Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qCP98_0BVJneFqNeLiSIM2xpDxY.roa
File: qCP98_0BVJneFqNeLiSIM2xpDxY.roa (raw, json)
Hash identifier: HzAWg5fI7jsUeEVRjdI6hGwDm2naFzYBgc2bFn4n5xA=
Subject key identifier: A8:23:FD:F3:FD:01:54:99:DE:16:A3:5E:2E:24:88:33:6C:69:0F:16
Certificate issuer: /CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Certificate serial: 01A03DE70E298863562E0EF55DFD1E962731
Authority key identifier: 22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qCP98_0BVJneFqNeLiSIM2xpDxY.roa
Signing time: Wed 26 Aug 2026 11:49:07 +0000
ROA not before: Wed 26 Aug 2026 11:49:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 44547
IP address blocks: 87.121.103.0/24 maxlen: 24
87.121.104.0/24 maxlen: 24
91.92.16.0/24 maxlen: 24
94.156.113.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.mft
rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 14:17:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:3d:e7:0e:29:88:63:56:2e:0e:f5:5d:fd:1e:96:27:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=22c4ac3e3c43d70d05349c815baadd38ad775e9d
Validity
Not Before: Aug 26 11:49:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a823fdf3fd015499de16a35e2e2488336c690f16
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:83:eb:c6:0b:30:e6:39:c4:10:81:14:d2:0e:
d7:11:62:8b:de:cf:33:bf:f5:b9:e3:d7:51:39:8c:
3f:59:0c:46:4d:af:db:70:44:1a:3e:38:84:ac:6d:
1e:6d:79:80:fc:0c:0d:65:3e:27:b1:d6:6d:d6:aa:
e6:26:0a:5b:73:b2:d6:c7:cb:8d:78:ca:2f:88:d9:
b0:0a:74:b1:6a:11:a1:10:5c:27:32:d4:1b:ba:a3:
cd:a4:a6:ed:1c:f2:d9:71:a8:0f:1b:40:a3:a5:0a:
b0:dd:77:98:56:ac:d4:6f:35:af:96:1f:0a:63:a5:
e9:5e:ae:63:03:24:9e:52:b7:bd:2b:5f:7a:2e:53:
bf:91:95:fe:5d:3c:9b:13:3a:c9:48:9a:a3:40:db:
8c:4e:2e:3d:e5:76:58:95:4d:ba:1b:d6:5f:e0:79:
80:d0:08:21:fc:96:47:44:e6:20:58:16:52:88:f9:
e8:99:85:06:a1:1b:76:df:e0:36:6a:0d:b8:21:db:
74:9c:5a:ce:a9:22:8a:6c:27:0d:4f:ae:52:1a:4f:
07:63:76:52:e0:aa:8d:fb:d1:8e:b4:ea:bc:38:1f:
30:7b:fd:85:4d:d0:3f:a1:99:a0:b3:15:b0:0f:cf:
53:75:4f:65:17:18:f4:95:94:16:68:ec:ff:e2:77:
cc:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:23:FD:F3:FD:01:54:99:DE:16:A3:5E:2E:24:88:33:6C:69:0F:16
X509v3 Authority Key Identifier:
keyid:22:C4:AC:3E:3C:43:D7:0D:05:34:9C:81:5B:AA:DD:38:AD:77:5E:9D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IsSsPjxD1w0FNJyBW6rdOK13Xp0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/qCP98_0BVJneFqNeLiSIM2xpDxY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/03/913a3a-f550-46f0-acc7-cd3ca5975712/1/IsSsPjxD1w0FNJyBW6rdOK13Xp0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.121.103.0-87.121.104.255
91.92.16.0/24
94.156.113.0/24
Signature Algorithm: sha256WithRSAEncryption
96:cd:b2:f7:d7:25:ae:b3:fb:d4:83:f7:f2:2f:5c:42:c2:56:
08:74:7d:4f:97:0f:18:6e:2b:21:35:17:96:4f:d4:a2:f9:68:
0e:ef:64:aa:9d:0a:8f:ef:db:7d:66:08:70:2b:6f:fc:41:0b:
43:5b:8e:96:d0:50:9c:82:25:1b:a3:8c:a0:f3:95:b1:e0:59:
63:75:aa:8d:1c:be:73:14:05:39:6f:58:8e:8d:fc:20:d5:c3:
ea:73:3f:e5:68:72:b3:b6:ee:12:41:57:b8:dd:1e:58:de:35:
73:5e:df:22:99:af:10:ac:60:7b:8f:1f:dd:97:ca:ce:f0:08:
1b:67:54:c8:9f:8b:00:6f:b6:87:9b:8f:36:6f:05:4f:51:4a:
7e:5c:f1:f3:1b:81:bf:d5:4f:7d:5d:99:d6:60:b0:05:ba:a9:
73:d0:49:92:eb:4e:3e:9b:54:fc:06:70:12:e5:e1:10:92:b8:
91:13:3a:42:b8:f6:b3:e2:59:aa:a1:2d:44:2c:76:c3:f4:da:
b1:82:f6:83:6a:7b:bd:09:b7:3a:8c:dc:1a:7a:f5:f0:1f:a8:
2d:49:ba:a7:bc:68:20:8a:d3:fb:29:f7:ce:7b:3b:ae:6d:f2:
24:21:e5:59:90:7e:4e:35:8a:9e:c9:f8:33:47:8a:29:bb:d5:
4e:ba:da:f5
-----BEGIN CERTIFICATE-----
MIIFETCCA/mgAwIBAgISAaA95w4piGNWLg71Xf0elicxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIyYzRhYzNlM2M0M2Q3MGQwNTM0OWM4MTViYWFkZDM4YWQ3
NzVlOWQwHhcNMjYwODI2MTE0OTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODIzZmRmM2ZkMDE1NDk5ZGUxNmEzNWUyZTI0ODgzMzZjNjkwZjE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYPrxgsw5jnEEIEU0g7XEWKL3s8z
v/W549dROYw/WQxGTa/bcEQaPjiErG0ebXmA/AwNZT4nsdZt1qrmJgpbc7LWx8uN
eMoviNmwCnSxahGhEFwnMtQbuqPNpKbtHPLZcagPG0CjpQqw3XeYVqzUbzWvlh8K
Y6XpXq5jAySeUre9K196LlO/kZX+XTybEzrJSJqjQNuMTi495XZYlU26G9Zf4HmA
0Agh/JZHROYgWBZSiPnomYUGoRt23+A2ag24Idt0nFrOqSKKbCcNT65SGk8HY3ZS
4KqN+9GOtOq8OB8we/2FTdA/oZmgsxWwD89TdU9lFxj0lZQWaOz/4nfMfwIDAQAB
o4ICHTCCAhkwHQYDVR0OBBYEFKgj/fP9AVSZ3hajXi4kiDNsaQ8WMB8GA1UdIwQY
MBaAFCLErD48Q9cNBTScgVuq3Titd16dMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzct
Y2QzY2E1OTc1NzEyLzEvcUNQOThfMEJWSm5lRnFOZUxpU0lNMnhwRHhZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMy85MTNhM2EtZjU1MC00NmYwLWFjYzctY2QzY2E1OTc1NzEy
LzEvSXNTc1BqeEQxdzBGTkp5Qlc2cmRPSzEzWHAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDMGCCsGAQUFBwEHAQH/BCQwIjAgBAIAATAaMAwDBABXeWcD
BABXeWgDBABbXBADBABenHEwDQYJKoZIhvcNAQELBQADggEBAJbNsvfXJa6z+9SD
9/IvXELCVgh0fU+XDxhuKyE1F5ZP1KL5aA7vZKqdCo/v231mCHArb/xBC0NbjpbQ
UJyCJRujjKDzlbHgWWN1qo0cvnMUBTlvWI6N/CDVw+pzP+VocrO27hJBV7jdHlje
NXNe3yKZrxCsYHuPH92Xys7wCBtnVMifiwBvtoebjzZvBU9RSn5c8fMbgb/VT31d
mdZgsAW6qXPQSZLrTj6bVPwGcBLl4RCSuJETOkK49rPiWaqhLUQsdsP02rGC9oNq
e70JtzqM3Bp69fAfqC1Juqe8aCCK0/sp9857O65t8iQh5VmQfk41ip7J+DNHiim7
1U662vU=
-----END CERTIFICATE-----
Generated at Wed Aug 26 23:10:14 2026 by rpki-client