:44:05:af:9a:c5:48:30:57:88:b1:34:71:0a:17:14:
8e:d8:e8:ad:59:53:13:4b:97:cc:84:10:4f:d0:b7:23:42:34:
3c:e2:7e:4c:b7:67:df:4d:ab:08:61:24:e7:4b:4b:c5:1c:f3:
3f:cc:08:6c:86:31:44:b6:6e:72:40:3f:5e:17:dc:85:ff:90:
df:d3:21:05:17:7a:69:98:da:47:a1:7d:5a:09:8d:43:20:65:
cc:df:89:cb:6c:07:95:07:fd:60:a2:96:b1:a2:09:66:80:f9:
2d:ce:17:1d:cc:08:b1:3b:fe:59:86:7d:07:e6:26:bf:a2:03:
fb:f7:d6:da
-----BEGIN CERTIFICATE-----
MIIFKjCCBBKgAwIBAgISAZt7NqgS7i4bxt2YJHh1AKSTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2YWRhMjBiZDk4YmFiZGY3NGMzZDU2Y2Q3OGFkYTY2ZWQ4
N2ExNDgwHhcNMjYwMTAxMjAxODU4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjZmNWIxM2UxODhkMzNhNDYyMzI0MTcyYTY4OWI4YzY0ZTA4NDFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoMuV1tPewPiUShyVTPANmkvbKxyy
8YfKvFTnE6HHoeA2g0tq74n8mdw2wC/yd7wRc6s4lCqisMjjMTRPAg/8SnkT982E
fRSb6lWGmpTjwrabPRDIJOacp3rgma6yjd4ivBjkzRdpby7IkUu49dMQe+gaQjUb
Q5OamRNfaplPMwZ8ZXXSjVnxqkpqJLxJO+lH20IYHPkeUXwMxmKS5TAMBznlWu3/
3vv/dAzUMO2P7TMZqJN3BpWeJ9RYGh4FrjIA7Q/3Zc0V3VAFRuFkT/21Fse+zEK8
cpUs6hycWDvz8ORJffQ0SZa+bDekBSoSRuMhDr0ImIFBN2Braa+9P8lNOQIDAQAB
o4ICNjCCAjIwHQYDVR0OBBYEFEJvWxPhiNM6RiMkFypom4xk4IQbMB8GA1UdIwQY
MBaAFPatogvZi6vfdMPVbNeK2mbth6FIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXEyaUM5bUxxOTkwdzlWczE0cmFadTJIb1VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MC80ZDU0YjYtZTAzYy00MzEwLTliMzkt
OWRiMTdhNWRlNDYzLzEvUW05YkUtR0kwenBHSXlRWEttaWJqR1RnaEJzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MC80ZDU0YjYtZTAzYy00MzEwLTliMzktOWRiMTdhNWRlNDYz
LzEvOXEyaUM5bUxxOTkwdzlWczE0cmFadTJIb1VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQAW+btAwQA
XmVoAwQAwFN4AwQAwmbvAwQAw4onAwQB1Z8YMA0EAgACMAcDBQMqEQgAMA0GCSqG
SIb3DQEBCwUAA4IBAQBvABvMky+qKgJ6c6IGqzm/g5WDInawn5MLobJ8A7TsQoNJ
9QF/YNXTrXoGrR6J32PN4VsWnm9vctMQLvj0dTYoN2qxTOE1c5EGHlqut9b6X5Fb
2vRMxmbX/yEsCy5Y48pmXOxIGV65p7aN6DYy4mDoGs1QTaa/xlGWfpLD3u4Jc2BE
Ba+axUgwV4ixNHEKFxSO2OitWVMTS5fMhBBP0LcjQjQ84n5Mt2ffTasIYSTnS0vF
HPM/zAhshjFEtm5yQD9eF9yF/5Df0yEFF3ppmNpHoX1aCY1DIGXM34nLbAeVB/1g
opaxoglmgPktzhcdzAixO/5Zhn0H5ia/ogP799ba
-----END CERTIFICATE-----
Generated at Mon Mar 2 23:05:03 2026 by rpki-client