Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1QEBbzj5FcUYqG4YcA06mrJ25g4.roa
File: 1QEBbzj5FcUYqG4YcA06mrJ25g4.roa (raw, json)
Hash identifier: V3RFnBcT7k/S87deLVYKbZE5NIRg/BuVC4s2FZV+oa0=
Subject key identifier: D5:01:01:6F:38:F9:15:C5:18:A8:6E:18:70:0D:3A:9A:B2:76:E6:0E
Certificate issuer: /CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Certificate serial: 01A124BC30AE43DF45F4859756AC6411648E
Authority key identifier: 36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1QEBbzj5FcUYqG4YcA06mrJ25g4.roa
Signing time: Sat 10 Oct 2026 07:34:35 +0000
ROA not before: Sat 10 Oct 2026 07:34:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 19318
IP address blocks: 45.83.31.0/24 maxlen: 24
185.241.211.0/24 maxlen: 24
192.159.99.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 19:00:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:24:bc:30:ae:43:df:45:f4:85:97:56:ac:64:11:64:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=36c2a4b7d5d73c5b57046223bf30eb653005b0e2
Validity
Not Before: Oct 10 07:34:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d501016f38f915c518a86e18700d3a9ab276e60e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:83:ee:8a:ac:d1:68:eb:5b:9d:a0:c6:b6:a0:
ab:01:fc:76:00:15:b9:6b:37:70:6c:17:74:56:1d:
b5:7a:61:94:84:22:84:62:33:dc:cb:09:11:e6:46:
c6:31:75:27:d4:2c:8f:0a:d4:78:86:1c:4e:df:10:
3d:19:1b:db:cb:c6:a5:71:83:94:24:dd:f4:c1:76:
35:a5:e5:c3:58:94:0e:1c:44:a7:34:c3:c6:ae:31:
99:db:46:a8:a1:2d:52:5d:c1:fe:13:73:a9:c6:dc:
19:0f:8d:f5:71:93:24:da:c8:a4:ca:6d:7f:ac:80:
4c:12:09:7c:c7:1a:82:8e:ae:c1:a6:9e:06:99:87:
55:82:71:ac:ac:75:9d:f1:78:74:f0:bc:d0:f4:e1:
b5:13:dc:04:9f:b7:90:ee:84:f4:2f:0d:64:08:75:
16:88:00:25:45:0b:f7:53:a0:8a:3e:fa:41:6c:2b:
36:ee:6f:b4:65:f7:dc:63:bf:2d:ff:e8:c2:e5:e7:
b2:a7:71:02:6e:94:a6:99:a5:c0:50:bb:2e:ad:66:
78:ab:32:54:9c:68:ce:68:90:93:86:d9:2d:d1:65:
53:cd:ba:5e:28:cc:fa:dd:7c:fc:84:02:82:d1:23:
38:7d:a8:0b:01:2c:62:3e:7d:2f:d9:40:63:20:cf:
d7:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:01:01:6F:38:F9:15:C5:18:A8:6E:18:70:0D:3A:9A:B2:76:E6:0E
X509v3 Authority Key Identifier:
keyid:36:C2:A4:B7:D5:D7:3C:5B:57:04:62:23:BF:30:EB:65:30:05:B0:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/NsKkt9XXPFtXBGIjvzDrZTAFsOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/1QEBbzj5FcUYqG4YcA06mrJ25g4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/8dd85a-bf8f-425e-a24b-2ccedb966a58/1/NsKkt9XXPFtXBGIjvzDrZTAFsOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.31.0/24
185.241.211.0/24
192.159.99.0/24
Signature Algorithm: sha256WithRSAEncryption
3f:bf:7a:7b:64:9a:a2:da:1e:6c:9d:77:4a:e5:e8:c0:65:4b:
f0:a5:5e:8e:29:b7:d2:bc:41:bc:3a:6c:d4:78:ff:78:8e:4f:
52:73:60:d0:21:72:52:e6:8a:be:58:8f:40:15:41:f4:1f:85:
54:82:3f:3e:c9:37:1b:41:3e:f9:b1:56:e1:5a:b7:cd:10:b2:
9f:82:e4:52:65:e4:c0:63:de:9e:0a:86:7b:0d:95:8b:67:d8:
d0:dd:de:75:30:7a:d4:81:71:ed:54:67:7e:e6:66:14:18:fe:
02:2a:ae:ad:97:1f:54:2e:3e:61:4c:2b:88:28:f4:74:dd:67:
16:77:b2:22:fd:67:94:c7:75:d1:50:45:85:e8:89:5f:f1:78:
0c:dc:2d:b2:58:42:b4:39:2a:61:ac:95:2c:27:0c:fd:54:50:
a4:0a:92:99:d5:05:a5:dd:a4:76:a5:79:9f:40:14:b2:e7:6f:
64:50:37:5a:c1:88:48:55:eb:18:c9:a7:9f:a0:d9:17:7c:85:
a0:45:32:d0:5b:2d:dd:0e:62:ad:04:c1:76:fb:e6:45:33:c6:
26:c6:67:5a:b4:cd:57:a0:4c:e7:5d:f2:ba:1d:6b:de:af:e6:
02:97:bd:c9:56:08:af:ad:66:36:6f:15:a2:45:02:64:cc:17:
72:1d:42:11
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaEkvDCuQ99F9IWXVqxkEWSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM2YzJhNGI3ZDVkNzNjNWI1NzA0NjIyM2JmMzBlYjY1MzAw
NWIwZTIwHhcNMjYxMDEwMDczNDM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNTAxMDE2ZjM4ZjkxNWM1MThhODZlMTg3MDBkM2E5YWIyNzZlNjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1IPuiqzRaOtbnaDGtqCrAfx2ABW5
azdwbBd0Vh21emGUhCKEYjPcywkR5kbGMXUn1CyPCtR4hhxO3xA9GRvby8alcYOU
JN30wXY1peXDWJQOHESnNMPGrjGZ20aooS1SXcH+E3OpxtwZD431cZMk2sikym1/
rIBMEgl8xxqCjq7Bpp4GmYdVgnGsrHWd8Xh08LzQ9OG1E9wEn7eQ7oT0Lw1kCHUW
iAAlRQv3U6CKPvpBbCs27m+0ZffcY78t/+jC5eeyp3ECbpSmmaXAULsurWZ4qzJU
nGjOaJCThtkt0WVTzbpeKMz63Xz8hAKC0SM4fagLASxiPn0v2UBjIM/XZQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFNUBAW84+RXFGKhuGHANOpqyduYOMB8GA1UdIwQY
MBaAFDbCpLfV1zxbVwRiI78w62UwBbDiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGIt
MmNjZWRiOTY2YTU4LzEvMVFFQmJ6ajVGY1VZcUc0WWNBMDZtckoyNWc0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy84ZGQ4NWEtYmY4Zi00MjVlLWEyNGItMmNjZWRiOTY2YTU4
LzEvTnNLa3Q5WFhQRnRYQkdJanZ6RHJaVEFGc09JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQALVMfAwQA
ufHTAwQAwJ9jMA0GCSqGSIb3DQEBCwUAA4IBAQA/v3p7ZJqi2h5snXdK5ejAZUvw
pV6OKbfSvEG8OmzUeP94jk9Sc2DQIXJS5oq+WI9AFUH0H4VUgj8+yTcbQT75sVbh
WrfNELKfguRSZeTAY96eCoZ7DZWLZ9jQ3d51MHrUgXHtVGd+5mYUGP4CKq6tlx9U
Lj5hTCuIKPR03WcWd7Ii/WeUx3XRUEWF6Ilf8XgM3C2yWEK0OSphrJUsJwz9VFCk
CpKZ1QWl3aR2pXmfQBSy529kUDdawYhIVesYyaefoNkXfIWgRTLQWy3dDmKtBMF2
++ZFM8YmxmdatM1XoEznXfK6HWver+YCl73JVgivrWY2bxWiRQJkzBdyHUIR
-----END CERTIFICATE-----
Generated at Tue Oct 27 00:17:00 2026 by rpki-client