Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/qoUOShqlBxi4uFIhSlbStE7M3e8.roa
File: qoUOShqlBxi4uFIhSlbStE7M3e8.roa (raw, json)
Hash identifier: rC7ceLZFty/FA8ZSkSfbq9hz9oq7Rm9x7P/1AJw3hZw=
Subject key identifier: AA:85:0E:4A:1A:A5:07:18:B8:B8:52:21:4A:56:D2:B4:4E:CC:DD:EF
Certificate issuer: /CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Certificate serial: 019EB707F20B6DCD5A4B90B1FA60F59FCDB7
Authority key identifier: 95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/qoUOShqlBxi4uFIhSlbStE7M3e8.roa
Signing time: Thu 11 Jun 2026 14:13:31 +0000
ROA not before: Thu 11 Jun 2026 14:13:31 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 41718
IP address blocks: 191.44.34.0/24 maxlen: 24
191.44.35.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 14 Jun 2026 08:43:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:b7:07:f2:0b:6d:cd:5a:4b:90:b1:fa:60:f5:9f:cd:b7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=95d108f0e85868c2bbe7db6d7377034c131eb224
Validity
Not Before: Jun 11 14:13:31 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa850e4a1aa50718b8b852214a56d2b44eccddef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:ba:80:87:68:81:be:01:a7:d3:67:18:9d:d5:
41:65:b3:85:af:45:db:c1:95:88:37:d6:64:ab:a4:
e3:82:7c:50:aa:19:92:f3:12:49:01:f4:3a:45:f9:
02:ad:c2:65:14:3d:f1:8c:69:00:03:42:df:2a:37:
71:e4:1d:05:2e:b7:ce:42:0e:b7:4f:ff:aa:05:8c:
88:eb:be:ca:b6:20:c7:ce:07:a6:6a:ef:24:d4:d0:
9e:0d:a0:81:98:7a:5e:81:44:a7:e6:c5:e3:40:2e:
18:2e:51:66:df:de:c5:74:f8:f4:ae:f0:ca:10:a0:
a2:4d:01:ec:91:80:bf:94:86:ad:e8:1e:54:5d:b8:
2b:c4:eb:80:57:87:ae:1e:47:5a:73:e2:c3:33:1d:
ca:4d:47:a8:1b:56:33:9a:ad:ff:97:53:33:e1:b8:
5b:76:23:47:c8:50:36:6b:d3:24:79:fe:49:6d:4c:
0e:c2:7e:fe:3b:1b:90:f5:d6:b5:ef:be:43:41:3e:
f1:f2:a1:c7:bf:76:f9:c2:de:ca:e9:ff:fa:80:39:
05:ee:92:86:0b:7b:7c:9a:de:67:bd:1d:0b:31:ae:
4d:c2:69:75:49:40:64:6b:b0:e3:8b:b9:ae:22:20:
ef:e0:40:19:5b:60:23:87:48:20:e3:45:61:ca:ad:
51:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:85:0E:4A:1A:A5:07:18:B8:B8:52:21:4A:56:D2:B4:4E:CC:DD:EF
X509v3 Authority Key Identifier:
keyid:95:D1:08:F0:E8:58:68:C2:BB:E7:DB:6D:73:77:03:4C:13:1E:B2:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ldEI8OhYaMK759ttc3cDTBMesiQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/qoUOShqlBxi4uFIhSlbStE7M3e8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/ldEI8OhYaMK759ttc3cDTBMesiQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
191.44.34.0/23
Signature Algorithm: sha256WithRSAEncryption
5c:d2:34:72:95:c1:47:95:47:5f:42:d6:24:eb:01:90:ad:f7:
5b:3b:de:2e:ac:22:b7:43:19:01:bf:09:8b:00:0b:0d:aa:96:
73:b5:03:12:00:44:90:77:81:64:6b:72:70:f8:9a:a1:fa:b0:
fd:75:7a:33:10:5b:4e:54:c1:60:b7:21:3b:a4:92:b4:41:fe:
5a:84:9d:c0:a2:e9:bd:a6:26:a2:0f:e1:92:46:34:0e:9d:2f:
47:86:e6:d7:83:3b:67:3b:fb:c8:05:ee:c7:ea:01:d8:51:04:
5d:5c:f4:5a:ad:04:5a:77:94:31:b9:8f:e5:ce:14:72:01:14:
9b:20:f5:b2:26:f7:3e:b7:fe:e3:b7:60:0f:75:b2:0d:60:52:
bd:b0:04:cd:71:1f:c2:1a:36:bd:35:5c:f5:e4:46:bb:47:d4:
79:a4:1c:a8:ef:62:28:5e:82:65:1f:2e:91:12:69:95:a6:bd:
29:05:05:5c:f4:c6:3e:69:98:e5:3c:a1:6a:49:86:78:d6:ca:
0d:3c:b4:ad:4b:3d:f5:d2:53:6a:81:5a:4d:14:23:d2:15:64:
2f:c4:b6:03:f0:f1:aa:b6:93:e1:29:0e:d1:5c:9b:b3:50:fa:
3c:f6:90:aa:a2:d3:49:ec:d1:00:de:38:b6:b3:30:fe:87:f6:
3a:58:06:85
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ63B/ILbc1aS5Cx+mD1n823MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk1ZDEwOGYwZTg1ODY4YzJiYmU3ZGI2ZDczNzcwMzRjMTMx
ZWIyMjQwHhcNMjYwNjExMTQxMzMxWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTg1MGU0YTFhYTUwNzE4YjhiODUyMjE0YTU2ZDJiNDRlY2NkZGVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuLqAh2iBvgGn02cYndVBZbOFr0Xb
wZWIN9Zkq6TjgnxQqhmS8xJJAfQ6RfkCrcJlFD3xjGkAA0LfKjdx5B0FLrfOQg63
T/+qBYyI677KtiDHzgemau8k1NCeDaCBmHpegUSn5sXjQC4YLlFm397FdPj0rvDK
EKCiTQHskYC/lIat6B5UXbgrxOuAV4euHkdac+LDMx3KTUeoG1Yzmq3/l1Mz4bhb
diNHyFA2a9Mkef5JbUwOwn7+OxuQ9da1775DQT7x8qHHv3b5wt7K6f/6gDkF7pKG
C3t8mt5nvR0LMa5Nwml1SUBka7Dji7muIiDv4EAZW2Ajh0gg40Vhyq1RGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKqFDkoapQcYuLhSIUpW0rROzN3vMB8GA1UdIwQY
MBaAFJXRCPDoWGjCu+fbbXN3A0wTHrIkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGRFSThPaFlhTUs3NTl0dGMzY0RUQk1lc2lRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYt
NzJmYjk3ZDU5Y2U0LzEvcW9VT1NocWxCeGk0dUZJaFNsYlN0RTdNM2U4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYtNzJmYjk3ZDU5Y2U0
LzEvbGRFSThPaFlhTUs3NTl0dGMzY0RUQk1lc2lRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBvywiMA0G
CSqGSIb3DQEBCwUAA4IBAQBc0jRylcFHlUdfQtYk6wGQrfdbO94urCK3QxkBvwmL
AAsNqpZztQMSAESQd4Fka3Jw+Jqh+rD9dXozEFtOVMFgtyE7pJK0Qf5ahJ3Aoum9
piaiD+GSRjQOnS9HhubXgztnO/vIBe7H6gHYUQRdXPRarQRad5QxuY/lzhRyARSb
IPWyJvc+t/7jt2APdbINYFK9sATNcR/CGja9NVz15Ea7R9R5pByo72IoXoJlHy6R
EmmVpr0pBQVc9MY+aZjlPKFqSYZ41soNPLStSz310lNqgVpNFCPSFWQvxLYD8PGq
tpPhKQ7RXJuzUPo89pCqotNJ7NEA3ji2szD+h/Y6WAaF
-----END CERTIFICATE-----
Generated at Sat Jun 13 13:24:28 2026 by rpki-client