Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qKMToe_MWgm-y06gJ6u3-V2krkc.roa
File: qKMToe_MWgm-y06gJ6u3-V2krkc.roa (raw, json)
Hash identifier: IhBtU1yl4hzFItLKbqNgqy5ZA2HU2qEodxBl6f6yCww=
Subject key identifier: A8:A3:13:A1:EF:CC:5A:09:BE:CB:4E:A0:27:AB:B7:F9:5D:A4:AE:47
Certificate issuer: /CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Certificate serial: 019B7D5CE34F800616E3F342421BB30C3D5D
Authority key identifier: A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qKMToe_MWgm-y06gJ6u3-V2krkc.roa
Signing time: Fri 02 Jan 2026 06:19:57 +0000
ROA not before: Fri 02 Jan 2026 06:19:57 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44157
IP address blocks: 91.201.80.0/24 maxlen: 24
91.201.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.mft
rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 12:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7d:5c:e3:4f:80:06:16:e3:f3:42:42:1b:b3:0c:3d:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a9a28417c1e1b68f69be1d3ec812037097619ccd
Validity
Not Before: Jan 2 06:19:57 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8a313a1efcc5a09becb4ea027abb7f95da4ae47
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:af:98:d6:c3:1b:6c:c0:53:9b:9a:71:9c:de:
b6:fd:a9:77:fa:67:a0:02:9b:15:6c:9c:8a:1e:fb:
71:2d:8f:5b:6e:e4:a0:ae:5e:24:72:f6:ab:06:2e:
69:e9:1b:6e:52:d9:bf:60:eb:0c:4a:23:a6:3d:51:
96:d6:ff:ce:7c:c4:fe:bc:f4:d1:f3:77:1a:00:7b:
b2:89:10:b2:b0:c2:79:83:80:2c:0c:b5:f5:53:f8:
96:ba:a4:e8:69:45:7f:de:36:95:b6:59:6f:49:1d:
ad:01:35:36:18:2d:77:4a:be:58:4a:25:c0:5e:4b:
67:4f:3b:90:cb:20:66:94:83:67:b5:d8:2d:4e:cd:
ae:0d:a8:93:2c:ec:f3:d0:1a:67:2f:be:ec:01:ab:
2d:88:2d:fc:38:c2:80:e6:47:34:aa:0b:a2:a8:f3:
77:b0:59:0c:13:20:27:74:36:88:44:a6:17:88:61:
c1:0c:71:de:74:25:c5:12:f3:6e:5b:68:23:05:dc:
dd:02:3b:e9:12:98:40:50:c5:7a:33:e9:99:49:41:
4e:03:57:f6:9d:32:40:c6:90:80:77:2c:3f:1d:05:
ce:aa:30:4a:73:51:6f:1f:c8:9a:41:5c:ab:5f:bf:
cc:c4:de:03:6c:bc:91:76:da:35:8a:9d:8c:d7:e9:
ca:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A3:13:A1:EF:CC:5A:09:BE:CB:4E:A0:27:AB:B7:F9:5D:A4:AE:47
X509v3 Authority Key Identifier:
keyid:A9:A2:84:17:C1:E1:B6:8F:69:BE:1D:3E:C8:12:03:70:97:61:9C:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qaKEF8Hhto9pvh0-yBIDcJdhnM0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qKMToe_MWgm-y06gJ6u3-V2krkc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c5/309c36-7c1d-4a33-9cf5-ed36477b9480/1/qaKEF8Hhto9pvh0-yBIDcJdhnM0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.201.80.0/23
Signature Algorithm: sha256WithRSAEncryption
8e:39:1d:af:fb:e3:96:13:aa:ba:1c:cd:33:97:c5:10:7d:47:
c3:b5:da:ac:a8:79:15:bf:9d:81:c2:c3:ae:ee:c6:c7:23:cd:
af:43:27:5a:cc:4e:c2:54:31:33:ef:cd:03:e7:4d:53:8e:aa:
d8:e8:20:dc:24:d0:d4:1e:cc:5f:c5:b0:e7:8c:b0:9e:0a:1c:
4b:c1:2f:79:8f:4a:85:d1:06:a0:d1:a3:e8:d5:0e:66:a3:45:
49:0a:29:11:90:31:8d:eb:a1:f4:e6:52:f2:60:30:c7:5a:52:
6a:3e:c5:93:54:4e:58:b6:1f:88:02:ee:64:75:29:ed:a0:a3:
b8:f2:be:ba:85:ef:ba:c4:7c:96:ea:bf:0a:66:a9:11:37:64:
e0:f0:8f:56:eb:72:2c:ac:12:0c:55:15:61:d8:ae:1d:fa:15:
3b:9b:07:8c:39:42:2a:52:b4:b3:cd:e1:61:80:d4:c9:18:24:
5b:57:e4:38:d5:a4:33:55:6b:43:1a:fa:2c:f2:15:23:85:18:
34:91:92:60:0b:f4:1e:51:ad:3f:3c:64:c2:e7:0d:0a:f7:3f:
7b:53:96:00:2c:e2:b2:c0:2f:1c:97:c8:35:ad:98:ce:4e:b8:
06:14:b0:ab:10:61:23:a4:ec:6e:20:3b:b7:3d:09:8a:b7:4b:
7a:ee:ca:c0
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt9XONPgAYW4/NCQhuzDD1dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE5YTI4NDE3YzFlMWI2OGY2OWJlMWQzZWM4MTIwMzcwOTc2
MTljY2QwHhcNMjYwMTAyMDYxOTU3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGEzMTNhMWVmY2M1YTA5YmVjYjRlYTAyN2FiYjdmOTVkYTRhZTQ3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApa+Y1sMbbMBTm5pxnN62/al3+meg
ApsVbJyKHvtxLY9bbuSgrl4kcvarBi5p6RtuUtm/YOsMSiOmPVGW1v/OfMT+vPTR
83caAHuyiRCysMJ5g4AsDLX1U/iWuqToaUV/3jaVtllvSR2tATU2GC13Sr5YSiXA
XktnTzuQyyBmlINntdgtTs2uDaiTLOzz0BpnL77sAastiC38OMKA5kc0qguiqPN3
sFkMEyAndDaIRKYXiGHBDHHedCXFEvNuW2gjBdzdAjvpEphAUMV6M+mZSUFOA1f2
nTJAxpCAdyw/HQXOqjBKc1FvH8iaQVyrX7/MxN4DbLyRdto1ip2M1+nKWQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKijE6HvzFoJvstOoCert/ldpK5HMB8GA1UdIwQY
MBaAFKmihBfB4baPab4dPsgSA3CXYZzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUt
ZWQzNjQ3N2I5NDgwLzEvcUtNVG9lX01XZ20teTA2Z0o2dTMtVjJrcmtjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNS8zMDljMzYtN2MxZC00YTMzLTljZjUtZWQzNjQ3N2I5NDgw
LzEvcWFLRUY4SGh0bzlwdmgwLXlCSURjSmRobk0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBW8lQMA0G
CSqGSIb3DQEBCwUAA4IBAQCOOR2v++OWE6q6HM0zl8UQfUfDtdqsqHkVv52BwsOu
7sbHI82vQydazE7CVDEz780D501TjqrY6CDcJNDUHsxfxbDnjLCeChxLwS95j0qF
0Qag0aPo1Q5mo0VJCikRkDGN66H05lLyYDDHWlJqPsWTVE5Yth+IAu5kdSntoKO4
8r66he+6xHyW6r8KZqkRN2Tg8I9W63IsrBIMVRVh2K4d+hU7mweMOUIqUrSzzeFh
gNTJGCRbV+Q41aQzVWtDGvos8hUjhRg0kZJgC/QeUa0/PGTC5w0K9z97U5YALOKy
wC8cl8g1rZjOTrgGFLCrEGEjpOxuIDu3PQmKt0t67srA
-----END CERTIFICATE-----
Generated at Mon Mar 2 17:00:18 2026 by rpki-client