Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/qGr3CoUDdX1_VRb6Bx5idt1iFfI.roa
File: qGr3CoUDdX1_VRb6Bx5idt1iFfI.roa (raw, json)
Hash identifier: rrRJdISE3OX5lQS17cb4m8EoKPH8zP9CsSTb1fh6uuA=
Subject key identifier: A8:6A:F7:0A:85:03:75:7D:7F:55:16:FA:07:1E:62:76:DD:62:15:F2
Certificate issuer: /CN=8b82433ffe94bf3536fec327543d396158202072
Certificate serial: 019BFA8F3EC02B75FFF4E435EEB780D1AE8F
Authority key identifier: 8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/qGr3CoUDdX1_VRb6Bx5idt1iFfI.roa
Signing time: Mon 26 Jan 2026 13:47:30 +0000
ROA not before: Mon 26 Jan 2026 13:47:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50265
IP address blocks: 91.233.88.0/24 maxlen: 24
193.106.68.0/22 maxlen: 24
217.12.32.0/22 maxlen: 24
217.12.36.0/24 maxlen: 24
217.12.39.0/24 maxlen: 24
217.12.42.0/23 maxlen: 24
217.12.44.0/22 maxlen: 24
217.172.16.0/21 maxlen: 24
2a00:46e0::/32 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:fa:8f:3e:c0:2b:75:ff:f4:e4:35:ee:b7:80:d1:ae:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b82433ffe94bf3536fec327543d396158202072
Validity
Not Before: Jan 26 13:47:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a86af70a8503757d7f5516fa071e6276dd6215f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:e1:f9:4c:03:b7:6c:6b:f7:69:56:aa:8c:c1:
47:5e:77:68:34:d1:31:61:e9:cd:53:8f:d6:12:c5:
f4:16:d8:23:80:ae:2e:bc:98:1f:30:c8:ee:d9:b5:
14:85:fc:cb:18:ec:b5:8b:c8:e6:d3:0e:36:48:ab:
cf:29:30:87:9b:fe:a8:64:e4:0e:38:55:e0:85:66:
cd:e8:a4:a0:85:94:e8:ee:16:d3:01:34:ad:2e:3a:
de:6d:9b:f8:ef:70:97:fa:20:18:c4:41:ea:9d:e1:
23:6d:46:7e:c5:41:6f:76:17:6c:c1:f6:07:74:82:
47:45:db:f1:36:cb:dd:a5:cb:d4:0c:e6:f5:a5:f0:
f7:fc:2c:d1:30:09:6a:80:13:d2:fb:dc:5d:74:4f:
19:d8:99:5b:94:dc:69:19:88:4d:06:2e:80:6e:23:
8d:61:5f:fd:05:27:82:0a:22:0b:58:f7:77:4e:80:
67:3d:e9:3f:d6:01:9d:f5:b9:55:8a:8b:1b:68:4f:
2a:1e:f2:fe:6b:ea:d9:30:cc:e2:00:b3:a0:d2:39:
99:28:8c:d9:5c:a0:e6:13:9b:df:d7:e9:3d:ce:ca:
c4:5e:53:9c:d5:11:17:31:95:17:1a:f9:1b:eb:f6:
b0:20:01:c8:20:e0:81:2b:a3:a3:c2:17:b0:8a:e8:
29:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:6A:F7:0A:85:03:75:7D:7F:55:16:FA:07:1E:62:76:DD:62:15:F2
X509v3 Authority Key Identifier:
keyid:8B:82:43:3F:FE:94:BF:35:36:FE:C3:27:54:3D:39:61:58:20:20:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i4JDP_6UvzU2_sMnVD05YVggIHI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/qGr3CoUDdX1_VRb6Bx5idt1iFfI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/f5593d-689c-4dfe-8d96-2dd7890dc689/1/i4JDP_6UvzU2_sMnVD05YVggIHI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.233.88.0/24
193.106.68.0/22
217.12.32.0-217.12.36.255
217.12.39.0/24
217.12.42.0-217.12.47.255
217.172.16.0/21
IPv6:
2a00:46e0::/32
Signature Algorithm: sha256WithRSAEncryption
57:6c:6e:4e:87:4d:d3:48:34:66:0c:ec:af:5b:65:30:97:01:
d5:88:81:1f:7b:e0:48:72:31:14:21:68:e2:7a:ef:91:1c:0a:
10:ed:85:d0:27:01:cb:af:9d:a3:74:f4:2a:df:f1:3b:20:f4:
7f:21:18:b7:5d:76:f8:e4:4a:9d:f7:c2:5a:1f:17:db:a4:b5:
99:7c:59:f1:33:80:25:57:63:2c:ad:a0:2e:73:7c:e9:67:f6:
df:73:79:bc:e8:fe:b3:26:4c:37:8a:17:30:a7:64:7c:b6:d1:
8f:6e:a9:51:e6:3c:b0:43:75:cd:c2:5e:3f:9f:ca:e3:88:da:
22:13:e3:81:45:6f:d9:f9:a3:8d:39:90:48:2d:58:24:3e:4f:
19:b3:52:2d:68:6d:b1:c6:d4:87:0f:3c:e6:34:aa:4b:df:3e:
59:b1:21:f2:29:81:1a:54:14:83:23:5e:5f:37:1b:b6:fa:ba:
cd:23:5f:a1:a7:ab:f3:d3:db:aa:a5:66:c5:a7:7c:65:e9:9d:
8c:b9:01:37:8d:d2:c9:c3:9c:f2:4e:5c:2a:38:e0:13:52:4b:
a9:9b:6a:5e:0a:70:f5:16:78:09:2b:4e:85:67:1b:b5:62:60:
9d:f7:c3:25:9f:78:d0:3c:e0:30:8f:2f:06:bd:03:26:1c:fb:
62:00:7e:8e
-----BEGIN CERTIFICATE-----
MIIFOjCCBCKgAwIBAgISAZv6jz7AK3X/9OQ17reA0a6PMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiODI0MzNmZmU5NGJmMzUzNmZlYzMyNzU0M2QzOTYxNTgy
MDIwNzIwHhcNMjYwMTI2MTM0NzMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODZhZjcwYTg1MDM3NTdkN2Y1NTE2ZmEwNzFlNjI3NmRkNjIxNWYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvOH5TAO3bGv3aVaqjMFHXndoNNEx
YenNU4/WEsX0FtgjgK4uvJgfMMju2bUUhfzLGOy1i8jm0w42SKvPKTCHm/6oZOQO
OFXghWbN6KSghZTo7hbTATStLjrebZv473CX+iAYxEHqneEjbUZ+xUFvdhdswfYH
dIJHRdvxNsvdpcvUDOb1pfD3/CzRMAlqgBPS+9xddE8Z2JlblNxpGYhNBi6AbiON
YV/9BSeCCiILWPd3ToBnPek/1gGd9blViosbaE8qHvL+a+rZMMziALOg0jmZKIzZ
XKDmE5vf1+k9zsrEXlOc1REXMZUXGvkb6/awIAHIIOCBK6Ojwhewiugp7QIDAQAB
o4ICRjCCAkIwHQYDVR0OBBYEFKhq9wqFA3V9f1UW+gceYnbdYhXyMB8GA1UdIwQY
MBaAFIuCQz/+lL81Nv7DJ1Q9OWFYICByMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYt
MmRkNzg5MGRjNjg5LzEvcUdyM0NvVURkWDFfVlJiNkJ4NWlkdDFpRmZJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy9mNTU5M2QtNjg5Yy00ZGZlLThkOTYtMmRkNzg5MGRjNjg5
LzEvaTRKRFBfNlV2elUyX3NNblZEMDVZVmdnSUhJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFwGCCsGAQUFBwEHAQH/BE0wSzA6BAIAATA0AwQAW+lYAwQC
wWpEMAwDBAXZDCADBADZDCQDBADZDCcwDAMEAdkMKgMEBNkMIAMEA9msEDANBAIA
AjAHAwUAKgBG4DANBgkqhkiG9w0BAQsFAAOCAQEAV2xuTodN00g0Zgzsr1tlMJcB
1YiBH3vgSHIxFCFo4nrvkRwKEO2F0CcBy6+do3T0Kt/xOyD0fyEYt112+ORKnffC
Wh8X26S1mXxZ8TOAJVdjLK2gLnN86Wf233N5vOj+syZMN4oXMKdkfLbRj26pUeY8
sEN1zcJeP5/K44jaIhPjgUVv2fmjjTmQSC1YJD5PGbNSLWhtscbUhw885jSqS98+
WbEh8imBGlQUgyNeXzcbtvq6zSNfoaer89PbqqVmxad8ZemdjLkBN43SycOc8k5c
KjjgE1JLqZtqXgpw9RZ4CStOhWcbtWJgnffDJZ940DzgMI8vBr0DJhz7YgB+jg==
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:35:47 2026 by rpki-client