Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/qWM_b7eqNcpOTwzfE4MgdjSzkOA.roa
File: qWM_b7eqNcpOTwzfE4MgdjSzkOA.roa (raw, json)
Hash identifier: wyyqXvUm05ZHHPtowot5o7qE0UcEvtNzL5CUqUCZR0Y=
Subject key identifier: A9:63:3F:6F:B7:AA:35:CA:4E:4F:0C:DF:13:83:20:76:34:B3:90:E0
Certificate issuer: /CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Certificate serial: 019C9558218E8477DA062B5BD9B0AFE333AF
Authority key identifier: 0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/qWM_b7eqNcpOTwzfE4MgdjSzkOA.roa
Signing time: Wed 25 Feb 2026 15:08:26 +0000
ROA not before: Wed 25 Feb 2026 15:08:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 87.254.2.0/24 maxlen: 24
87.254.4.0/22 maxlen: 24
87.254.10.0/23 maxlen: 24
87.254.11.0/24 maxlen: 24
87.254.12.0/23 maxlen: 24
87.254.14.0/23 maxlen: 24
87.254.18.0/23 maxlen: 24
87.254.20.0/23 maxlen: 24
87.254.22.0/24 maxlen: 24
87.254.24.0/22 maxlen: 24
87.254.28.0/24 maxlen: 24
87.254.29.0/24 maxlen: 24
87.254.30.0/24 maxlen: 24
185.210.168.0/23 maxlen: 24
185.210.170.0/23 maxlen: 23
217.25.0.0/24 maxlen: 24
217.25.3.0/24 maxlen: 24
217.25.5.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 00:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:95:58:21:8e:84:77:da:06:2b:5b:d9:b0:af:e3:33:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ff80cbdfe18354a3cfdba2fe079aa2ebc58dcd4
Validity
Not Before: Feb 25 15:08:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9633f6fb7aa35ca4e4f0cdf1383207634b390e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:79:2f:2a:c6:3c:76:bd:71:0d:35:cd:0c:f8:
a1:5b:84:af:20:7d:55:76:87:8c:09:40:b7:fc:6f:
ec:7d:0b:5e:aa:4f:59:6c:30:83:78:95:ea:aa:70:
06:cd:35:42:3f:ba:5f:a7:5a:49:a5:4b:ef:ae:4e:
3e:b0:75:be:f8:fe:10:19:8f:bc:7b:b0:3d:77:f3:
b9:56:04:56:d8:e9:e8:9e:ad:96:b5:ff:3f:e2:dd:
99:37:02:30:b3:49:9d:3b:1d:a7:eb:19:c8:f8:40:
7e:4d:da:c9:fe:4a:81:9e:c0:d5:8e:7b:13:6b:9c:
fa:db:a1:37:92:a2:a0:77:fb:59:9b:0e:95:3d:20:
75:b1:59:e4:58:87:c5:15:b8:ef:55:88:30:88:10:
83:b0:d4:0e:97:37:31:6b:bb:ac:35:1b:a0:ec:44:
b0:28:66:91:b6:ca:3f:a2:2d:76:26:61:d3:1b:6b:
bc:8a:d5:5c:ba:1c:64:ac:82:f4:4a:29:5a:5a:19:
8b:ef:99:bb:aa:91:c9:1d:b1:9b:7d:68:f8:12:96:
21:b7:d4:7a:ac:ed:54:8e:90:cc:4c:96:cc:ba:c8:
57:26:cb:38:19:1d:2b:43:c1:ab:fe:4c:65:bf:a9:
51:28:51:84:51:84:81:09:1c:21:9e:54:05:69:b8:
6c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:63:3F:6F:B7:AA:35:CA:4E:4F:0C:DF:13:83:20:76:34:B3:90:E0
X509v3 Authority Key Identifier:
keyid:0F:F8:0C:BD:FE:18:35:4A:3C:FD:BA:2F:E0:79:AA:2E:BC:58:DC:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D_gMvf4YNUo8_bov4HmqLrxY3NQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/qWM_b7eqNcpOTwzfE4MgdjSzkOA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e9/129564-f1db-4dc5-8906-6fcdcd5ab660/1/D_gMvf4YNUo8_bov4HmqLrxY3NQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.254.2.0/24
87.254.4.0/22
87.254.10.0-87.254.15.255
87.254.18.0-87.254.22.255
87.254.24.0-87.254.30.255
185.210.168.0/22
217.25.0.0/24
217.25.3.0/24
217.25.5.0/24
Signature Algorithm: sha256WithRSAEncryption
2f:b6:8c:34:c8:7c:b1:2f:50:8a:a2:58:fa:cd:51:9b:1a:40:
ee:13:6a:8f:e3:ac:ba:06:9a:ff:c1:af:58:ad:df:04:1a:ef:
2e:4e:c6:90:cd:48:00:90:b9:39:32:99:3e:27:f9:17:37:84:
75:00:5c:fe:31:8f:ff:06:dd:a6:a4:7e:71:ad:41:b3:2c:8e:
86:e3:68:91:d7:fc:f6:0d:6f:38:c2:e8:bf:ec:87:88:f0:b8:
8a:06:a8:d2:ce:ed:ce:71:f8:81:99:65:22:1b:b0:a6:c9:0b:
f7:18:8f:06:ae:29:5c:e0:39:76:8e:2f:46:78:86:0d:17:b2:
01:36:55:54:f0:db:ef:08:bf:5b:37:c0:5b:56:5c:21:68:c1:
32:e9:86:34:4d:d3:7e:0a:06:65:0b:51:e4:52:76:40:d0:04:
7e:9a:09:b1:18:ff:40:28:fe:39:24:be:2d:11:fd:13:2a:84:
2a:84:64:2d:4f:aa:30:14:4d:44:c8:31:4a:bb:00:ee:a1:8a:
7e:50:fa:6f:99:0d:0f:77:55:7e:8d:0c:cd:b3:59:1a:60:26:
3f:69:f2:cd:75:b8:6e:a1:58:0b:dc:84:0a:22:e5:91:d8:1b:
c1:a8:5f:8f:be:2f:2a:18:27:4f:17:49:9b:2b:f4:cc:ae:2f:
b4:c5:2f:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Mar 2 09:27:55 2026 by rpki-client