Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/1PQLqhoScjfBFsnVHNm0k3bCNFk.roa
File: 1PQLqhoScjfBFsnVHNm0k3bCNFk.roa (raw, json)
Hash identifier: Vk0i8JggRVRyN9gNhJOmPHfRFdxGWfDcvajCmQ4/kDs=
Subject key identifier: D4:F4:0B:AA:1A:12:72:37:C1:16:C9:D5:1C:D9:B4:93:76:C2:34:59
Certificate issuer: /CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Certificate serial: 019F31D66BECC227A69EDC3B5346060D9BE2
Authority key identifier: 89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/1PQLqhoScjfBFsnVHNm0k3bCNFk.roa
Signing time: Sun 05 Jul 2026 10:32:43 +0000
ROA not before: Sun 05 Jul 2026 10:32:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 13335
IP address blocks: 82.197.55.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:31:d6:6b:ec:c2:27:a6:9e:dc:3b:53:46:06:0d:9b:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8925ae3234a2c97c27f75ef51d3ff326be060e2c
Validity
Not Before: Jul 5 10:32:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d4f40baa1a127237c116c9d51cd9b49376c23459
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:ea:de:5f:23:43:b5:89:f3:8e:82:12:53:0e:
3c:77:22:ba:9f:a2:67:f8:e9:b0:c8:93:91:2b:9c:
68:90:2c:3f:98:0d:eb:d5:49:f3:69:30:14:c1:fa:
02:1c:76:47:66:2d:b0:e9:82:c0:71:24:8a:16:ad:
71:7a:c9:9b:f8:fa:49:58:8a:2d:21:b1:7e:aa:2f:
83:08:a6:f7:05:bf:c2:64:43:11:3f:16:42:8b:a8:
6e:c2:26:07:c9:5a:2e:20:33:2c:b1:a7:00:05:5d:
eb:2d:e0:26:13:68:b9:f5:0f:56:38:6f:38:5d:b4:
06:64:52:be:ec:56:51:a6:0b:40:dc:ca:b9:75:8b:
82:fb:e4:fa:9e:4a:52:f5:38:51:d4:c8:e4:eb:27:
5a:fd:54:64:2b:c2:de:e4:8e:dc:e1:a8:ea:6c:70:
25:12:7f:75:30:1b:31:b9:4d:fb:f3:9d:ad:fb:c7:
a2:a1:ca:68:a9:58:57:cc:d8:f2:3a:e3:09:25:da:
68:32:8a:4d:37:d2:0a:20:49:6b:57:34:6e:60:41:
3f:a1:87:c5:1f:d3:2e:26:37:c9:91:35:63:e3:ac:
74:97:27:9c:f2:85:ab:c8:2a:20:32:e7:46:11:71:
8e:b0:0a:20:67:25:01:4d:32:9f:3b:6e:bd:91:f2:
b0:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:F4:0B:AA:1A:12:72:37:C1:16:C9:D5:1C:D9:B4:93:76:C2:34:59
X509v3 Authority Key Identifier:
keyid:89:25:AE:32:34:A2:C9:7C:27:F7:5E:F5:1D:3F:F3:26:BE:06:0E:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iSWuMjSiyXwn9171HT_zJr4GDiw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/1PQLqhoScjfBFsnVHNm0k3bCNFk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/fb6270-0353-46fc-b9f5-7e8e6e888dac/1/iSWuMjSiyXwn9171HT_zJr4GDiw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.197.55.0/24
Signature Algorithm: sha256WithRSAEncryption
a9:a9:40:c7:d1:d4:f5:d5:50:d3:fa:ef:0f:5a:a2:d0:92:62:
ae:98:d8:97:2d:8a:7f:79:40:70:af:f4:84:92:a7:31:ee:06:
3e:99:40:d0:4f:bb:d5:90:99:1d:f8:d1:9a:d7:cd:8c:81:94:
d5:95:79:47:cf:31:a2:ad:ba:cd:d7:05:a0:27:ee:e0:86:8f:
16:60:df:1f:8f:21:f9:2a:45:86:58:d9:c1:dd:3f:a9:cc:e5:
db:ef:df:2c:20:fa:bd:80:f1:9f:10:e6:12:32:c8:43:b8:5e:
a6:c7:a0:f6:db:ed:d8:b2:dc:e7:e2:5d:f6:70:85:49:29:15:
d7:ca:c9:78:90:5f:4f:8d:32:0c:6a:5f:f3:6f:97:69:79:b9:
31:f9:e6:bc:25:b6:b5:92:70:9e:2a:1a:b0:8a:69:a6:12:39:
48:53:55:14:cb:a9:47:da:b4:6d:ce:ce:b6:e2:9a:e0:4e:5b:
30:7b:63:eb:3e:83:a5:e6:96:65:94:16:80:e6:7a:7b:0e:46:
e0:d8:8d:3e:0d:88:45:54:a5:e8:aa:f0:37:3d:25:ef:e1:c3:
ad:10:d7:79:29:bb:ae:bb:0e:de:a0:75:6a:e1:69:7b:2d:16:
5a:7a:92:e5:34:1a:a4:35:53:e4:0a:81:dc:33:dd:e5:84:11:
62:25:f6:55
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8x1mvswiemntw7U0YGDZviMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MjVhZTMyMzRhMmM5N2MyN2Y3NWVmNTFkM2ZmMzI2YmUw
NjBlMmMwHhcNMjYwNzA1MTAzMjQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkNGY0MGJhYTFhMTI3MjM3YzExNmM5ZDUxY2Q5YjQ5Mzc2YzIzNDU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsereXyNDtYnzjoISUw48dyK6n6Jn
+OmwyJORK5xokCw/mA3r1UnzaTAUwfoCHHZHZi2w6YLAcSSKFq1xesmb+PpJWIot
IbF+qi+DCKb3Bb/CZEMRPxZCi6huwiYHyVouIDMssacABV3rLeAmE2i59Q9WOG84
XbQGZFK+7FZRpgtA3Mq5dYuC++T6nkpS9ThR1Mjk6yda/VRkK8Le5I7c4ajqbHAl
En91MBsxuU37852t+8eiocpoqVhXzNjyOuMJJdpoMopNN9IKIElrVzRuYEE/oYfF
H9MuJjfJkTVj46x0lyec8oWryCogMudGEXGOsAogZyUBTTKfO269kfKwDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFNT0C6oaEnI3wRbJ1RzZtJN2wjRZMB8GA1UdIwQY
MBaAFIklrjI0osl8J/de9R0/8ya+Bg4sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi9mYjYyNzAtMDM1My00NmZjLWI5ZjUt
N2U4ZTZlODg4ZGFjLzEvMVBRTHFob1NjamZCRnNuVkhObTBrM2JDTkZrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi9mYjYyNzAtMDM1My00NmZjLWI5ZjUtN2U4ZTZlODg4ZGFj
LzEvaVNXdU1qU2l5WHduOTE3MUhUX3pKcjRHRGl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAUsU3MA0G
CSqGSIb3DQEBCwUAA4IBAQCpqUDH0dT11VDT+u8PWqLQkmKumNiXLYp/eUBwr/SE
kqcx7gY+mUDQT7vVkJkd+NGa182MgZTVlXlHzzGirbrN1wWgJ+7gho8WYN8fjyH5
KkWGWNnB3T+pzOXb798sIPq9gPGfEOYSMshDuF6mx6D22+3Ystzn4l32cIVJKRXX
ysl4kF9PjTIMal/zb5dpebkx+ea8Jba1knCeKhqwimmmEjlIU1UUy6lH2rRtzs62
4prgTlswe2PrPoOl5pZllBaA5np7Dkbg2I0+DYhFVKXoqvA3PSXv4cOtENd5Kbuu
uw7eoHVq4Wl7LRZaepLlNBqkNVPkCoHcM93lhBFiJfZV
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:45:53 2026 by rpki-client