Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/qt1QwLqwucEqiS_HCsqZaECHD-Q.roa
File: qt1QwLqwucEqiS_HCsqZaECHD-Q.roa (raw, json)
Hash identifier: MG72GciveOCAsSd/PHOMOToEY9AgjSuj5ZNePoC3YD4=
Subject key identifier: AA:DD:50:C0:BA:B0:B9:C1:2A:89:2F:C7:0A:CA:99:68:40:87:0F:E4
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 01A152E6B8C2E10AC91F05F579871ED7BF21
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/qt1QwLqwucEqiS_HCsqZaECHD-Q.roa
Signing time: Mon 19 Oct 2026 06:43:34 +0000
ROA not before: Mon 19 Oct 2026 06:43:34 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 35661
IP address blocks: 185.253.61.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 23:31:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:52:e6:b8:c2:e1:0a:c9:1f:05:f5:79:87:1e:d7:bf:21
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Oct 19 06:43:34 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aadd50c0bab0b9c12a892fc70aca996840870fe4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5a:60:e4:a0:97:2a:f7:69:7a:09:2d:5e:53:
3d:87:da:cd:cb:93:ed:6c:db:71:b2:e9:72:6e:b1:
29:b0:ed:6d:44:54:07:f8:6e:08:bb:df:27:29:ad:
b5:24:6b:8e:b0:18:fe:ba:d9:a2:8e:5d:b9:9c:4f:
69:41:5c:47:d7:7d:2a:7b:f4:ee:15:84:15:2b:c9:
42:55:e0:67:9c:2c:4c:65:70:d7:25:ad:69:9e:62:
0e:66:cd:6e:5b:be:bb:fc:65:42:b9:7f:93:13:8d:
67:56:c3:9b:af:03:10:ac:2b:21:9e:1d:0f:be:34:
b3:54:71:be:b0:29:8a:00:56:e8:15:83:f7:88:ac:
c5:bd:5c:35:96:74:fd:ba:2c:6a:ad:0e:6d:42:9a:
11:ca:3b:70:38:c0:d8:81:22:18:26:07:d9:24:0d:
97:8a:23:d7:00:d7:5b:40:44:77:1f:f2:a8:78:cd:
80:5b:e1:70:a2:02:c8:d5:b2:76:dd:9b:59:4d:79:
b6:20:58:28:28:f2:ac:89:3f:56:47:b1:e3:c1:f1:
01:aa:fd:4f:b0:dc:28:70:b7:fe:45:bb:9c:0e:80:
80:39:cd:fc:11:02:09:82:72:a7:16:ab:88:e8:9c:
01:ae:8d:79:b8:21:1d:99:cf:05:f2:dc:ac:70:4f:
f7:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:DD:50:C0:BA:B0:B9:C1:2A:89:2F:C7:0A:CA:99:68:40:87:0F:E4
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/qt1QwLqwucEqiS_HCsqZaECHD-Q.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.253.61.0/24
Signature Algorithm: sha256WithRSAEncryption
9a:e5:dd:0e:c7:82:e0:52:e5:7b:e7:37:ed:17:90:9e:19:32:
78:06:22:20:7a:fd:bc:8f:7d:d0:2a:33:ba:14:cc:71:92:ca:
e7:15:95:80:60:10:f7:35:ff:bc:3b:51:b5:43:5a:b4:f9:44:
8b:af:e1:a5:59:2f:cb:31:bb:e7:e6:4d:2d:dc:b1:ab:4a:39:
b1:1d:04:bd:aa:1e:fe:38:10:28:14:5e:98:59:5c:c6:2c:66:
a5:3f:95:f1:dd:a1:01:68:bd:c6:14:e0:e9:09:83:dc:78:71:
71:dc:b5:26:71:1b:3b:69:88:fc:b1:27:e6:1d:b9:5c:b6:df:
46:a4:a6:74:b0:08:36:b2:f5:54:32:20:e4:1c:6f:51:2e:06:
57:de:c6:60:84:0d:7b:fa:3d:7e:73:6a:91:0e:f2:97:64:eb:
4f:21:53:4b:30:60:2b:6c:42:aa:52:cd:3b:c2:f4:72:4b:38:
f0:bb:3c:1a:ba:2c:47:8a:bd:59:87:03:d1:b1:26:3e:b0:dc:
3a:2e:c7:07:db:a6:73:8b:e9:06:4e:1f:80:02:21:80:16:81:
be:23:b0:a6:5b:84:4f:a5:b0:e2:88:f5:f0:aa:3a:0c:e7:46:
c1:e7:26:91:c7:51:67:b6:2d:d5:c2:0c:22:3e:ea:b9:1a:2f:
f2:d6:95:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Oct 26 08:51:00 2026 by rpki-client