Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/qjZKq8xpZrpNLeP6RmuB8YPVwJM.roa
File: qjZKq8xpZrpNLeP6RmuB8YPVwJM.roa (raw, json)
Hash identifier: lTEB8I4QhU4liw15VL2hlUvzWwqKGuBCbqzng//X6uo=
Subject key identifier: AA:36:4A:AB:CC:69:66:BA:4D:2D:E3:FA:46:6B:81:F1:83:D5:C0:93
Certificate issuer: /CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Certificate serial: 019F6EE45A4472653413D3BFBC4B34AE17C6
Authority key identifier: 3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/qjZKq8xpZrpNLeP6RmuB8YPVwJM.roa
Signing time: Fri 17 Jul 2026 07:04:46 +0000
ROA not before: Fri 17 Jul 2026 07:04:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 154132
IP address blocks: 79.176.227.0/24 maxlen: 24
79.182.37.0/24 maxlen: 24
109.66.14.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.mft
rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 16:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:e4:5a:44:72:65:34:13:d3:bf:bc:4b:34:ae:17:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fedd85c1eccb5ff4ba930117a7329099c0ff2eb
Validity
Not Before: Jul 17 07:04:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa364aabcc6966ba4d2de3fa466b81f183d5c093
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:af:27:7a:94:c0:b1:f6:f1:eb:e3:1a:1d:2e:
10:e5:fd:ad:cf:93:fe:d9:3b:31:b9:cc:8c:c5:14:
28:a5:3e:db:33:9b:e6:dc:7c:15:b2:b7:11:fc:0b:
64:39:3d:fc:fd:32:7f:f3:74:6c:f3:5f:e8:0c:ce:
aa:fa:96:c4:15:92:3a:b6:6a:19:ed:b5:d4:9d:0d:
9d:1e:6e:02:3e:1c:71:6b:27:68:2c:20:38:38:cf:
c4:59:10:dd:3c:15:82:8a:5a:a5:2d:e7:c0:b3:d6:
c4:8c:5b:ef:84:19:3a:e2:f6:31:a3:ba:b3:85:a8:
7c:36:2f:71:94:cc:c0:eb:7a:e5:57:36:b8:89:ee:
3b:c4:f3:92:b9:52:9a:70:b6:fd:2d:db:ef:16:53:
9c:0d:40:a1:ce:a2:25:dd:08:a7:24:b6:56:c9:12:
8d:c7:a9:be:8b:fb:1c:fb:b2:28:d4:7f:0d:e9:5d:
ba:aa:31:5c:b5:15:44:03:34:43:3a:69:fc:98:ae:
d0:a3:ed:ca:b1:6b:76:6e:3a:3c:69:73:06:3c:4f:
c1:9e:d4:f5:fa:2d:44:4e:44:2a:1b:2e:5c:d3:e2:
5a:64:47:e1:dd:21:ce:eb:37:6f:e8:83:a4:ff:8c:
e2:0a:3e:79:11:f0:21:4c:31:c2:1e:10:92:1b:d6:
d0:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:36:4A:AB:CC:69:66:BA:4D:2D:E3:FA:46:6B:81:F1:83:D5:C0:93
X509v3 Authority Key Identifier:
keyid:3F:ED:D8:5C:1E:CC:B5:FF:4B:A9:30:11:7A:73:29:09:9C:0F:F2:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P-3YXB7Mtf9LqTARenMpCZwP8us.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/qjZKq8xpZrpNLeP6RmuB8YPVwJM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/41c321-347e-4c3e-affd-e2b527728e96/1/P-3YXB7Mtf9LqTARenMpCZwP8us.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.176.227.0/24
79.182.37.0/24
109.66.14.0/24
Signature Algorithm: sha256WithRSAEncryption
14:21:a7:a4:fd:7a:db:d9:95:02:5c:77:5a:3f:5d:2e:51:b4:
94:0a:9c:65:2b:28:b0:b4:9a:ff:ab:21:86:0b:50:32:2a:71:
ac:df:bd:be:b0:f9:30:68:8f:e1:16:75:ed:8a:fe:46:c3:23:
93:b4:c9:e1:54:43:90:1d:9d:a0:0c:c5:2a:11:8d:81:59:72:
ad:de:0f:99:a6:27:f8:9b:00:25:ba:f9:12:0b:79:83:ad:ad:
21:22:55:b5:38:bb:a9:a6:04:66:1e:40:45:ba:32:03:f9:ab:
f0:c9:78:a3:e2:4e:ab:ef:6b:cc:10:c9:86:92:22:32:46:cf:
c1:62:fe:5e:65:98:fd:75:61:35:2e:0e:52:96:69:46:93:1e:
2a:80:22:02:70:78:85:f5:ca:4e:4c:77:bc:0e:79:33:da:7e:
c3:23:30:25:9a:d2:45:ee:72:4e:97:9f:ca:8d:18:1a:52:6c:
3f:3e:1b:eb:68:4e:6d:b9:70:2c:4b:fd:fe:42:7f:3d:6f:0b:
d6:63:0d:b7:40:ef:c4:76:3e:5b:01:fb:18:86:01:11:4d:d6:
ad:4f:d6:0c:ef:2a:ca:09:86:97:92:18:73:52:79:0a:2f:37:
21:70:b6:b2:54:dd:0f:65:05:2e:ba:07:e2:b0:ca:8c:6b:31:
7c:e2:bc:55
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ9u5FpEcmU0E9O/vEs0rhfGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZWRkODVjMWVjY2I1ZmY0YmE5MzAxMTdhNzMyOTA5OWMw
ZmYyZWIwHhcNMjYwNzE3MDcwNDQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTM2NGFhYmNjNjk2NmJhNGQyZGUzZmE0NjZiODFmMTgzZDVjMDkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6K8nepTAsfbx6+MaHS4Q5f2tz5P+
2TsxucyMxRQopT7bM5vm3HwVsrcR/AtkOT38/TJ/83Rs81/oDM6q+pbEFZI6tmoZ
7bXUnQ2dHm4CPhxxaydoLCA4OM/EWRDdPBWCilqlLefAs9bEjFvvhBk64vYxo7qz
hah8Ni9xlMzA63rlVza4ie47xPOSuVKacLb9LdvvFlOcDUChzqIl3QinJLZWyRKN
x6m+i/sc+7Io1H8N6V26qjFctRVEAzRDOmn8mK7Qo+3KsWt2bjo8aXMGPE/BntT1
+i1ETkQqGy5c0+JaZEfh3SHO6zdv6IOk/4ziCj55EfAhTDHCHhCSG9bQZQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKo2SqvMaWa6TS3j+kZrgfGD1cCTMB8GA1UdIwQY
MBaAFD/t2FwezLX/S6kwEXpzKQmcD/LrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQt
ZTJiNTI3NzI4ZTk2LzEvcWpaS3E4eHBacnBOTGVQNlJtdUI4WVBWd0pNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC80MWMzMjEtMzQ3ZS00YzNlLWFmZmQtZTJiNTI3NzI4ZTk2
LzEvUC0zWVhCN010ZjlMcVRBUmVuTXBDWndQOHVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAT7DjAwQA
T7YlAwQAbUIOMA0GCSqGSIb3DQEBCwUAA4IBAQAUIaek/Xrb2ZUCXHdaP10uUbSU
CpxlKyiwtJr/qyGGC1AyKnGs372+sPkwaI/hFnXtiv5GwyOTtMnhVEOQHZ2gDMUq
EY2BWXKt3g+Zpif4mwAluvkSC3mDra0hIlW1OLuppgRmHkBFujID+avwyXij4k6r
72vMEMmGkiIyRs/BYv5eZZj9dWE1Lg5SlmlGkx4qgCICcHiF9cpOTHe8Dnkz2n7D
IzAlmtJF7nJOl5/KjRgaUmw/PhvraE5tuXAsS/3+Qn89bwvWYw23QO/Edj5bAfsY
hgERTdatT9YM7yrKCYaXkhhzUnkKLzchcLayVN0PZQUuugfisMqMazF84rxV
-----END CERTIFICATE-----
Generated at Sat Jul 18 01:13:25 2026 by rpki-client