Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/qH5fLLWJkV1VZnXKxFAToZGD4BA.roa
File: qH5fLLWJkV1VZnXKxFAToZGD4BA.roa (raw, json)
Hash identifier: gujwjiPUnMht5bxbQJ8geZbpehgQ8vnJKIXcFg1nhbI=
Subject key identifier: A8:7E:5F:2C:B5:89:91:5D:55:66:75:CA:C4:50:13:A1:91:83:E0:10
Certificate issuer: /CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Certificate serial: 019C7104E8EF976F74F530C9298BE96E3210
Authority key identifier: 5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/qH5fLLWJkV1VZnXKxFAToZGD4BA.roa
Signing time: Wed 18 Feb 2026 13:51:12 +0000
ROA not before: Wed 18 Feb 2026 13:51:12 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203919
IP address blocks: 185.200.244.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 04:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:71:04:e8:ef:97:6f:74:f5:30:c9:29:8b:e9:6e:32:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5dde4b3b82f209b701ae340cf53b974078f16a9f
Validity
Not Before: Feb 18 13:51:12 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a87e5f2cb589915d556675cac45013a19183e010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9f:9e:fa:50:fa:c6:0c:20:b3:5e:64:78:24:
6c:d7:41:b3:91:38:e1:ac:6d:34:e9:18:7c:44:ea:
01:a5:38:c1:f5:f4:b8:64:41:c6:65:54:12:68:90:
bd:94:4e:47:c8:30:76:ff:3c:01:14:9d:56:b7:8c:
22:03:5d:42:5f:70:d8:31:a8:f3:c4:2c:a0:83:a4:
b4:40:67:8a:c0:86:f5:c2:13:26:b0:e3:4c:00:9c:
cc:54:15:5a:18:33:24:19:4a:d7:19:4f:c0:b1:38:
eb:cc:d2:ef:33:3d:73:5e:ec:d4:29:79:3c:ef:9d:
c7:da:e7:8b:ed:3d:da:82:78:b6:7b:0f:b1:27:5d:
ba:36:13:39:78:90:6f:23:b2:dd:c4:62:4f:ae:15:
dc:90:2d:82:76:5c:7f:c5:79:f4:04:00:66:c3:7d:
28:0d:44:ab:e7:4a:33:d9:de:65:16:fa:b7:f9:48:
90:15:f2:01:c1:fe:60:6b:03:6f:4e:aa:fb:aa:8f:
48:2b:3d:e8:4f:70:6a:ee:db:0b:40:7d:f3:d6:97:
7e:5f:e2:3f:00:0d:d3:4f:22:83:8a:65:1b:b5:a3:
89:5e:7e:7b:98:64:76:e1:ca:da:f9:fc:34:3a:8e:
df:31:a8:16:5b:f4:4b:1e:72:39:bd:5b:26:9b:ec:
93:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:7E:5F:2C:B5:89:91:5D:55:66:75:CA:C4:50:13:A1:91:83:E0:10
X509v3 Authority Key Identifier:
keyid:5D:DE:4B:3B:82:F2:09:B7:01:AE:34:0C:F5:3B:97:40:78:F1:6A:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Xd5LO4LyCbcBrjQM9TuXQHjxap8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/qH5fLLWJkV1VZnXKxFAToZGD4BA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/02bdf0-bf29-4dae-b19b-86a5518e2d52/1/Xd5LO4LyCbcBrjQM9TuXQHjxap8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.200.244.0/24
Signature Algorithm: sha256WithRSAEncryption
3b:c6:c7:97:78:f0:39:bf:95:2f:ee:04:9a:82:f2:97:a1:3f:
cc:97:e9:7c:b6:3a:f9:b6:ef:50:fb:fc:56:62:09:eb:89:76:
c6:62:c7:19:60:32:1c:82:15:f6:33:29:43:e3:8c:bf:e0:6d:
f2:83:d0:23:31:ea:8b:14:d4:94:78:cf:96:f5:b9:59:7f:0c:
dd:43:cd:96:76:23:03:ae:58:92:19:71:9b:b9:01:ce:1e:7b:
ea:18:94:10:ad:32:32:d0:91:0e:ca:ea:e0:56:c8:80:74:c5:
cc:a3:f6:0b:38:7b:6d:e0:41:60:6a:54:d4:9d:c4:f4:af:60:
ce:d6:e2:72:58:31:ba:8b:e4:3d:98:a7:03:54:a8:30:93:40:
48:a2:3b:9d:a8:0f:da:1d:6b:cc:29:26:e9:68:44:75:66:00:
28:e8:01:85:fe:da:67:e1:4a:b9:f2:50:18:4f:39:12:70:46:
ae:26:89:d5:b1:bd:45:01:08:0f:a7:14:30:34:6f:9a:53:13:
4e:ab:2c:1f:9a:61:17:33:65:d2:6c:28:05:27:b5:e4:1f:cc:
a8:d2:f0:d6:e0:1a:5a:df:72:32:a7:f7:92:a8:92:3e:d2:e3:
48:40:21:d2:4a:1a:39:92:1f:f7:a8:6f:31:9e:0a:a1:2f:94:
5f:2b:5d:59
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZxxBOjvl2909TDJKYvpbjIQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVkZGU0YjNiODJmMjA5YjcwMWFlMzQwY2Y1M2I5NzQwNzhm
MTZhOWYwHhcNMjYwMjE4MTM1MTEyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODdlNWYyY2I1ODk5MTVkNTU2Njc1Y2FjNDUwMTNhMTkxODNlMDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZ+e+lD6xgwgs15keCRs10GzkTjh
rG006Rh8ROoBpTjB9fS4ZEHGZVQSaJC9lE5HyDB2/zwBFJ1Wt4wiA11CX3DYMajz
xCygg6S0QGeKwIb1whMmsONMAJzMVBVaGDMkGUrXGU/AsTjrzNLvMz1zXuzUKXk8
753H2ueL7T3agni2ew+xJ126NhM5eJBvI7LdxGJPrhXckC2Cdlx/xXn0BABmw30o
DUSr50oz2d5lFvq3+UiQFfIBwf5gawNvTqr7qo9IKz3oT3Bq7tsLQH3z1pd+X+I/
AA3TTyKDimUbtaOJXn57mGR24cra+fw0Oo7fMagWW/RLHnI5vVsmm+yT+wIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKh+Xyy1iZFdVWZ1ysRQE6GRg+AQMB8GA1UdIwQY
MBaAFF3eSzuC8gm3Aa40DPU7l0B48WqfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWIt
ODZhNTUxOGUyZDUyLzEvcUg1ZkxMV0prVjFWWm5YS3hGQVRvWkdENEJBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8wMmJkZjAtYmYyOS00ZGFlLWIxOWItODZhNTUxOGUyZDUy
LzEvWGQ1TE80THlDYmNCcmpRTTlUdVhRSGp4YXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAucj0MA0G
CSqGSIb3DQEBCwUAA4IBAQA7xseXePA5v5Uv7gSagvKXoT/Ml+l8tjr5tu9Q+/xW
YgnriXbGYscZYDIcghX2MylD44y/4G3yg9AjMeqLFNSUeM+W9blZfwzdQ82WdiMD
rliSGXGbuQHOHnvqGJQQrTIy0JEOyurgVsiAdMXMo/YLOHtt4EFgalTUncT0r2DO
1uJyWDG6i+Q9mKcDVKgwk0BIojudqA/aHWvMKSbpaER1ZgAo6AGF/tpn4Uq58lAY
TzkScEauJonVsb1FAQgPpxQwNG+aUxNOqywfmmEXM2XSbCgFJ7XkH8yo0vDW4Bpa
33Iyp/eSqJI+0uNIQCHSSho5kh/3qG8xngqhL5RfK11Z
-----END CERTIFICATE-----
Generated at Mon Mar 2 14:14:52 2026 by rpki-client