Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/iqVb3s_zQQBYnOakqhzkFbljRFw.roa
File: iqVb3s_zQQBYnOakqhzkFbljRFw.roa (raw, json)
Hash identifier: oJoztUmRmGqKNAntEF1b1+7D2KwXHeNH+HobO+KlAio=
Subject key identifier: 8A:A5:5B:DE:CF:F3:41:00:58:9C:E6:A4:AA:1C:E4:15:B9:63:44:5C
Certificate issuer: /CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Certificate serial: 019F3E30A8E54EEB805974CA3C55E216917D
Authority key identifier: FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/iqVb3s_zQQBYnOakqhzkFbljRFw.roa
Signing time: Tue 07 Jul 2026 20:06:44 +0000
ROA not before: Tue 07 Jul 2026 20:06:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 9304
IP address blocks: 87.232.97.0/24 maxlen: 24
109.122.10.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.mft
rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 13 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:3e:30:a8:e5:4e:eb:80:59:74:ca:3c:55:e2:16:91:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ffa3e55141c1a1f9f2e28811ed7e77fad378a579
Validity
Not Before: Jul 7 20:06:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8aa55bdecff34100589ce6a4aa1ce415b963445c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:15:fc:af:f3:3c:f2:84:8a:46:ea:08:72:5a:
8f:e2:e6:20:5e:29:af:a6:16:69:8a:46:7c:9d:e7:
07:e0:1f:18:ab:51:1a:6a:b4:85:a7:b3:16:de:40:
41:c3:84:1a:b9:f8:ad:7b:e8:e0:c8:52:37:b4:f3:
2f:0c:b9:3d:01:bd:23:40:ff:47:a0:2c:be:1d:3d:
42:81:24:e9:7f:51:4b:e0:03:80:2b:4d:95:f0:8e:
e2:79:56:2a:95:15:9c:9c:5f:64:ae:97:1a:3c:b0:
58:4c:bd:01:7f:bd:cf:d7:2f:e8:45:07:fc:f8:e4:
5a:49:6f:e1:b6:b2:66:58:32:32:de:15:78:a3:15:
ca:9b:9d:50:2b:fa:4b:65:a7:e5:74:dc:b5:6f:5b:
d7:09:83:94:f7:f1:f8:31:ac:b0:0b:7a:77:f5:d5:
6b:d4:83:bd:80:ba:1a:5c:12:30:75:4e:e6:ff:25:
85:2d:fd:71:02:2f:24:90:2d:5c:ad:ce:69:ce:33:
ce:9f:ee:52:db:72:3e:36:8c:f6:c4:31:4f:6d:52:
20:74:1d:f3:11:b5:52:9d:01:be:bc:48:7e:26:40:
b4:c0:c5:c4:37:23:ce:30:2a:e9:10:8e:88:f6:c3:
b3:dd:12:70:c0:5f:9e:0e:6f:5b:68:fb:26:3e:6d:
18:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:A5:5B:DE:CF:F3:41:00:58:9C:E6:A4:AA:1C:E4:15:B9:63:44:5C
X509v3 Authority Key Identifier:
keyid:FF:A3:E5:51:41:C1:A1:F9:F2:E2:88:11:ED:7E:77:FA:D3:78:A5:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_6PlUUHBofny4ogR7X53-tN4pXk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/iqVb3s_zQQBYnOakqhzkFbljRFw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/b263a2-0f6f-4f5d-af9e-a39ac2539fc5/1/_6PlUUHBofny4ogR7X53-tN4pXk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.232.97.0/24
109.122.10.0/24
Signature Algorithm: sha256WithRSAEncryption
3e:05:fd:6a:a7:29:7a:f5:47:3e:8f:ec:25:94:f7:ec:17:30:
b3:6e:54:09:09:12:27:74:1b:8d:d6:a2:13:0d:cc:fd:8c:e8:
f5:8c:14:7a:98:c9:13:b0:88:5b:af:97:f6:56:09:90:18:66:
7b:42:f5:69:71:9f:b7:89:0d:0b:80:f9:9a:d1:f7:80:98:69:
49:99:8a:61:aa:42:9e:e1:b0:ce:43:3c:e3:42:91:96:b6:8b:
21:b4:ff:a1:5a:ae:d2:d5:63:e8:d9:25:35:41:91:32:bd:7f:
79:88:32:99:82:1a:a6:9d:7e:03:19:23:9a:1b:60:5f:ee:e5:
a3:aa:d9:b0:5c:11:d0:ac:71:57:97:93:b0:0e:df:d1:6e:da:
b5:de:23:ac:5d:69:79:97:24:6a:77:15:e3:5b:4a:5d:a4:a6:
93:59:09:9c:59:30:70:e3:b8:21:93:23:21:86:bb:37:b5:9a:
a6:a3:50:3e:4c:af:d1:87:1e:87:ac:0c:94:65:dd:fa:46:33:
58:3c:2c:11:53:2a:0b:5e:ea:2d:e6:f1:75:a5:4f:c7:28:c7:
6d:27:d9:ce:d2:3e:3d:6b:30:7a:89:30:b1:b3:98:f4:46:c1:
df:c9:d5:68:cc:96:1b:7f:21:4f:25:b7:22:42:d5:c2:a5:ae:
28:8b:ec:9a
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ8+MKjlTuuAWXTKPFXiFpF9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZmYTNlNTUxNDFjMWExZjlmMmUyODgxMWVkN2U3N2ZhZDM3
OGE1NzkwHhcNMjYwNzA3MjAwNjQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YWE1NWJkZWNmZjM0MTAwNTg5Y2U2YTRhYTFjZTQxNWI5NjM0NDVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzxX8r/M88oSKRuoIclqP4uYgXimv
phZpikZ8necH4B8Yq1EaarSFp7MW3kBBw4Qaufite+jgyFI3tPMvDLk9Ab0jQP9H
oCy+HT1CgSTpf1FL4AOAK02V8I7ieVYqlRWcnF9krpcaPLBYTL0Bf73P1y/oRQf8
+ORaSW/htrJmWDIy3hV4oxXKm51QK/pLZafldNy1b1vXCYOU9/H4MaywC3p39dVr
1IO9gLoaXBIwdU7m/yWFLf1xAi8kkC1crc5pzjPOn+5S23I+Noz2xDFPbVIgdB3z
EbVSnQG+vEh+JkC0wMXENyPOMCrpEI6I9sOz3RJwwF+eDm9baPsmPm0YjwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFIqlW97P80EAWJzmpKoc5BW5Y0RcMB8GA1UdIwQY
MBaAFP+j5VFBwaH58uKIEe1+d/rTeKV5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUt
YTM5YWMyNTM5ZmM1LzEvaXFWYjNzX3pRUUJZbk9ha3FoemtGYmxqUkZ3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9iMjYzYTItMGY2Zi00ZjVkLWFmOWUtYTM5YWMyNTM5ZmM1
LzEvXzZQbFVVSEJvZm55NG9nUjdYNTMtdE40cFhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAV+hhAwQA
bXoKMA0GCSqGSIb3DQEBCwUAA4IBAQA+Bf1qpyl69Uc+j+wllPfsFzCzblQJCRIn
dBuN1qITDcz9jOj1jBR6mMkTsIhbr5f2VgmQGGZ7QvVpcZ+3iQ0LgPma0feAmGlJ
mYphqkKe4bDOQzzjQpGWtoshtP+hWq7S1WPo2SU1QZEyvX95iDKZghqmnX4DGSOa
G2Bf7uWjqtmwXBHQrHFXl5OwDt/Rbtq13iOsXWl5lyRqdxXjW0pdpKaTWQmcWTBw
47ghkyMhhrs3tZqmo1A+TK/Rhx6HrAyUZd36RjNYPCwRUyoLXuot5vF1pU/HKMdt
J9nO0j49azB6iTCxs5j0RsHfydVozJYbfyFPJbciQtXCpa4oi+ya
-----END CERTIFICATE-----
Generated at Sun Jul 12 13:22:22 2026 by rpki-client