Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/PQaM9i-ZFvgM-odibb8AZoCwaLw.roa
File: PQaM9i-ZFvgM-odibb8AZoCwaLw.roa (raw, json)
Hash identifier: 6qm8ZSVZvMA/kQTFFqEROzq6H8nPq+g1vFjlYN9Vl3Q=
Subject key identifier: 3D:06:8C:F6:2F:99:16:F8:0C:FA:87:62:6D:BF:00:66:80:B0:68:BC
Certificate issuer: /CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Certificate serial: 019B7758D3972045F5AB7CE6DD616798D892
Authority key identifier: F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/PQaM9i-ZFvgM-odibb8AZoCwaLw.roa
Signing time: Thu 01 Jan 2026 02:17:48 +0000
ROA not before: Thu 01 Jan 2026 02:17:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210839
IP address blocks: 185.224.172.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.mft
rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 02:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:77:58:d3:97:20:45:f5:ab:7c:e6:dd:61:67:98:d8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1bbf9bee531f3dee2d03bbf4e69ef82eedb99af
Validity
Not Before: Jan 1 02:17:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=3d068cf62f9916f80cfa87626dbf006680b068bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:cb:ec:5d:e1:65:42:bb:5c:72:0b:10:0f:ad:
b0:67:9a:0a:4d:b6:ef:72:d3:fb:7d:02:74:16:c6:
e0:3d:7d:3b:1b:6d:d2:85:9f:0d:8b:57:12:e3:6b:
67:06:18:0b:94:94:0a:d8:47:c6:0f:3a:d2:79:71:
63:0c:f6:7c:65:dd:7a:47:d3:14:3e:94:ad:f0:b5:
89:8d:a1:cd:4f:3c:7e:9a:99:c4:b2:f9:ad:10:73:
f8:fd:b7:75:ba:14:9d:01:3f:ce:a6:3f:1c:83:f7:
98:7c:04:72:5d:be:d5:a3:dc:fb:d7:df:05:2c:00:
64:b8:b4:48:19:b3:fb:01:d6:2f:d1:74:cc:46:04:
2a:f3:e7:b8:77:7e:1a:03:ab:b6:f3:78:ab:7c:02:
a3:80:86:76:38:95:f6:bb:38:8c:64:23:4a:10:04:
bd:2c:08:d8:d6:d9:5f:7b:84:6f:d5:f3:f0:52:63:
06:d7:2d:8f:ec:c2:ca:77:39:4c:56:98:19:88:89:
24:3d:23:9a:cb:81:e7:84:78:87:56:7e:91:f5:36:
17:c2:47:e5:66:5d:1e:ea:25:ab:b1:29:b9:ae:0e:
c9:14:b3:25:ee:ce:de:f8:c0:e4:c7:97:3b:10:15:
a8:63:f9:24:4b:93:d9:9a:26:48:32:ef:2e:4f:fd:
d3:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:06:8C:F6:2F:99:16:F8:0C:FA:87:62:6D:BF:00:66:80:B0:68:BC
X509v3 Authority Key Identifier:
keyid:F1:BB:F9:BE:E5:31:F3:DE:E2:D0:3B:BF:4E:69:EF:82:EE:DB:99:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8bv5vuUx897i0Du_Tmnvgu7bma8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/PQaM9i-ZFvgM-odibb8AZoCwaLw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/3f110b-dedb-490f-9e66-6fad08aa20ee/1/8bv5vuUx897i0Du_Tmnvgu7bma8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.224.172.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:8f:1c:87:6c:be:61:3e:10:80:2a:eb:50:08:48:80:1c:11:
6e:9a:10:92:d0:a0:e5:a9:af:4a:ee:aa:af:92:26:76:18:dc:
33:10:7f:d2:7e:cf:0d:7b:2b:7f:bd:ae:e2:39:2a:d4:71:b7:
d6:32:a9:7e:89:64:38:6c:13:51:20:b6:64:c3:8d:08:eb:39:
f1:a2:76:13:94:b9:d2:b6:ff:35:8d:5f:cd:54:f2:48:c1:52:
5e:6b:bf:c7:4b:2d:4d:74:13:81:5c:ce:67:47:43:9b:05:a9:
d0:6b:98:ff:65:22:40:66:07:4c:a3:9c:b7:e2:7d:ac:2b:dd:
61:0d:ad:52:0b:14:2c:d7:70:d0:2f:42:6e:ac:7d:8f:00:14:
9c:b0:56:c5:da:7e:e8:dc:16:bc:46:37:90:b5:35:35:23:aa:
10:b2:1d:a8:31:4d:6d:be:00:52:ab:2a:d4:c7:5a:a6:59:5b:
23:5f:c6:66:2a:79:51:24:c2:5a:77:03:1e:03:cd:23:38:44:
78:21:5f:e9:5c:76:02:d4:8d:ab:b5:02:9b:a1:2b:02:ff:c6:
48:ce:d8:53:92:8e:a1:e7:18:cf:76:e7:b0:e9:b6:86:22:dd:
ec:65:0d:55:f4:7c:81:b9:69:e4:9e:0f:6a:6a:cf:96:77:73:
7d:61:cc:05
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt3WNOXIEX1q3zm3WFnmNiSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYmJmOWJlZTUzMWYzZGVlMmQwM2JiZjRlNjllZjgyZWVk
Yjk5YWYwHhcNMjYwMTAxMDIxNzQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygzZDA2OGNmNjJmOTkxNmY4MGNmYTg3NjI2ZGJmMDA2NjgwYjA2OGJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApMvsXeFlQrtccgsQD62wZ5oKTbbv
ctP7fQJ0FsbgPX07G23ShZ8Ni1cS42tnBhgLlJQK2EfGDzrSeXFjDPZ8Zd16R9MU
PpSt8LWJjaHNTzx+mpnEsvmtEHP4/bd1uhSdAT/Opj8cg/eYfARyXb7Vo9z7198F
LABkuLRIGbP7AdYv0XTMRgQq8+e4d34aA6u283irfAKjgIZ2OJX2uziMZCNKEAS9
LAjY1tlfe4Rv1fPwUmMG1y2P7MLKdzlMVpgZiIkkPSOay4HnhHiHVn6R9TYXwkfl
Zl0e6iWrsSm5rg7JFLMl7s7e+MDkx5c7EBWoY/kkS5PZmiZIMu8uT/3T3wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFD0GjPYvmRb4DPqHYm2/AGaAsGi8MB8GA1UdIwQY
MBaAFPG7+b7lMfPe4tA7v05p74Lu25mvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGJ2NXZ1VXg4OTdpMER1X1RtbnZndTdibWE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8zZjExMGItZGVkYi00OTBmLTllNjYt
NmZhZDA4YWEyMGVlLzEvUFFhTTlpLVpGdmdNLW9kaWJiOEFab0N3YUx3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8zZjExMGItZGVkYi00OTBmLTllNjYtNmZhZDA4YWEyMGVl
LzEvOGJ2NXZ1VXg4OTdpMER1X1RtbnZndTdibWE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAueCsMA0G
CSqGSIb3DQEBCwUAA4IBAQCgjxyHbL5hPhCAKutQCEiAHBFumhCS0KDlqa9K7qqv
kiZ2GNwzEH/Sfs8Neyt/va7iOSrUcbfWMql+iWQ4bBNRILZkw40I6znxonYTlLnS
tv81jV/NVPJIwVJea7/HSy1NdBOBXM5nR0ObBanQa5j/ZSJAZgdMo5y34n2sK91h
Da1SCxQs13DQL0JurH2PABScsFbF2n7o3Ba8RjeQtTU1I6oQsh2oMU1tvgBSqyrU
x1qmWVsjX8ZmKnlRJMJadwMeA80jOER4IV/pXHYC1I2rtQKboSsC/8ZIzthTko6h
5xjPduew6baGIt3sZQ1V9HyBuWnkng9qas+Wd3N9YcwF
-----END CERTIFICATE-----
Generated at Mon Mar 2 13:13:25 2026 by rpki-client