Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/qRtuA-5EfGUFnhwE-Pb-sLFmerA.roa
File: qRtuA-5EfGUFnhwE-Pb-sLFmerA.roa (raw, json)
Hash identifier: 2hrxhrdyC+UK6nU6rXyVs1O1PLBxtIQuQuyR5GWUyCs=
Subject key identifier: A9:1B:6E:03:EE:44:7C:65:05:9E:1C:04:F8:F6:FE:B0:B1:66:7A:B0
Certificate issuer: /CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Certificate serial: 019C5D3DD4DDC0992C0D66DB4A7B11A255D7
Authority key identifier: 8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/qRtuA-5EfGUFnhwE-Pb-sLFmerA.roa
Signing time: Sat 14 Feb 2026 17:40:59 +0000
ROA not before: Sat 14 Feb 2026 17:40:59 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 16276
IP address blocks: 194.150.165.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.mft
rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 02 Mar 2026 15:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:5d:3d:d4:dd:c0:99:2c:0d:66:db:4a:7b:11:a2:55:d7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ea26b458ad41d47d261a76d8c5dc0fc8d1a9e2c
Validity
Not Before: Feb 14 17:40:59 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a91b6e03ee447c65059e1c04f8f6feb0b1667ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:1e:d3:9c:eb:e1:59:97:b8:a8:71:97:3d:15:
c8:92:8e:08:f2:22:3e:9f:a1:e4:c7:d8:4a:55:44:
a3:bb:8f:10:16:2f:f6:c0:fc:8a:0c:e1:ca:4a:36:
dc:69:e9:5c:3d:05:86:0e:61:ea:b7:28:07:8e:51:
50:d3:92:fa:7e:4c:3e:45:d3:e8:90:a3:cb:85:05:
c5:6c:01:51:c9:70:4d:63:c9:99:80:52:1e:69:bc:
f4:03:68:b4:12:06:08:ff:a6:7f:07:39:b8:39:f7:
47:2c:1b:40:22:bf:2c:a5:2b:fd:13:0c:d7:26:59:
13:ac:f3:79:04:a0:90:a1:73:52:24:91:e2:20:c5:
96:c7:0b:4a:f3:7c:34:fc:88:5d:d3:5b:c8:a1:6d:
b0:aa:13:73:ef:2d:a8:53:ee:51:cc:70:90:8a:9c:
70:72:d5:72:70:46:68:ee:67:f4:42:c1:5c:50:a0:
22:d2:bd:be:6e:3e:5b:24:23:5c:d4:3c:7d:4a:f3:
05:73:48:18:29:68:63:27:0c:e9:f2:aa:e2:9a:f8:
af:11:d8:af:c3:8b:8f:93:24:f5:9c:18:68:1b:8a:
d0:05:64:e2:42:e0:80:33:36:56:52:95:12:7c:30:
1c:16:07:7d:3d:48:ec:86:b5:a8:dd:38:82:98:04:
0e:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:1B:6E:03:EE:44:7C:65:05:9E:1C:04:F8:F6:FE:B0:B1:66:7A:B0
X509v3 Authority Key Identifier:
keyid:8E:A2:6B:45:8A:D4:1D:47:D2:61:A7:6D:8C:5D:C0:FC:8D:1A:9E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jqJrRYrUHUfSYadtjF3A_I0aniw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/qRtuA-5EfGUFnhwE-Pb-sLFmerA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/ddcbb9-8fd2-4dc1-bbd6-2890055914c5/1/jqJrRYrUHUfSYadtjF3A_I0aniw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.150.165.0/24
Signature Algorithm: sha256WithRSAEncryption
42:f0:1d:6f:c9:d2:ed:da:83:fe:71:02:f0:36:c9:22:f5:d9:
22:97:b3:87:7f:6e:cc:46:83:bf:47:0b:bf:74:63:f4:bf:5e:
15:f9:fb:bd:d2:03:e4:c2:1e:4b:02:f4:8a:ff:e5:dd:fa:6d:
b8:62:74:43:dc:05:e1:f0:75:97:0c:3e:1c:05:51:10:e8:cf:
93:74:f8:9d:d7:6e:39:57:cb:34:c8:ef:7f:f7:76:66:ba:07:
5d:24:47:95:bb:31:e1:09:c0:9e:9a:37:4a:e4:d1:cf:81:cd:
61:e6:e1:f8:96:c3:e6:76:74:27:50:9c:4f:b4:4e:bd:7b:7b:
ee:ae:92:01:b0:14:d4:e2:f3:bb:16:5c:0a:b0:b8:50:9b:e5:
05:28:68:b2:61:52:dd:dd:e2:8d:6d:34:1d:30:5a:b9:f7:f7:
8d:c1:0a:c9:cb:55:8e:3f:e6:16:73:48:33:cd:47:d0:2b:70:
23:b2:be:9f:cc:4c:8f:50:3b:d8:26:f2:a6:de:21:10:97:5e:
90:4c:04:f2:a7:fb:d3:1f:aa:1e:05:e0:78:b6:bd:3e:10:8b:
92:bd:10:47:d9:91:15:6a:b0:44:ae:01:e9:33:ff:45:5b:73:
78:6c:23:28:23:2f:f6:66:8b:4c:67:4f:6f:94:21:2f:f3:6f:
20:82:b6:3e
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxdPdTdwJksDWbbSnsRolXXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlYTI2YjQ1OGFkNDFkNDdkMjYxYTc2ZDhjNWRjMGZjOGQx
YTllMmMwHhcNMjYwMjE0MTc0MDU5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTFiNmUwM2VlNDQ3YzY1MDU5ZTFjMDRmOGY2ZmViMGIxNjY3YWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAux7TnOvhWZe4qHGXPRXIko4I8iI+
n6Hkx9hKVUSju48QFi/2wPyKDOHKSjbcaelcPQWGDmHqtygHjlFQ05L6fkw+RdPo
kKPLhQXFbAFRyXBNY8mZgFIeabz0A2i0EgYI/6Z/Bzm4OfdHLBtAIr8spSv9EwzX
JlkTrPN5BKCQoXNSJJHiIMWWxwtK83w0/Ihd01vIoW2wqhNz7y2oU+5RzHCQipxw
ctVycEZo7mf0QsFcUKAi0r2+bj5bJCNc1Dx9SvMFc0gYKWhjJwzp8qrimvivEdiv
w4uPkyT1nBhoG4rQBWTiQuCAMzZWUpUSfDAcFgd9PUjshrWo3TiCmAQO3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKkbbgPuRHxlBZ4cBPj2/rCxZnqwMB8GA1UdIwQY
MBaAFI6ia0WK1B1H0mGnbYxdwPyNGp4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvanFKclJZclVIVWZTWWFkdGpGM0FfSTBhbml3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9kZGNiYjktOGZkMi00ZGMxLWJiZDYt
Mjg5MDA1NTkxNGM1LzEvcVJ0dUEtNUVmR1VGbmh3RS1QYi1zTEZtZXJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9kZGNiYjktOGZkMi00ZGMxLWJiZDYtMjg5MDA1NTkxNGM1
LzEvanFKclJZclVIVWZTWWFkdGpGM0FfSTBhbml3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwpalMA0G
CSqGSIb3DQEBCwUAA4IBAQBC8B1vydLt2oP+cQLwNski9dkil7OHf27MRoO/Rwu/
dGP0v14V+fu90gPkwh5LAvSK/+Xd+m24YnRD3AXh8HWXDD4cBVEQ6M+TdPid1245
V8s0yO9/93ZmugddJEeVuzHhCcCemjdK5NHPgc1h5uH4lsPmdnQnUJxPtE69e3vu
rpIBsBTU4vO7FlwKsLhQm+UFKGiyYVLd3eKNbTQdMFq59/eNwQrJy1WOP+YWc0gz
zUfQK3Ajsr6fzEyPUDvYJvKm3iEQl16QTATyp/vTH6oeBeB4tr0+EIuSvRBH2ZEV
arBErgHpM/9FW3N4bCMoIy/2ZotMZ09vlCEv828ggrY+
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:52:54 2026 by rpki-client