Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/H-sJquMx0B9zaiEd2E3ZAwhMIY0.roa
File: H-sJquMx0B9zaiEd2E3ZAwhMIY0.roa (raw, json)
Hash identifier: Qz5OBe4elYp8/kALuORw31r1oAByBlhUSN3w2LlmMFc=
Subject key identifier: 1F:EB:09:AA:E3:31:D0:1F:73:6A:21:1D:D8:4D:D9:03:08:4C:21:8D
Certificate issuer: /CN=43015654082578c4946cd27be1e89a3dd7562fa4
Certificate serial: 019FA1F3C1DB06AEA425D20120533F80F236
Authority key identifier: 43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/H-sJquMx0B9zaiEd2E3ZAwhMIY0.roa
Signing time: Mon 27 Jul 2026 05:02:14 +0000
ROA not before: Mon 27 Jul 2026 05:02:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219160
IP address blocks: 83.98.199.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 27 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a1:f3:c1:db:06:ae:a4:25:d2:01:20:53:3f:80:f2:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=43015654082578c4946cd27be1e89a3dd7562fa4
Validity
Not Before: Jul 27 05:02:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=1feb09aae331d01f736a211dd84dd903084c218d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:7f:6d:75:6d:56:8a:7d:27:a5:3e:0d:37:7f:
84:14:ba:42:0b:11:63:36:23:0d:87:df:43:4c:66:
5e:a0:c9:dd:d5:1f:ea:72:d3:a8:74:94:8e:24:42:
e7:d6:54:51:b9:6b:34:cf:93:4c:cd:4e:0b:80:dc:
44:f6:e6:d5:30:77:3e:08:15:c9:38:62:3e:d7:f5:
89:1d:e3:7b:8d:98:1a:aa:fa:51:56:66:a9:5f:c3:
03:c3:79:e3:06:e0:bf:62:e0:b1:bf:70:97:6b:d3:
3e:00:ee:72:7a:8a:17:31:e1:1a:a7:21:10:33:d7:
4b:fb:ad:c7:1e:c0:24:0f:d4:73:8f:ee:9c:0a:3e:
89:27:56:d6:62:64:1a:00:ec:b1:f8:6d:08:dc:e0:
4b:53:04:bd:3b:9a:ab:61:45:58:03:3e:a7:d8:88:
57:40:dc:99:71:f0:a8:2a:6b:fd:b6:89:8d:1c:92:
14:8e:1b:af:64:fd:2a:fa:bf:92:57:fc:d0:ce:45:
68:30:97:5a:d0:fd:fd:b1:a7:68:24:74:b9:4d:b6:
92:20:16:43:95:df:ff:5c:56:f4:82:35:21:a8:db:
59:a8:ee:9b:bb:0a:be:be:b7:96:ed:b5:c2:e9:55:
80:d0:3f:48:d2:d2:56:4e:45:d0:ff:d1:4c:a8:90:
64:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:EB:09:AA:E3:31:D0:1F:73:6A:21:1D:D8:4D:D9:03:08:4C:21:8D
X509v3 Authority Key Identifier:
keyid:43:01:56:54:08:25:78:C4:94:6C:D2:7B:E1:E8:9A:3D:D7:56:2F:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QwFWVAgleMSUbNJ74eiaPddWL6Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/H-sJquMx0B9zaiEd2E3ZAwhMIY0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/c27fa6-b2b0-4dcb-a899-1030cdbe6bd4/1/QwFWVAgleMSUbNJ74eiaPddWL6Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.98.199.0/24
Signature Algorithm: sha256WithRSAEncryption
36:af:3d:c6:91:a3:34:b4:d8:1a:4f:c4:85:e9:42:db:f5:98:
fa:bc:b8:78:e9:fc:8c:41:72:cf:1a:38:8b:d7:58:27:ea:0f:
d2:6f:b2:fd:a6:49:ba:00:33:55:d0:17:a3:73:74:ab:fe:f4:
36:5b:5d:5d:17:d3:39:03:99:78:22:36:58:d4:8a:f3:95:85:
b9:f9:ca:44:6c:81:45:40:d5:a8:d9:93:88:4a:dd:b7:22:d3:
07:8d:91:aa:34:6d:79:30:84:f8:2a:15:51:a7:4a:0b:c3:02:
9a:6c:b7:13:d4:90:4e:3b:76:da:6c:80:49:c0:be:f8:5a:9e:
23:b2:f1:80:89:f6:2d:5a:45:38:f6:94:2b:a7:fd:8a:82:b9:
23:e9:1a:6f:55:ab:54:bb:6b:6f:a2:66:5b:99:0b:28:0c:2c:
d2:ee:fa:3d:57:42:41:19:99:d7:3a:f3:31:43:65:f9:18:44:
cb:b6:8a:aa:c9:e3:49:68:3a:6b:10:3e:14:35:b1:43:17:7d:
70:27:46:6b:33:83:4f:38:af:2f:3c:06:8f:df:00:5a:6b:fd:
2d:53:b8:14:f2:65:c7:47:68:8f:3f:75:d4:d7:c9:14:d6:d0:
c0:73:2a:25:d8:89:c4:d5:48:92:39:94:e6:25:5e:17:08:c1:
7b:3f:72:b9
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ+h88HbBq6kJdIBIFM/gPI2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQzMDE1NjU0MDgyNTc4YzQ5NDZjZDI3YmUxZTg5YTNkZDc1
NjJmYTQwHhcNMjYwNzI3MDUwMjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygxZmViMDlhYWUzMzFkMDFmNzM2YTIxMWRkODRkZDkwMzA4NGMyMThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs39tdW1Win0npT4NN3+EFLpCCxFj
NiMNh99DTGZeoMnd1R/qctOodJSOJELn1lRRuWs0z5NMzU4LgNxE9ubVMHc+CBXJ
OGI+1/WJHeN7jZgaqvpRVmapX8MDw3njBuC/YuCxv3CXa9M+AO5yeooXMeEapyEQ
M9dL+63HHsAkD9Rzj+6cCj6JJ1bWYmQaAOyx+G0I3OBLUwS9O5qrYUVYAz6n2IhX
QNyZcfCoKmv9tomNHJIUjhuvZP0q+r+SV/zQzkVoMJda0P39sadoJHS5TbaSIBZD
ld//XFb0gjUhqNtZqO6buwq+vreW7bXC6VWA0D9I0tJWTkXQ/9FMqJBkZwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFB/rCarjMdAfc2ohHdhN2QMITCGNMB8GA1UdIwQY
MBaAFEMBVlQIJXjElGzSe+Homj3XVi+kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTkt
MTAzMGNkYmU2YmQ0LzEvSC1zSnF1TXgwQjl6YWlFZDJFM1pBd2hNSVkwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jMjdmYTYtYjJiMC00ZGNiLWE4OTktMTAzMGNkYmU2YmQ0
LzEvUXdGV1ZBZ2xlTVNVYk5KNzRlaWFQZGRXTDZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAU2LHMA0G
CSqGSIb3DQEBCwUAA4IBAQA2rz3GkaM0tNgaT8SF6ULb9Zj6vLh46fyMQXLPGjiL
11gn6g/Sb7L9pkm6ADNV0Bejc3Sr/vQ2W11dF9M5A5l4IjZY1IrzlYW5+cpEbIFF
QNWo2ZOISt23ItMHjZGqNG15MIT4KhVRp0oLwwKabLcT1JBOO3babIBJwL74Wp4j
svGAifYtWkU49pQrp/2Kgrkj6RpvVatUu2tvomZbmQsoDCzS7vo9V0JBGZnXOvMx
Q2X5GETLtoqqyeNJaDprED4UNbFDF31wJ0ZrM4NPOK8vPAaP3wBaa/0tU7gU8mXH
R2iPP3XU18kU1tDAcyol2InE1UiSOZTmJV4XCMF7P3K5
-----END CERTIFICATE-----
Generated at Mon Jul 27 07:49:44 2026 by rpki-client