Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/qYLIIaAwmYy-3EhY7Kj0s11Oq6A.roa
File: qYLIIaAwmYy-3EhY7Kj0s11Oq6A.roa (raw, json)
Hash identifier: eN9mWsQaDPCzXV93kIGWz2Lg7pEz8NYXp2ErmqJUBxo=
Subject key identifier: A9:82:C8:21:A0:30:99:8C:BE:DC:48:58:EC:A8:F4:B3:5D:4E:AB:A0
Certificate issuer: /CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Certificate serial: 019CAD391CD1090DFFF21B8770E736B04D96
Authority key identifier: 9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/qYLIIaAwmYy-3EhY7Kj0s11Oq6A.roa
Signing time: Mon 02 Mar 2026 06:25:27 +0000
ROA not before: Mon 02 Mar 2026 06:25:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 45.144.215.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 03 Mar 2026 15:05:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ad:39:1c:d1:09:0d:ff:f2:1b:87:70:e7:36:b0:4d:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9d2a478bb0b08e661b0b2f9fbe8935bc9c2a28a1
Validity
Not Before: Mar 2 06:25:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a982c821a030998cbedc4858eca8f4b35d4eaba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:30:96:d2:31:26:b1:30:57:26:d8:19:74:c4:
b0:67:ce:91:36:05:3e:97:f7:4b:2e:53:01:b6:2c:
fc:91:48:3b:43:d3:8a:b9:51:45:e5:6e:aa:2e:48:
aa:67:a9:f1:28:81:84:75:18:ab:e2:75:82:f9:15:
dc:98:31:b0:8f:20:63:cb:75:ee:38:a0:31:7c:0b:
cc:85:b5:b4:43:21:1c:b8:5f:fd:d4:96:61:da:d8:
00:fb:8c:ab:e4:d8:95:ed:92:2f:7e:37:24:ce:64:
93:94:02:52:34:be:c4:e3:16:f0:d9:16:06:6f:c3:
a7:31:55:64:8a:a7:f7:8c:9e:b6:f2:de:d0:e8:20:
c4:4c:99:92:57:c0:7b:1c:b7:ab:a0:99:0c:85:4f:
0d:7f:83:ca:45:54:12:0f:21:79:d8:86:0a:b6:08:
47:7e:47:f5:26:f8:21:fc:0a:7b:15:d3:af:4a:e4:
4e:cb:5c:45:12:be:cd:09:a5:90:1f:ac:36:37:46:
40:da:70:d1:c3:11:aa:ab:ca:ec:9c:cd:da:53:e8:
e2:1e:d8:12:b7:50:df:c9:36:ea:81:11:84:f0:c1:
bc:af:3b:b4:a0:f8:cb:63:d4:02:7c:f3:0a:4a:ab:
02:43:80:f4:19:32:f1:54:48:8d:8a:d5:54:2f:20:
15:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:82:C8:21:A0:30:99:8C:BE:DC:48:58:EC:A8:F4:B3:5D:4E:AB:A0
X509v3 Authority Key Identifier:
keyid:9D:2A:47:8B:B0:B0:8E:66:1B:0B:2F:9F:BE:89:35:BC:9C:2A:28:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/nSpHi7CwjmYbCy-fvok1vJwqKKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/qYLIIaAwmYy-3EhY7Kj0s11Oq6A.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/663df5-580c-4f2c-a66c-eef3511f6c60/1/nSpHi7CwjmYbCy-fvok1vJwqKKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.144.215.0/24
Signature Algorithm: sha256WithRSAEncryption
4e:f4:4c:7c:c3:d1:36:ce:27:54:d0:b4:e0:58:a6:e9:0a:69:
ee:8e:df:62:47:e7:67:dd:c7:d2:d0:e7:7a:8b:ea:64:5a:9d:
a4:f2:12:a1:4c:b8:45:90:38:97:0f:4a:d3:ba:dc:10:e3:83:
ad:22:64:e4:d6:e9:ce:81:03:bb:29:bf:e5:6a:96:56:99:c2:
a2:26:45:30:a6:60:21:6f:05:fe:66:00:6d:5f:19:ed:b9:89:
93:a1:d8:73:61:5b:16:f5:4c:dc:37:dc:51:db:7f:16:47:34:
e8:69:d2:fc:21:14:a6:43:d1:98:22:c7:ba:0a:54:81:31:9d:
7f:f5:03:15:38:29:9d:5f:0c:7a:60:1f:13:ba:df:06:3d:67:
47:35:22:ec:86:ee:b7:72:ad:b4:97:12:05:86:79:01:b7:56:
d2:3c:a0:54:3b:f6:46:31:20:18:02:f8:c4:a0:e9:f3:a2:19:
9a:fd:47:6b:36:79:f9:21:1d:53:32:67:f8:54:3b:82:02:d6:
07:59:d6:db:c7:78:a1:0d:ae:27:6e:dd:22:72:47:d4:46:8e:
cd:9d:f9:16:d4:b9:fb:09:55:4a:24:7f:98:28:39:11:bb:a5:
68:0a:eb:fb:99:6b:a4:5b:d4:7f:54:06:d4:00:de:5d:16:15:
b2:32:47:a4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZytORzRCQ3/8huHcOc2sE2WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlkMmE0NzhiYjBiMDhlNjYxYjBiMmY5ZmJlODkzNWJjOWMy
YTI4YTEwHhcNMjYwMzAyMDYyNTI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTgyYzgyMWEwMzA5OThjYmVkYzQ4NThlY2E4ZjRiMzVkNGVhYmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtjCW0jEmsTBXJtgZdMSwZ86RNgU+
l/dLLlMBtiz8kUg7Q9OKuVFF5W6qLkiqZ6nxKIGEdRir4nWC+RXcmDGwjyBjy3Xu
OKAxfAvMhbW0QyEcuF/91JZh2tgA+4yr5NiV7ZIvfjckzmSTlAJSNL7E4xbw2RYG
b8OnMVVkiqf3jJ628t7Q6CDETJmSV8B7HLeroJkMhU8Nf4PKRVQSDyF52IYKtghH
fkf1Jvgh/Ap7FdOvSuROy1xFEr7NCaWQH6w2N0ZA2nDRwxGqq8rsnM3aU+jiHtgS
t1DfyTbqgRGE8MG8rzu0oPjLY9QCfPMKSqsCQ4D0GTLxVEiNitVULyAVGQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKmCyCGgMJmMvtxIWOyo9LNdTqugMB8GA1UdIwQY
MBaAFJ0qR4uwsI5mGwsvn76JNbycKiihMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMt
ZWVmMzUxMWY2YzYwLzEvcVlMSUlhQXdtWXktM0VoWTdLajBzMTFPcTZBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi82NjNkZjUtNTgwYy00ZjJjLWE2NmMtZWVmMzUxMWY2YzYw
LzEvblNwSGk3Q3dqbVliQ3ktZnZvazF2SndxS0tFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQALZDXMA0G
CSqGSIb3DQEBCwUAA4IBAQBO9Ex8w9E2zidU0LTgWKbpCmnujt9iR+dn3cfS0Od6
i+pkWp2k8hKhTLhFkDiXD0rTutwQ44OtImTk1unOgQO7Kb/lapZWmcKiJkUwpmAh
bwX+ZgBtXxntuYmTodhzYVsW9UzcN9xR238WRzToadL8IRSmQ9GYIse6ClSBMZ1/
9QMVOCmdXwx6YB8Tut8GPWdHNSLshu63cq20lxIFhnkBt1bSPKBUO/ZGMSAYAvjE
oOnzohma/UdrNnn5IR1TMmf4VDuCAtYHWdbbx3ihDa4nbt0ickfURo7NnfkW1Ln7
CVVKJH+YKDkRu6VoCuv7mWukW9R/VAbUAN5dFhWyMkek
-----END CERTIFICATE-----
Generated at Mon Mar 2 21:52:12 2026 by rpki-client