Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/qAjo8mLZ3rYz_2SXK-qI4TMpe34.roa
File: qAjo8mLZ3rYz_2SXK-qI4TMpe34.roa (raw, json)
Hash identifier: oi66aoEjMzmqwegaEM3aSTTOTAnD9IyZCaAtgddggOA=
Subject key identifier: A8:08:E8:F2:62:D9:DE:B6:33:FF:64:97:2B:EA:88:E1:33:29:7B:7E
Certificate issuer: /CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Certificate serial: 01A1265CC2FBF55DB0751C123B95E4E64010
Authority key identifier: D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/qAjo8mLZ3rYz_2SXK-qI4TMpe34.roa
Signing time: Sat 10 Oct 2026 15:09:35 +0000
ROA not before: Sat 10 Oct 2026 15:09:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 399955
IP address blocks: 194.38.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 03:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:26:5c:c2:fb:f5:5d:b0:75:1c:12:3b:95:e4:e6:40:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d08da9cf00d4d58b854ffc62010f235b06df354a
Validity
Not Before: Oct 10 15:09:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a808e8f262d9deb633ff64972bea88e133297b7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a8:93:25:6a:52:f2:f0:13:84:76:c8:3d:bf:
e0:29:1d:18:6a:31:4e:31:bd:ca:18:dd:4d:66:5e:
4e:82:7c:4f:a4:f3:9a:6d:cc:67:21:56:bf:b5:e4:
68:9a:9f:4a:6d:1c:a0:47:66:5c:41:34:7c:f5:b6:
6c:ff:df:a8:f1:28:cc:06:33:d0:a0:ce:b7:68:ee:
09:41:9e:31:46:a5:dd:91:e2:77:4d:db:ff:13:10:
3c:4b:7c:0a:44:20:7f:de:49:92:a7:41:fc:d6:b4:
ee:ad:68:fb:da:6c:00:28:7b:83:89:e4:ff:d1:df:
d1:b2:2e:45:da:86:47:0e:0c:14:3b:72:ff:b0:d4:
f8:7d:d4:5f:6e:c2:c6:1e:71:fa:3b:ec:db:6a:f8:
ab:89:59:81:a0:82:ee:c2:c5:2e:df:1e:ad:52:28:
ef:6c:ee:de:39:01:6b:14:49:43:98:c0:02:67:cc:
23:15:40:e3:15:bc:cb:79:80:cb:db:0d:1d:8b:63:
e6:15:62:1a:a6:ad:ad:6d:4a:42:b9:f0:15:da:e7:
98:1d:85:ad:3f:47:4c:fa:13:9a:35:93:13:4a:0c:
2a:3a:f9:50:a4:c0:8f:8c:c6:46:22:73:a3:57:80:
16:11:cf:a1:1f:cc:98:ca:8b:7c:f7:f0:a4:e5:c1:
23:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:08:E8:F2:62:D9:DE:B6:33:FF:64:97:2B:EA:88:E1:33:29:7B:7E
X509v3 Authority Key Identifier:
keyid:D0:8D:A9:CF:00:D4:D5:8B:85:4F:FC:62:01:0F:23:5B:06:DF:35:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/qAjo8mLZ3rYz_2SXK-qI4TMpe34.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/febef8-a0ea-4c7e-8806-20e19780cb2e/1/0I2pzwDU1YuFT_xiAQ8jWwbfNUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
194.38.50.0/24
Signature Algorithm: sha256WithRSAEncryption
42:5e:ae:73:2d:4b:85:35:16:10:5c:a6:56:04:97:ab:42:b1:
81:99:f8:d3:be:15:c5:95:d7:a7:df:bc:b0:6f:49:74:cd:49:
a6:75:7f:e9:c4:44:b4:89:df:70:fe:6a:ad:54:67:2c:62:85:
e6:03:fa:90:85:09:b8:73:a8:a2:11:0f:eb:78:b9:cf:11:90:
d5:3f:91:f2:15:29:6c:d8:26:3c:b0:7b:1a:65:f1:f9:90:48:
10:1c:55:b6:ed:05:01:2b:55:b7:9c:0e:80:29:c5:dd:05:6a:
54:2a:30:68:d7:08:51:c4:23:97:8d:ff:bb:ea:4e:09:74:82:
f1:75:08:2e:2c:27:de:15:3a:25:c2:e7:42:40:48:f2:c4:4c:
38:e7:1e:c4:43:e1:c5:55:e1:51:ce:c4:26:e2:3b:66:42:4f:
4a:d6:1d:6d:21:73:cc:2e:47:e4:74:52:c4:0e:9e:ac:66:03:
a9:60:13:e4:c3:56:29:23:8b:05:bd:4e:99:9a:72:17:30:58:
b7:96:8c:6f:96:d9:d6:c3:cc:06:21:8e:ce:ee:83:40:3a:72:
7a:16:4c:73:9e:45:2c:f1:aa:55:39:4c:16:20:10:25:12:b5:
15:9d:01:ce:11:0f:1b:df:f3:97:d5:06:e5:57:9d:cf:f2:8c:
0d:16:e7:ed
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaEmXML79V2wdRwSO5Xk5kAQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwOGRhOWNmMDBkNGQ1OGI4NTRmZmM2MjAxMGYyMzViMDZk
ZjM1NGEwHhcNMjYxMDEwMTUwOTM1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODA4ZThmMjYyZDlkZWI2MzNmZjY0OTcyYmVhODhlMTMzMjk3YjdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6iTJWpS8vAThHbIPb/gKR0YajFO
Mb3KGN1NZl5OgnxPpPOabcxnIVa/teRomp9KbRygR2ZcQTR89bZs/9+o8SjMBjPQ
oM63aO4JQZ4xRqXdkeJ3Tdv/ExA8S3wKRCB/3kmSp0H81rTurWj72mwAKHuDieT/
0d/Rsi5F2oZHDgwUO3L/sNT4fdRfbsLGHnH6O+zbaviriVmBoILuwsUu3x6tUijv
bO7eOQFrFElDmMACZ8wjFUDjFbzLeYDL2w0di2PmFWIapq2tbUpCufAV2ueYHYWt
P0dM+hOaNZMTSgwqOvlQpMCPjMZGInOjV4AWEc+hH8yYyot89/Ck5cEj3QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKgI6PJi2d62M/9klyvqiOEzKXt+MB8GA1UdIwQY
MBaAFNCNqc8A1NWLhU/8YgEPI1sG3zVKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYt
MjBlMTk3ODBjYjJlLzEvcUFqbzhtTFozcll6XzJTWEstcUk0VE1wZTM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZWJlZjgtYTBlYS00YzdlLTg4MDYtMjBlMTk3ODBjYjJl
LzEvMEkycHp3RFUxWXVGVF94aUFROGpXd2JmTlVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAwiYyMA0G
CSqGSIb3DQEBCwUAA4IBAQBCXq5zLUuFNRYQXKZWBJerQrGBmfjTvhXFlden37yw
b0l0zUmmdX/pxES0id9w/mqtVGcsYoXmA/qQhQm4c6iiEQ/reLnPEZDVP5HyFSls
2CY8sHsaZfH5kEgQHFW27QUBK1W3nA6AKcXdBWpUKjBo1whRxCOXjf+76k4JdILx
dQguLCfeFTolwudCQEjyxEw45x7EQ+HFVeFRzsQm4jtmQk9K1h1tIXPMLkfkdFLE
Dp6sZgOpYBPkw1YpI4sFvU6ZmnIXMFi3loxvltnWw8wGIY7O7oNAOnJ6FkxznkUs
8apVOUwWIBAlErUVnQHOEQ8b3/OX1QblV53P8owNFuft
-----END CERTIFICATE-----
Generated at Sat Oct 24 10:09:44 2026 by rpki-client