Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q4DoZAzgg9vlsCPDoTRZNa2fn2E.roa
File: Q4DoZAzgg9vlsCPDoTRZNa2fn2E.roa (raw, json)
Hash identifier: 0/9emeJE3SdX38SABs26mGK6tCy3o81fwjTynG5WFwo=
Subject key identifier: 43:80:E8:64:0C:E0:83:DB:E5:B0:23:C3:A1:34:59:35:AD:9F:9F:61
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A0E7B0712C0E7DA901A6CC3DA00C686E97
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q4DoZAzgg9vlsCPDoTRZNa2fn2E.roa
Signing time: Mon 28 Sep 2026 11:04:55 +0000
ROA not before: Mon 28 Sep 2026 11:04:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198566
IP address blocks: 81.161.229.0/24 maxlen: 24
83.219.96.0/24 maxlen: 24
87.120.158.0/24 maxlen: 24
87.120.159.0/24 maxlen: 24
87.121.115.0/24 maxlen: 24
87.121.146.0/24 maxlen: 24
87.121.147.0/24 maxlen: 24
87.121.161.0/24 maxlen: 24
87.121.163.0/24 maxlen: 24
91.92.26.0/24 maxlen: 24
93.123.81.0/24 maxlen: 24
93.123.100.0/24 maxlen: 24
185.252.162.0/24 maxlen: 24
185.252.163.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 Oct 2026 09:54:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:e7:b0:71:2c:0e:7d:a9:01:a6:cc:3d:a0:0c:68:6e:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Sep 28 11:04:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4380e8640ce083dbe5b023c3a1345935ad9f9f61
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:4e:a0:dc:fe:23:e4:00:53:c7:69:77:49:62:
d7:ea:84:02:c3:93:98:e6:4a:df:e5:c6:6b:fc:31:
a8:4c:41:43:ad:e7:fb:29:41:ae:e0:34:c3:51:a3:
69:4f:44:cf:c9:18:be:fc:e8:3a:ed:04:39:ac:02:
ce:c4:63:6f:32:6c:10:2a:35:6f:3a:38:c8:a0:f3:
6c:a2:1a:95:37:6f:00:e1:31:2c:5f:07:6d:1e:db:
1a:7b:20:4b:81:c5:f6:2b:8b:46:06:b0:2a:59:50:
70:bf:b3:df:b2:f6:b2:a7:f5:34:48:5b:fb:ce:12:
85:73:4c:73:c2:94:61:95:cc:41:06:f5:83:5b:2a:
52:15:12:b9:e6:ab:6d:9b:95:94:f1:9c:fa:16:eb:
d5:27:57:84:51:bd:15:54:de:3d:ae:e0:bb:8d:32:
cc:37:9d:23:4a:4e:1e:53:d8:bc:f1:7e:3d:69:ab:
48:ee:ef:f1:ed:97:f4:92:c1:7d:2a:aa:c8:53:44:
d2:ac:70:95:ff:1e:95:5f:28:99:4c:50:b9:a3:08:
46:d2:ed:62:0d:10:40:9a:9a:37:88:1d:2a:80:6e:
c1:fe:9a:b1:5e:cf:cb:4c:8b:18:93:36:7f:7c:e0:
ba:0e:43:d8:d8:99:f3:88:d6:e3:f2:21:66:17:ff:
a8:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:80:E8:64:0C:E0:83:DB:E5:B0:23:C3:A1:34:59:35:AD:9F:9F:61
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/Q4DoZAzgg9vlsCPDoTRZNa2fn2E.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
81.161.229.0/24
83.219.96.0/24
87.120.158.0/23
87.121.115.0/24
87.121.146.0/23
87.121.161.0/24
87.121.163.0/24
91.92.26.0/24
93.123.81.0/24
93.123.100.0/24
185.252.162.0/23
Signature Algorithm: sha256WithRSAEncryption
32:e9:e5:b6:4d:ed:6f:eb:ca:8a:c8:0d:8e:48:e1:46:bd:8b:
88:cd:cd:29:e2:59:ee:0a:ac:ee:7a:17:07:6f:3a:1f:dd:40:
50:77:39:29:f6:2f:3e:da:c0:8d:0e:85:ea:2e:cb:90:61:9e:
90:7e:3b:dc:6d:17:34:45:f2:58:f2:41:a0:99:e5:75:f3:39:
a3:fc:20:f8:b2:4a:77:a0:16:c5:4e:ef:b6:e5:f9:3a:17:bb:
1c:46:4d:ae:22:ff:79:ca:b4:72:26:78:d3:1a:1d:a6:22:50:
db:1e:98:15:87:fd:85:6b:5a:c9:9d:3c:7a:07:8e:33:e5:86:
5e:c0:3e:d5:39:3d:14:87:47:6b:ba:cc:c7:7b:19:78:e0:75:
5a:31:5f:14:2c:11:f2:19:4e:e5:39:85:03:4a:9e:5e:9a:49:
14:6e:26:a0:2f:6d:7c:80:15:46:38:06:bf:f8:7e:70:1b:46:
4f:17:f2:be:54:70:27:d4:e7:f5:c4:1a:b8:2e:1d:76:a5:79:
e1:5d:c8:15:98:b0:d3:37:f5:78:7f:02:71:38:c2:51:c8:62:
e9:cc:ed:9f:6b:77:1b:39:1e:e5:87:7e:07:74:e2:91:31:6b:
4f:65:11:35:ee:bc:2e:e3:8a:cc:7c:c8:8b:3d:79:ef:41:1b:
6b:33:42:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Oct 1 19:39:29 2026 by rpki-client