Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/qWwgzCH9K8JWgnDsCo6SBO_wFC4.roa
File: qWwgzCH9K8JWgnDsCo6SBO_wFC4.roa (raw, json)
Hash identifier: 56LC9PWT2zD1vsuWut3ozyqt1WI7tzVhIC16/hTn/HM=
Subject key identifier: A9:6C:20:CC:21:FD:2B:C2:56:82:70:EC:0A:8E:92:04:EF:F0:14:2E
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F1C72A87399C896AC38E5ECECB1A980C2
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/qWwgzCH9K8JWgnDsCo6SBO_wFC4.roa
Signing time: Wed 01 Jul 2026 06:51:44 +0000
ROA not before: Wed 01 Jul 2026 06:51:44 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6079
IP address blocks: 109.66.72.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 21 Jul 2026 18:25:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1c:72:a8:73:99:c8:96:ac:38:e5:ec:ec:b1:a9:80:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 1 06:51:44 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a96c20cc21fd2bc2568270ec0a8e9204eff0142e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:57:00:96:4c:7f:3e:95:27:74:88:49:d1:31:
e4:bd:c2:ce:02:81:94:39:43:5c:9f:b0:95:b7:d5:
7b:28:98:7a:43:8a:5b:f9:dd:12:d1:27:6e:cd:2f:
4d:1a:69:8c:b6:dc:84:53:b7:db:8c:90:91:85:03:
cb:f4:a9:7d:ac:fc:ef:3a:44:66:48:ca:eb:e9:a1:
b9:30:06:66:22:e1:e3:c1:2e:5d:d8:82:f3:a2:4c:
94:fa:65:e1:3d:a6:ad:bc:56:3b:36:f2:32:a3:65:
87:a1:58:bb:52:31:b5:6e:84:fb:2e:d9:a1:f3:33:
5d:10:d5:d9:db:2c:ff:f6:60:14:67:60:60:69:da:
f3:94:41:ae:3e:50:79:dd:54:c6:d1:0e:95:ba:ca:
81:05:f9:b6:b5:8e:d6:67:b8:82:ba:ca:e4:1f:9c:
b6:ae:14:ad:12:72:b1:2a:76:12:28:f1:86:4d:55:
29:6a:e0:eb:a8:5d:66:cf:5e:c8:f4:49:2a:e1:db:
77:7a:51:be:19:50:52:4f:a5:df:47:60:92:7b:0e:
29:8f:b9:59:20:93:13:a0:47:e8:a1:5e:2f:44:41:
6c:55:8a:a1:aa:56:2e:cc:5a:ee:ee:dd:1c:c4:f1:
a7:bc:ed:e5:50:7c:53:b0:ec:16:ff:4f:f3:ce:ed:
ac:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6C:20:CC:21:FD:2B:C2:56:82:70:EC:0A:8E:92:04:EF:F0:14:2E
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/qWwgzCH9K8JWgnDsCo6SBO_wFC4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.66.72.0/22
Signature Algorithm: sha256WithRSAEncryption
48:0b:de:c8:05:48:5c:c2:99:4c:ed:89:ca:cf:b4:b2:1a:5e:
7b:cc:31:42:06:1c:8f:3a:dd:6b:02:29:d0:78:b1:fe:51:a1:
ff:9b:7c:3e:b1:68:df:9b:4a:00:3b:4a:e9:4c:25:16:f7:c3:
78:ee:49:81:c5:f8:8c:30:51:30:b1:87:74:56:4a:61:ab:f0:
47:bf:c9:94:39:f2:fb:c9:a1:f3:44:3f:0c:7c:b9:54:4a:ee:
62:9f:7a:26:87:c6:55:fb:ab:38:05:8b:f0:5e:19:a2:d3:c8:
39:06:42:bf:20:2b:57:04:1c:53:24:a0:7a:3b:87:ed:05:0f:
26:1a:e8:da:ab:87:c8:17:04:89:a8:0c:19:8b:60:bf:f4:3d:
c4:2a:d9:72:79:32:8a:10:8e:22:ed:23:e0:77:5d:40:03:3f:
a2:6f:6a:e7:ae:4a:49:f3:a8:ed:ff:0b:e0:a5:4d:3b:f2:ba:
ee:82:cd:d7:48:1f:b9:71:fa:cc:84:4e:8f:bd:f9:70:d7:e2:
a9:c9:a9:0f:10:c4:5c:cf:b5:45:3e:fd:ef:83:ca:31:4f:e8:
87:01:4c:42:8e:fe:01:13:64:58:8b:98:d6:e8:72:96:f3:35:
12:d0:0e:23:28:65:71:5b:32:c8:91:8a:f7:c2:d5:a5:0c:b0:
fb:97:b5:eb
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8ccqhzmciWrDjl7OyxqYDCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwNzAxMDY1MTQ0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTZjMjBjYzIxZmQyYmMyNTY4MjcwZWMwYThlOTIwNGVmZjAxNDJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArFcAlkx/PpUndIhJ0THkvcLOAoGU
OUNcn7CVt9V7KJh6Q4pb+d0S0SduzS9NGmmMttyEU7fbjJCRhQPL9Kl9rPzvOkRm
SMrr6aG5MAZmIuHjwS5d2ILzokyU+mXhPaatvFY7NvIyo2WHoVi7UjG1boT7Ltmh
8zNdENXZ2yz/9mAUZ2BgadrzlEGuPlB53VTG0Q6VusqBBfm2tY7WZ7iCusrkH5y2
rhStEnKxKnYSKPGGTVUpauDrqF1mz17I9Ekq4dt3elG+GVBST6XfR2CSew4pj7lZ
IJMToEfooV4vREFsVYqhqlYuzFru7t0cxPGnvO3lUHxTsOwW/0/zzu2sDwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKlsIMwh/SvCVoJw7AqOkgTv8BQuMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvcVd3Z3pDSDlLOEpXZ25Ec0NvNlNCT193RkM0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCbUJIMA0G
CSqGSIb3DQEBCwUAA4IBAQBIC97IBUhcwplM7YnKz7SyGl57zDFCBhyPOt1rAinQ
eLH+UaH/m3w+sWjfm0oAO0rpTCUW98N47kmBxfiMMFEwsYd0Vkphq/BHv8mUOfL7
yaHzRD8MfLlUSu5in3omh8ZV+6s4BYvwXhmi08g5BkK/ICtXBBxTJKB6O4ftBQ8m
Gujaq4fIFwSJqAwZi2C/9D3EKtlyeTKKEI4i7SPgd11AAz+ib2rnrkpJ86jt/wvg
pU078rrugs3XSB+5cfrMhE6Pvflw1+KpyakPEMRcz7VFPv3vg8oxT+iHAUxCjv4B
E2RYi5jW6HKW8zUS0A4jKGVxWzLIkYr3wtWlDLD7l7Xr
-----END CERTIFICATE-----
Generated at Tue Jul 21 01:34:56 2026 by rpki-client