Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/gqoQm8Lqdb4XkXQMCDcCwRURHZ8.roa
File: gqoQm8Lqdb4XkXQMCDcCwRURHZ8.roa (raw, json)
Hash identifier: +L7sYlMl7jfcXCPssFCunVRnMLOFkp994ICsnZ93rLU=
Subject key identifier: 82:AA:10:9B:C2:EA:75:BE:17:91:74:0C:08:37:02:C1:15:11:1D:9F
Certificate issuer: /CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Certificate serial: 01A0FC043A499975B6AC32A9C90ADA1A318F
Authority key identifier: 73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/gqoQm8Lqdb4XkXQMCDcCwRURHZ8.roa
Signing time: Fri 02 Oct 2026 09:48:50 +0000
ROA not before: Fri 02 Oct 2026 09:48:50 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 6830
IP address blocks: 83.229.113.0/24 maxlen: 24
185.90.220.0/24 maxlen: 24
185.90.221.0/24 maxlen: 24
185.90.222.0/24 maxlen: 24
185.90.223.0/24 maxlen: 24
193.57.94.0/24 maxlen: 24
193.57.95.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.mft
rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 25 Oct 2026 13:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:fc:04:3a:49:99:75:b6:ac:32:a9:c9:0a:da:1a:31:8f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73f210f1299a1e0aee71dc1d79e5fb12092d30a9
Validity
Not Before: Oct 2 09:48:50 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=82aa109bc2ea75be1791740c083702c115111d9f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:94:ec:29:25:28:75:32:5a:2c:b5:9b:24:f6:
10:a4:26:06:9d:3c:4e:9d:11:ae:70:3f:df:2c:c2:
22:ae:01:eb:22:b6:98:e2:c0:5f:82:7a:ed:7f:ab:
74:8a:6b:8b:4e:df:a8:a2:2a:05:ec:9d:e6:e7:bd:
b3:d4:24:2e:95:22:43:38:a0:b9:83:d9:a5:07:85:
27:dd:93:7b:a2:b7:82:3c:77:66:5b:91:e3:cf:ae:
49:ac:0a:9c:79:1f:60:11:3c:4a:d1:e2:a0:ec:b4:
88:20:bc:39:c8:3a:af:49:e3:a5:32:9b:76:5a:29:
72:db:da:f4:ec:1b:e5:42:8f:83:4b:98:64:b9:f0:
e2:d5:31:03:4a:bc:1a:33:39:69:59:82:24:2f:42:
fc:ab:05:83:57:41:a6:d0:74:9c:0c:26:e2:4e:07:
44:d7:71:c0:51:44:91:8f:ed:24:d9:7d:aa:f8:ae:
01:aa:87:50:08:70:9c:1b:8b:c5:7f:fd:57:58:30:
b6:6c:03:40:a3:45:90:4f:e4:61:8d:b8:d6:65:11:
c2:db:12:65:da:2f:2d:bb:63:a2:b6:69:fe:ed:0d:
11:98:18:65:8d:b9:6a:96:c4:d3:cb:04:0d:9e:b3:
a0:e2:12:b9:9b:6a:7c:2f:0b:8c:27:d3:bb:c7:13:
86:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
82:AA:10:9B:C2:EA:75:BE:17:91:74:0C:08:37:02:C1:15:11:1D:9F
X509v3 Authority Key Identifier:
keyid:73:F2:10:F1:29:9A:1E:0A:EE:71:DC:1D:79:E5:FB:12:09:2D:30:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c_IQ8SmaHgrucdwdeeX7EgktMKk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/gqoQm8Lqdb4XkXQMCDcCwRURHZ8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/db1b48-1cc5-4833-93d9-b9464718ba37/1/c_IQ8SmaHgrucdwdeeX7EgktMKk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
83.229.113.0/24
185.90.220.0/22
193.57.94.0/23
Signature Algorithm: sha256WithRSAEncryption
35:4d:96:ff:1e:c7:14:28:c4:12:87:8c:08:e3:c5:36:7e:7f:
c1:4f:8d:3f:5a:a9:c5:1b:25:70:e2:c4:69:12:ce:74:bb:0b:
ec:81:5b:dd:bb:00:90:7b:ce:7b:ae:40:9e:c4:23:bb:86:cd:
d8:51:ad:b2:00:77:97:f0:65:ca:84:22:96:6d:ff:48:8b:b8:
41:84:4d:84:e7:df:39:54:0a:d0:64:55:51:ff:fb:6a:78:75:
cd:81:a1:03:48:2f:7a:69:4f:53:27:2d:77:0d:8b:34:54:6a:
98:7b:8f:f5:aa:f0:a2:69:dd:86:da:af:da:4a:69:13:3d:6d:
d9:ef:70:a3:85:7e:43:f5:ed:ae:3d:cd:d9:35:63:3d:3a:f7:
e0:a3:08:c6:db:e7:70:39:9f:30:87:7d:3b:e5:e1:6d:af:dd:
e4:13:a7:93:40:99:36:98:d0:d1:8c:a9:db:84:32:c4:6f:73:
d4:b6:4a:5f:a9:5a:54:33:7d:82:86:10:c1:a6:b0:88:53:95:
79:98:e2:94:91:97:f5:bc:e9:ac:1c:9c:f7:88:95:65:5a:da:
f8:9b:bf:06:d9:24:47:54:bb:c5:28:05:34:fb:c3:b8:bd:ae:
e1:ea:61:69:ed:8d:56:1c:23:25:b3:cd:bf:cf:94:01:b6:5a:
5e:1a:ea:84
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAaD8BDpJmXW2rDKpyQraGjGPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZjIxMGYxMjk5YTFlMGFlZTcxZGMxZDc5ZTVmYjEyMDky
ZDMwYTkwHhcNMjYxMDAyMDk0ODUwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4MmFhMTA5YmMyZWE3NWJlMTc5MTc0MGMwODM3MDJjMTE1MTExZDlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArJTsKSUodTJaLLWbJPYQpCYGnTxO
nRGucD/fLMIirgHrIraY4sBfgnrtf6t0imuLTt+ooioF7J3m572z1CQulSJDOKC5
g9mlB4Un3ZN7oreCPHdmW5Hjz65JrAqceR9gETxK0eKg7LSIILw5yDqvSeOlMpt2
Wily29r07BvlQo+DS5hkufDi1TEDSrwaMzlpWYIkL0L8qwWDV0Gm0HScDCbiTgdE
13HAUUSRj+0k2X2q+K4BqodQCHCcG4vFf/1XWDC2bANAo0WQT+RhjbjWZRHC2xJl
2i8tu2Oitmn+7Q0RmBhljblqlsTTywQNnrOg4hK5m2p8LwuMJ9O7xxOGZwIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFIKqEJvC6nW+F5F0DAg3AsEVER2fMB8GA1UdIwQY
MBaAFHPyEPEpmh4K7nHcHXnl+xIJLTCpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDkt
Yjk0NjQ3MThiYTM3LzEvZ3FvUW04THFkYjRYa1hRTUNEY0N3UlVSSFo4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC9kYjFiNDgtMWNjNS00ODMzLTkzZDktYjk0NjQ3MThiYTM3
LzEvY19JUThTbWFIZ3J1Y2R3ZGVlWDdFZ2t0TUtrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAU+VxAwQC
uVrcAwQBwTleMA0GCSqGSIb3DQEBCwUAA4IBAQA1TZb/HscUKMQSh4wI48U2fn/B
T40/WqnFGyVw4sRpEs50uwvsgVvduwCQe857rkCexCO7hs3YUa2yAHeX8GXKhCKW
bf9Ii7hBhE2E5985VArQZFVR//tqeHXNgaEDSC96aU9TJy13DYs0VGqYe4/1qvCi
ad2G2q/aSmkTPW3Z73CjhX5D9e2uPc3ZNWM9OvfgowjG2+dwOZ8wh3075eFtr93k
E6eTQJk2mNDRjKnbhDLEb3PUtkpfqVpUM32ChhDBprCIU5V5mOKUkZf1vOmsHJz3
iJVlWtr4m78G2SRHVLvFKAU0+8O4va7h6mFp7Y1WHCMls82/z5QBtlpeGuqE
-----END CERTIFICATE-----
Generated at Sat Oct 24 18:51:44 2026 by rpki-client