Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/QiwWH1RtFqoFlh8ODhTHxGES8wo.roa
File: QiwWH1RtFqoFlh8ODhTHxGES8wo.roa (raw, json)
Hash identifier: HZ1hGzr6d7Gz+vsrN9BoASQoL9FuMmrP2dJvc65ilDk=
Subject key identifier: 42:2C:16:1F:54:6D:16:AA:05:96:1F:0E:0E:14:C7:C4:61:12:F3:0A
Certificate issuer: /CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Certificate serial: 019B7F8211FC8DE08366342A5CF042C00FA6
Authority key identifier: 64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/QiwWH1RtFqoFlh8ODhTHxGES8wo.roa
Signing time: Fri 02 Jan 2026 16:19:49 +0000
ROA not before: Fri 02 Jan 2026 16:19:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209920
IP address blocks: 185.244.16.0/24 maxlen: 24
185.244.17.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Feb 2026 09:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9b:7f:82:11:fc:8d:e0:83:66:34:2a:5c:f0:42:c0:0f:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=644cdbae84b26a8484b10c00ebfdfbcb4990c157
Validity
Not Before: Jan 2 16:19:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=422c161f546d16aa05961f0e0e14c7c46112f30a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:ce:cd:c4:10:d6:13:ea:89:29:e0:a6:3b:69:
a6:48:88:b1:b6:87:71:e7:63:ac:d7:9f:41:b7:ee:
f7:35:51:7b:2c:39:0e:7c:22:df:bd:e7:09:a9:e3:
4f:f6:15:29:c2:b0:67:08:82:cb:a4:ea:01:8e:7d:
b0:71:e4:a3:1a:aa:57:20:89:2d:65:61:05:29:1a:
21:ed:47:d9:48:89:35:3c:da:14:b0:13:d2:ec:70:
13:31:2c:a1:08:49:ad:6d:99:01:fd:7a:0e:7c:ee:
7d:51:22:6f:e1:e1:9d:fb:5e:77:42:2d:48:5e:ea:
76:f0:3a:77:09:c7:31:6f:55:79:4d:33:2e:aa:d9:
ef:bc:54:62:a3:cb:e9:3d:45:56:1d:f3:a8:ee:b5:
96:f0:cf:72:37:96:b4:07:84:e3:9d:30:90:65:e5:
77:73:bd:35:83:4c:1a:65:64:96:c1:a7:94:3f:31:
32:d7:fa:bc:88:e2:e9:b9:8b:7a:60:ea:49:4b:66:
f5:60:09:6e:e6:c9:40:5f:4f:84:81:92:21:e5:9f:
2d:01:d1:f7:95:f8:1c:64:c4:16:fb:1a:92:18:9a:
56:30:47:06:46:c7:f6:d1:c6:21:42:7d:6d:61:03:
87:1d:66:85:97:ca:d3:f2:15:02:45:a5:40:7d:60:
56:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:2C:16:1F:54:6D:16:AA:05:96:1F:0E:0E:14:C7:C4:61:12:F3:0A
X509v3 Authority Key Identifier:
keyid:64:4C:DB:AE:84:B2:6A:84:84:B1:0C:00:EB:FD:FB:CB:49:90:C1:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ZEzbroSyaoSEsQwA6_37y0mQwVc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/QiwWH1RtFqoFlh8ODhTHxGES8wo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/d73ac9-3d65-4e2d-8bbf-e034f65e7f60/1/ZEzbroSyaoSEsQwA6_37y0mQwVc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.244.16.0/23
Signature Algorithm: sha256WithRSAEncryption
02:d9:7d:97:09:ac:06:6a:51:69:9f:9b:0b:f5:a7:ae:c3:a1:
4b:96:42:ef:21:e9:46:44:13:bb:8c:11:3c:d1:96:f5:d1:39:
d1:aa:87:a7:4f:b1:42:99:aa:d3:e4:45:df:af:7b:4c:af:56:
11:26:31:9e:b4:17:eb:29:d6:9f:1e:95:f5:74:23:b6:d3:35:
87:f7:fa:cd:ac:db:e0:f0:d0:7e:0f:23:5d:6f:01:64:f4:4d:
6f:11:72:84:8e:37:8d:9a:96:99:c6:b5:8b:b1:be:76:26:f7:
3e:c6:88:83:bb:c8:a9:b8:de:fb:24:5d:0f:be:fc:61:29:57:
c2:5a:45:2a:1a:57:c5:15:eb:c2:d7:80:ca:9e:75:55:6e:9a:
17:43:90:48:65:f3:5e:9b:78:ce:ec:b6:40:a6:80:cc:9b:c2:
c0:0a:b4:a7:ca:45:93:66:73:54:10:15:4b:24:04:5c:eb:a5:
bb:e8:f1:ed:f9:33:25:30:1a:e1:8f:59:1f:f1:06:44:0b:54:
dc:fd:e9:da:6c:c9:8e:27:50:05:07:09:43:5d:81:4c:89:6e:
b5:b1:a2:b1:6e:2d:5b:4f:10:43:69:1d:fe:d4:e2:17:42:d5:
e7:7b:86:d8:fa:b2:32:0b:d8:a5:21:d7:3d:9c:d0:a7:d8:79:
6e:89:a2:88
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZt/ghH8jeCDZjQqXPBCwA+mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY0NGNkYmFlODRiMjZhODQ4NGIxMGMwMGViZmRmYmNiNDk5
MGMxNTcwHhcNMjYwMTAyMTYxOTQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjJjMTYxZjU0NmQxNmFhMDU5NjFmMGUwZTE0YzdjNDYxMTJmMzBhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArc7NxBDWE+qJKeCmO2mmSIixtodx
52Os159Bt+73NVF7LDkOfCLfvecJqeNP9hUpwrBnCILLpOoBjn2wceSjGqpXIIkt
ZWEFKRoh7UfZSIk1PNoUsBPS7HATMSyhCEmtbZkB/XoOfO59USJv4eGd+153Qi1I
Xup28Dp3Cccxb1V5TTMuqtnvvFRio8vpPUVWHfOo7rWW8M9yN5a0B4TjnTCQZeV3
c701g0waZWSWwaeUPzEy1/q8iOLpuYt6YOpJS2b1YAlu5slAX0+EgZIh5Z8tAdH3
lfgcZMQW+xqSGJpWMEcGRsf20cYhQn1tYQOHHWaFl8rT8hUCRaVAfWBWPQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEIsFh9UbRaqBZYfDg4Ux8RhEvMKMB8GA1UdIwQY
MBaAFGRM266EsmqEhLEMAOv9+8tJkMFXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYt
ZTAzNGY2NWU3ZjYwLzEvUWl3V0gxUnRGcW9GbGg4T0RoVEh4R0VTOHdvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC9kNzNhYzktM2Q2NS00ZTJkLThiYmYtZTAzNGY2NWU3ZjYw
LzEvWkV6YnJvU3lhb1NFc1F3QTZfMzd5MG1Rd1ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBufQQMA0G
CSqGSIb3DQEBCwUAA4IBAQAC2X2XCawGalFpn5sL9aeuw6FLlkLvIelGRBO7jBE8
0Zb10TnRqoenT7FCmarT5EXfr3tMr1YRJjGetBfrKdafHpX1dCO20zWH9/rNrNvg
8NB+DyNdbwFk9E1vEXKEjjeNmpaZxrWLsb52Jvc+xoiDu8ipuN77JF0PvvxhKVfC
WkUqGlfFFevC14DKnnVVbpoXQ5BIZfNem3jO7LZApoDMm8LACrSnykWTZnNUEBVL
JARc66W76PHt+TMlMBrhj1kf8QZEC1Tc/enabMmOJ1AFBwlDXYFMiW61saKxbi1b
TxBDaR3+1OIXQtXne4bY+rIyC9ilIdc9nNCn2HluiaKI
-----END CERTIFICATE-----
Generated at Thu Feb 26 11:55:49 2026 by rpki-client