Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/1PQllvXnPg1Cq46Iy4Rpg_2dzeE.roa
File: 1PQllvXnPg1Cq46Iy4Rpg_2dzeE.roa (raw, json)
Hash identifier: KYF3xosyzq4vGix6BtHELmM/f2AEyPg2NuKi997fdec=
Subject key identifier: D4:F4:25:96:F5:E7:3E:0D:42:AB:8E:88:CB:84:69:83:FD:9D:CD:E1
Certificate issuer: /CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Certificate serial: 01A00FEA991B2F5D4E0F273DF032E87CC3F6
Authority key identifier: 6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/1PQllvXnPg1Cq46Iy4Rpg_2dzeE.roa
Signing time: Mon 17 Aug 2026 13:30:27 +0000
ROA not before: Mon 17 Aug 2026 13:30:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 86.110.33.0/24 maxlen: 24
86.110.34.0/24 maxlen: 24
86.110.46.0/24 maxlen: 24
86.110.58.0/24 maxlen: 24
86.110.63.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 21 Aug 2026 20:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:0f:ea:99:1b:2f:5d:4e:0f:27:3d:f0:32:e8:7c:c3:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a0e16cc2a8b91cb483f451e813b678ae97582b0
Validity
Not Before: Aug 17 13:30:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4f42596f5e73e0d42ab8e88cb846983fd9dcde1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:06:47:23:06:38:03:c3:f3:70:82:b8:eb:94:
f2:d7:02:39:61:05:a4:ce:51:6f:55:ae:cc:28:44:
c9:bd:7c:9d:0b:4e:1b:34:ed:b8:b0:98:a6:a2:e3:
f8:72:9a:14:9c:4b:04:cf:4a:66:22:1a:7a:ef:3c:
b0:f8:8d:cc:1b:58:07:d7:47:eb:23:c1:d2:55:17:
e6:c2:95:94:01:bf:f2:fe:a4:a6:1c:90:ca:3d:cb:
8e:3c:7d:e8:15:41:ef:e2:05:80:2c:13:68:89:37:
4f:08:4d:84:d7:4b:97:28:40:a7:74:84:c5:79:8f:
c5:23:89:73:99:05:85:4f:d0:18:ba:c2:02:f1:7d:
1d:83:58:51:94:73:37:ac:7c:a9:1f:f3:26:7b:8f:
1c:85:98:05:7a:22:b2:78:6b:2a:82:b5:3a:34:20:
50:da:b2:ac:b5:d5:3d:0b:8c:20:83:ff:4e:e4:87:
c7:50:b3:92:25:8d:b3:c9:50:b8:ad:02:82:06:43:
3c:ab:e2:da:7c:52:37:7b:82:d5:d4:1a:91:e1:43:
fc:50:9f:01:02:5d:94:c0:d3:02:71:74:6d:70:42:
4f:d7:f1:68:66:61:ff:67:bf:74:75:eb:f6:04:42:
d2:de:4f:41:35:0c:2d:30:eb:f4:52:81:92:9d:bb:
c4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F4:25:96:F5:E7:3E:0D:42:AB:8E:88:CB:84:69:83:FD:9D:CD:E1
X509v3 Authority Key Identifier:
keyid:6A:0E:16:CC:2A:8B:91:CB:48:3F:45:1E:81:3B:67:8A:E9:75:82:B0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ag4WzCqLkctIP0UegTtniul1grA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/1PQllvXnPg1Cq46Iy4Rpg_2dzeE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/e1ad7a-12e7-4fd0-b61e-d1a7772db076/1/ag4WzCqLkctIP0UegTtniul1grA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.110.33.0-86.110.34.255
86.110.46.0/24
86.110.58.0/24
86.110.63.0/24
Signature Algorithm: sha256WithRSAEncryption
8b:27:18:e0:05:5f:3c:7d:f0:5c:6a:a0:e4:06:7d:b1:82:31:
58:ef:48:4f:21:b3:c6:b1:9a:2b:4c:60:b9:04:9d:4f:ad:93:
91:da:01:13:7c:55:67:f9:a8:70:3f:1a:d6:6c:e5:8c:10:8c:
a6:7c:4c:5e:94:70:c3:c3:22:55:b9:b8:ac:1e:db:37:85:da:
ea:ae:f3:82:80:7e:4f:d8:77:ec:bb:78:34:40:3d:28:e0:e6:
b7:de:5d:64:28:e3:e7:a8:26:78:18:1a:f8:e5:91:5d:f4:4a:
83:5a:24:76:9d:20:a0:bf:19:92:09:dd:3b:56:62:07:77:48:
a4:16:9d:ea:d6:82:8d:95:45:7f:f5:9f:2e:39:24:54:9c:cf:
26:ef:ab:52:d5:c3:9a:ad:83:40:c9:06:e4:7d:a8:cf:c6:4a:
ef:4b:93:51:3b:db:3b:54:d3:fb:90:c9:39:3a:9f:c5:a8:3c:
ae:8f:cf:ad:dc:09:1f:3e:76:c2:26:a7:e9:f9:ec:f8:0d:4b:
4a:b0:2e:48:81:d8:f0:ad:8c:3e:7d:e1:c4:15:39:a7:bd:45:
77:f4:90:d0:6c:a4:6a:ac:6c:74:19:18:f6:dc:01:e5:30:af:
d0:57:1f:15:da:0c:f4:11:ea:58:50:5b:0f:9d:9f:9f:75:5d:
d6:09:20:7d
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAaAP6pkbL11ODyc98DLofMP2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhMGUxNmNjMmE4YjkxY2I0ODNmNDUxZTgxM2I2NzhhZTk3
NTgyYjAwHhcNMjYwODE3MTMzMDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGY0MjU5NmY1ZTczZTBkNDJhYjhlODhjYjg0Njk4M2ZkOWRjZGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gZHIwY4A8PzcIK465Ty1wI5YQWk
zlFvVa7MKETJvXydC04bNO24sJimouP4cpoUnEsEz0pmIhp67zyw+I3MG1gH10fr
I8HSVRfmwpWUAb/y/qSmHJDKPcuOPH3oFUHv4gWALBNoiTdPCE2E10uXKECndITF
eY/FI4lzmQWFT9AYusIC8X0dg1hRlHM3rHypH/Mme48chZgFeiKyeGsqgrU6NCBQ
2rKstdU9C4wgg/9O5IfHULOSJY2zyVC4rQKCBkM8q+LafFI3e4LV1BqR4UP8UJ8B
Al2UwNMCcXRtcEJP1/FoZmH/Z790dev2BELS3k9BNQwtMOv0UoGSnbvEgwIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFNT0JZb15z4NQquOiMuEaYP9nc3hMB8GA1UdIwQY
MBaAFGoOFswqi5HLSD9FHoE7Z4rpdYKwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUt
ZDFhNzc3MmRiMDc2LzEvMVBRbGx2WG5QZzFDcTQ2SXk0UnBnXzJkemVFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9lMWFkN2EtMTJlNy00ZmQwLWI2MWUtZDFhNzc3MmRiMDc2
LzEvYWc0V3pDcUxrY3RJUDBVZWdUdG5pdWwxZ3JBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBABWbiED
BABWbiIDBABWbi4DBABWbjoDBABWbj8wDQYJKoZIhvcNAQELBQADggEBAIsnGOAF
Xzx98FxqoOQGfbGCMVjvSE8hs8axmitMYLkEnU+tk5HaARN8VWf5qHA/GtZs5YwQ
jKZ8TF6UcMPDIlW5uKwe2zeF2uqu84KAfk/Yd+y7eDRAPSjg5rfeXWQo4+eoJngY
GvjlkV30SoNaJHadIKC/GZIJ3TtWYgd3SKQWnerWgo2VRX/1ny45JFSczybvq1LV
w5qtg0DJBuR9qM/GSu9Lk1E72ztU0/uQyTk6n8WoPK6Pz63cCR8+dsImp+n57PgN
S0qwLkiB2PCtjD594cQVOae9RXf0kNBspGqsbHQZGPbcAeUwr9BXHxXaDPQR6lhQ
Ww+dn591XdYJIH0=
-----END CERTIFICATE-----
Generated at Fri Aug 21 05:10:08 2026 by rpki-client