Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/q_2UyZgHKhW6Hl7q-pHjMYewFAw.roa
File: q_2UyZgHKhW6Hl7q-pHjMYewFAw.roa (raw, json)
Hash identifier: kxNQzWZ+tnuDOxHWowMznMe5W1q5LWlIAgSvSmX4jc8=
Subject key identifier: AB:FD:94:C9:98:07:2A:15:BA:1E:5E:EA:FA:91:E3:31:87:B0:14:0C
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A07A64CD513982B82948358B626E0430B2
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/q_2UyZgHKhW6Hl7q-pHjMYewFAw.roa
Signing time: Mon 07 Sep 2026 05:43:41 +0000
ROA not before: Mon 07 Sep 2026 05:43:41 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218869
IP address blocks: 87.82.255.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Sep 2026 14:16:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:7a:64:cd:51:39:82:b8:29:48:35:8b:62:6e:04:30:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Sep 7 05:43:41 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abfd94c998072a15ba1e5eeafa91e33187b0140c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:e7:12:74:5d:1c:ae:a3:5b:34:02:99:b8:dd:
c9:0b:fe:b9:26:e9:3d:ec:3b:65:c8:1e:6b:d0:9b:
ca:02:aa:ad:bc:7d:0e:12:c7:d2:1a:0b:fd:6b:3f:
fb:fb:4f:91:40:1f:40:d7:29:c3:49:fc:34:bd:3b:
0a:1c:1b:c1:d8:84:28:6f:b0:44:f4:e3:f8:b7:39:
9e:3f:d0:9a:24:f9:48:74:a3:57:3c:c2:94:c9:e4:
cc:71:d8:4b:ef:07:4e:5b:fa:55:7b:b9:06:fd:4f:
e4:74:15:81:4a:0b:43:40:df:13:7f:7f:30:12:d7:
5e:6d:ef:00:ce:8f:c0:50:c0:5e:d7:6c:f2:b6:f3:
2d:c0:e7:13:d7:ef:2c:bf:3a:6c:ad:3e:8d:38:b4:
8c:ad:76:7e:07:95:d9:9a:d4:c6:a7:d1:00:8e:e6:
07:22:17:21:62:02:53:a8:f3:db:ca:4b:37:35:b6:
bf:8e:9a:15:92:8b:70:d4:86:a9:92:fd:ad:0e:98:
2d:07:95:d1:a3:2d:55:9b:d3:b8:d4:63:40:d4:91:
1e:fb:63:bb:9e:af:62:24:22:8d:f8:5a:ac:2c:85:
ee:73:df:b2:6e:67:94:d0:e4:fe:dd:bf:79:d5:b0:
ec:2c:f8:1b:95:51:d3:07:b2:3b:08:c9:05:ed:34:
b4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FD:94:C9:98:07:2A:15:BA:1E:5E:EA:FA:91:E3:31:87:B0:14:0C
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/q_2UyZgHKhW6Hl7q-pHjMYewFAw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.82.255.0/24
Signature Algorithm: sha256WithRSAEncryption
96:3a:53:ad:85:15:53:93:fe:7c:90:f4:aa:33:c4:13:a5:69:
9c:df:8c:03:a1:3b:ec:fa:fe:fb:0a:1d:f4:ae:a5:3e:c1:f1:
c4:c5:17:9e:7d:a8:81:50:c0:55:89:2b:93:97:2e:5e:56:89:
60:d0:d9:fe:c8:b2:6f:a1:12:41:bd:54:c1:b3:86:17:c9:a2:
61:f9:55:45:ad:7c:1d:c1:a9:35:42:24:11:45:30:a0:05:87:
e1:a3:f2:24:f1:53:ae:c2:b0:62:91:9e:b0:0d:25:a4:26:a0:
6b:50:57:5b:d5:40:67:fe:0b:71:69:88:97:d7:6a:69:75:bb:
80:36:85:cc:8f:24:39:f6:28:32:90:1c:34:fc:a6:67:a9:3d:
17:8c:e1:8d:06:b7:36:62:46:98:9d:e8:87:4c:32:9f:e3:e7:
ed:b1:97:20:78:8c:0e:ee:9c:9f:2b:e2:7d:4b:4c:53:d8:c7:
37:b7:2e:b7:93:d5:24:87:22:b8:de:7a:58:42:49:7b:bd:d2:
64:86:be:9b:53:04:9c:39:a9:18:dd:41:f8:78:40:25:44:c9:
d7:39:ed:69:c2:5e:dc:c0:4c:41:84:e2:7e:15:e2:fe:72:0c:
a9:69:95:4b:99:e2:98:a2:48:d9:55:25:7c:db:5c:f6:64:5d:
4e:6c:8a:24
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaB6ZM1ROYK4KUg1i2JuBDCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYwOTA3MDU0MzQxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmZkOTRjOTk4MDcyYTE1YmExZTVlZWFmYTkxZTMzMTg3YjAxNDBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzecSdF0crqNbNAKZuN3JC/65Juk9
7DtlyB5r0JvKAqqtvH0OEsfSGgv9az/7+0+RQB9A1ynDSfw0vTsKHBvB2IQob7BE
9OP4tzmeP9CaJPlIdKNXPMKUyeTMcdhL7wdOW/pVe7kG/U/kdBWBSgtDQN8Tf38w
Etdebe8Azo/AUMBe12zytvMtwOcT1+8svzpsrT6NOLSMrXZ+B5XZmtTGp9EAjuYH
IhchYgJTqPPbyks3Nba/jpoVkotw1Iapkv2tDpgtB5XRoy1Vm9O41GNA1JEe+2O7
nq9iJCKN+FqsLIXuc9+ybmeU0OT+3b951bDsLPgblVHTB7I7CMkF7TS0aQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKv9lMmYByoVuh5e6vqR4zGHsBQMMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvcV8yVXlaZ0hLaFc2SGw3cS1wSGpNWWV3RkF3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAV1L/MA0G
CSqGSIb3DQEBCwUAA4IBAQCWOlOthRVTk/58kPSqM8QTpWmc34wDoTvs+v77Ch30
rqU+wfHExReefaiBUMBViSuTly5eVolg0Nn+yLJvoRJBvVTBs4YXyaJh+VVFrXwd
wak1QiQRRTCgBYfho/Ik8VOuwrBikZ6wDSWkJqBrUFdb1UBn/gtxaYiX12ppdbuA
NoXMjyQ59igykBw0/KZnqT0XjOGNBrc2YkaYneiHTDKf4+ftsZcgeIwO7pyfK+J9
S0xT2Mc3ty63k9UkhyK43npYQkl7vdJkhr6bUwScOakY3UH4eEAlRMnXOe1pwl7c
wExBhOJ+FeL+cgypaZVLmeKYokjZVSV821z2ZF1ObIok
-----END CERTIFICATE-----
Generated at Mon Sep 21 19:16:10 2026 by rpki-client