Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/qqIiv0vmA3mD_T9_7m13a3uGh3w.roa
File: qqIiv0vmA3mD_T9_7m13a3uGh3w.roa (raw, json)
Hash identifier: w+visxNYWOuZ3FpWdskbff9cjtnx8Wyx0yKfOkBcrnc=
Subject key identifier: AA:A2:22:BF:4B:E6:03:79:83:FD:3F:7F:EE:6D:77:6B:7B:86:87:7C
Certificate issuer: /CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Certificate serial: 01A039822F6E4A47D201C843A19374179F2E
Authority key identifier: 0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/qqIiv0vmA3mD_T9_7m13a3uGh3w.roa
Signing time: Tue 25 Aug 2026 15:20:28 +0000
ROA not before: Tue 25 Aug 2026 15:20:28 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 77.241.72.0/24 maxlen: 24
77.241.73.0/24 maxlen: 24
77.241.74.0/24 maxlen: 24
77.241.75.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 27 Aug 2026 20:12:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:39:82:2f:6e:4a:47:d2:01:c8:43:a1:93:74:17:9f:2e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bc996581fb55eddfb8abfb87662972bfaffffb6
Validity
Not Before: Aug 25 15:20:28 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aaa222bf4be6037983fd3f7fee6d776b7b86877c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:9f:a0:7a:a3:50:0b:8e:0b:dd:11:95:a5:a6:
ce:db:3e:be:e3:23:00:34:18:89:aa:fe:f8:a9:26:
b1:77:39:d4:1c:0e:ae:ef:e3:53:c0:30:a5:89:da:
76:67:66:26:49:66:47:ce:55:bf:d7:01:b0:2c:8a:
e2:fd:2e:1d:bb:75:be:2b:b1:1d:30:68:20:71:a9:
e8:3e:37:73:39:6e:50:ad:0e:1d:96:0a:59:75:eb:
93:3c:dd:b1:15:26:2b:f1:a3:6c:21:7d:75:ac:9c:
2d:44:c2:a8:0a:52:f9:58:07:fc:13:ca:8c:3a:4b:
b3:3e:10:e3:f5:67:d8:80:39:97:7f:6b:e0:fd:12:
5b:ca:e2:86:73:c9:62:b1:06:4c:f7:81:3e:f9:e2:
9a:30:8e:36:af:e6:39:76:5e:83:8e:0d:92:c7:1e:
90:b0:5c:ed:a7:f8:d8:b8:2c:75:eb:83:d2:cc:89:
c5:8e:41:03:8a:22:fb:52:67:d9:a9:7d:9d:33:a0:
bd:0c:6c:ff:21:99:2a:f3:92:0b:e2:48:36:54:47:
bc:66:02:a6:5d:bf:98:e2:9b:4f:80:d1:07:37:e5:
7a:74:02:1b:80:2e:22:64:87:0d:9e:76:68:38:e2:
70:83:c8:bd:97:3b:03:be:72:b6:42:3c:bb:41:dd:
16:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A2:22:BF:4B:E6:03:79:83:FD:3F:7F:EE:6D:77:6B:7B:86:87:7C
X509v3 Authority Key Identifier:
keyid:0B:C9:96:58:1F:B5:5E:DD:FB:8A:BF:B8:76:62:97:2B:FA:FF:FF:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C8mWWB-1Xt37ir-4dmKXK_r__7Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/qqIiv0vmA3mD_T9_7m13a3uGh3w.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/3ea922-3504-461e-97d3-539131514add/1/C8mWWB-1Xt37ir-4dmKXK_r__7Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.241.72.0/22
Signature Algorithm: sha256WithRSAEncryption
3e:97:73:18:02:2e:6a:16:12:3f:2a:10:3b:cf:16:90:94:65:
92:a9:1e:ef:4f:bf:f2:6e:c9:6c:33:2d:f5:a8:65:85:77:f1:
f1:de:f1:be:0f:39:29:e9:a2:2e:ed:79:de:b4:e3:c7:c6:61:
ea:4d:e3:58:5d:67:23:1c:56:a0:28:05:5a:53:b0:42:60:fd:
7f:2c:da:84:e8:8a:9e:c2:37:9a:a8:0d:44:b5:39:49:eb:10:
e0:81:d9:db:4c:5e:22:a5:05:4e:24:5c:c3:df:0c:d5:fc:26:
50:74:f8:9b:bc:bd:df:b4:4a:ae:b7:9b:e8:5c:82:52:cf:5a:
63:a7:36:f4:6d:e8:85:56:7f:50:db:41:2a:b2:72:7f:d2:cf:
5b:b5:b0:f3:14:20:9b:66:7b:c0:a8:7f:7f:dc:fd:c8:29:08:
45:65:9b:dd:c0:d3:32:67:b2:6e:4b:4d:ba:ac:e8:aa:d7:6b:
8e:c7:dd:1c:25:9b:7e:29:5c:29:92:b9:a2:42:b1:84:c2:59:
3a:ea:9a:9f:e6:52:18:fd:39:f0:2e:3a:66:65:e9:42:53:b4:
2e:79:a4:80:e7:ef:76:cd:e3:eb:f9:53:6d:e4:5c:3c:52:31:
19:27:85:1e:99:7b:7b:42:5a:d5:26:15:66:a9:d5:c7:7a:45:
f9:64:d9:f4
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaA5gi9uSkfSAchDoZN0F58uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYzk5NjU4MWZiNTVlZGRmYjhhYmZiODc2NjI5NzJiZmFm
ZmZmYjYwHhcNMjYwODI1MTUyMDI4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWEyMjJiZjRiZTYwMzc5ODNmZDNmN2ZlZTZkNzc2YjdiODY4NzdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvJ+geqNQC44L3RGVpabO2z6+4yMA
NBiJqv74qSaxdznUHA6u7+NTwDClidp2Z2YmSWZHzlW/1wGwLIri/S4du3W+K7Ed
MGggcanoPjdzOW5QrQ4dlgpZdeuTPN2xFSYr8aNsIX11rJwtRMKoClL5WAf8E8qM
OkuzPhDj9WfYgDmXf2vg/RJbyuKGc8lisQZM94E++eKaMI42r+Y5dl6Djg2Sxx6Q
sFztp/jYuCx164PSzInFjkEDiiL7UmfZqX2dM6C9DGz/IZkq85IL4kg2VEe8ZgKm
Xb+Y4ptPgNEHN+V6dAIbgC4iZIcNnnZoOOJwg8i9lzsDvnK2Qjy7Qd0WoQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKqiIr9L5gN5g/0/f+5td2t7hod8MB8GA1UdIwQY
MBaAFAvJllgftV7d+4q/uHZilyv6//+2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMt
NTM5MTMxNTE0YWRkLzEvcXFJaXYwdm1BM21EX1Q5XzdtMTNhM3VHaDN3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zZWE5MjItMzUwNC00NjFlLTk3ZDMtNTM5MTMxNTE0YWRk
LzEvQzhtV1dCLTFYdDM3aXItNGRtS1hLX3JfXzdZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCTfFIMA0G
CSqGSIb3DQEBCwUAA4IBAQA+l3MYAi5qFhI/KhA7zxaQlGWSqR7vT7/ybslsMy31
qGWFd/Hx3vG+Dzkp6aIu7XnetOPHxmHqTeNYXWcjHFagKAVaU7BCYP1/LNqE6Iqe
wjeaqA1EtTlJ6xDggdnbTF4ipQVOJFzD3wzV/CZQdPibvL3ftEqut5voXIJSz1pj
pzb0beiFVn9Q20EqsnJ/0s9btbDzFCCbZnvAqH9/3P3IKQhFZZvdwNMyZ7JuS026
rOiq12uOx90cJZt+KVwpkrmiQrGEwlk66pqf5lIY/TnwLjpmZelCU7QueaSA5+92
zePr+VNt5Fw8UjEZJ4UemXt7QlrVJhVmqdXHekX5ZNn0
-----END CERTIFICATE-----
Generated at Thu Aug 27 02:05:09 2026 by rpki-client