Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/Qm64jgfqxLdzTqUP2yFFZCwEFkQ.roa
File: Qm64jgfqxLdzTqUP2yFFZCwEFkQ.roa (raw, json)
Hash identifier: VPkNMl1uM93BZxfba0RCbl2fSg1bQeZ6TYM16W6VTeE=
Subject key identifier: 42:6E:B8:8E:07:EA:C4:B7:73:4E:A5:0F:DB:21:45:64:2C:04:16:44
Certificate issuer: /CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Certificate serial: 019EF8D627ADF0571D193176B4EB2D0023AC
Authority key identifier: 8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/Qm64jgfqxLdzTqUP2yFFZCwEFkQ.roa
Signing time: Wed 24 Jun 2026 08:54:04 +0000
ROA not before: Wed 24 Jun 2026 08:54:04 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 141.98.151.0/24 maxlen: 24
212.66.50.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.mft
rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 28 Jun 2026 08:01:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f8:d6:27:ad:f0:57:1d:19:31:76:b4:eb:2d:00:23:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a01ab6cd44a7a3ea4002c106a96c427b52c81d5
Validity
Not Before: Jun 24 08:54:04 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=426eb88e07eac4b7734ea50fdb2145642c041644
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3d:2a:a7:ad:58:84:27:30:97:65:b9:bc:e6:
da:38:38:46:8d:da:38:15:b2:38:93:18:6f:e9:40:
e6:c5:e3:cc:bb:82:c4:1e:55:c3:e8:ae:87:88:22:
d7:45:c5:50:b6:bb:65:d0:28:62:68:b3:6c:57:a3:
37:3e:b1:33:3d:49:82:9a:a9:4e:b9:dc:63:0f:75:
c5:30:c0:a7:71:d5:94:ff:d9:e6:c7:f3:a1:aa:9f:
8b:e9:f9:14:4b:91:4a:ab:f2:6e:4a:13:d0:3e:96:
a3:94:8b:5b:9c:48:f2:59:fb:44:41:e9:3d:e7:a8:
be:de:8d:6b:34:a6:c5:6e:ab:ee:d0:eb:8a:aa:2b:
75:63:13:1d:51:73:f9:0b:a4:1d:fa:82:a2:31:57:
20:6c:0f:5b:61:9e:28:a2:d2:ef:08:e3:80:4b:07:
37:dd:bc:91:c8:14:6f:b4:ee:92:27:ef:b4:f0:ab:
14:9a:b4:c9:9f:5f:8c:6c:4f:8c:77:36:05:cd:60:
83:c4:5c:22:ca:dc:ca:3d:a1:92:3b:dd:10:d1:ca:
99:20:ca:c6:ab:e3:97:34:bd:45:28:b4:e3:2d:0c:
00:86:e4:4b:c9:aa:62:00:98:dc:b5:e0:0e:f7:95:
63:97:c7:0e:c7:a8:ff:61:6d:cf:dc:be:f5:e1:5d:
6d:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:6E:B8:8E:07:EA:C4:B7:73:4E:A5:0F:DB:21:45:64:2C:04:16:44
X509v3 Authority Key Identifier:
keyid:8A:01:AB:6C:D4:4A:7A:3E:A4:00:2C:10:6A:96:C4:27:B5:2C:81:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/igGrbNRKej6kACwQapbEJ7UsgdU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/Qm64jgfqxLdzTqUP2yFFZCwEFkQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/36/5832f4-e4e2-498b-a06a-9febf8c3e33f/1/igGrbNRKej6kACwQapbEJ7UsgdU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
141.98.151.0/24
212.66.50.0/24
Signature Algorithm: sha256WithRSAEncryption
6c:cf:67:5b:d9:d4:87:04:67:25:10:24:57:cb:fd:bf:1c:2b:
06:90:ab:7e:ac:83:3d:2a:a3:48:0a:23:99:5e:db:28:d9:1c:
8c:3a:b2:22:f3:cb:f9:cb:f4:a6:cb:8d:bb:6a:ef:10:92:cd:
5c:5c:de:5e:d1:4e:1f:fa:33:e6:07:38:d0:95:85:09:fb:c9:
8c:34:9d:c6:69:93:7d:a6:09:f0:25:a3:f8:41:1b:ca:e3:00:
e1:eb:a1:82:70:f9:b4:2f:d3:40:c7:36:79:71:57:aa:68:75:
e0:0f:ae:83:28:4e:64:6a:02:0b:94:c4:de:79:8f:01:9a:c5:
23:2d:47:f0:b2:ed:3a:00:59:ff:1c:ed:af:2f:aa:80:d6:af:
97:90:7d:3a:97:e6:d2:86:a3:cb:c8:70:cc:4b:a9:ba:c8:ed:
55:4e:27:c4:53:01:28:90:51:ba:74:d5:7a:a9:09:12:23:c9:
3d:bb:a1:d4:49:68:7a:04:1e:4e:08:13:e1:f7:61:27:f0:eb:
37:55:ad:d2:6e:65:24:29:e6:df:12:00:58:b2:2a:e2:b1:c4:
47:b6:4d:e5:a4:55:5a:0b:a8:f8:34:f3:67:46:7d:4e:be:e4:
b1:a4:d4:ab:e7:c1:20:e6:cb:68:b2:c4:2b:3b:45:da:31:0b:
fd:c4:3c:d1
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ741iet8FcdGTF2tOstACOsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMDFhYjZjZDQ0YTdhM2VhNDAwMmMxMDZhOTZjNDI3YjUy
YzgxZDUwHhcNMjYwNjI0MDg1NDA0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MjZlYjg4ZTA3ZWFjNGI3NzM0ZWE1MGZkYjIxNDU2NDJjMDQxNjQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T0qp61YhCcwl2W5vObaODhGjdo4
FbI4kxhv6UDmxePMu4LEHlXD6K6HiCLXRcVQtrtl0ChiaLNsV6M3PrEzPUmCmqlO
udxjD3XFMMCncdWU/9nmx/Ohqp+L6fkUS5FKq/JuShPQPpajlItbnEjyWftEQek9
56i+3o1rNKbFbqvu0OuKqit1YxMdUXP5C6Qd+oKiMVcgbA9bYZ4ootLvCOOASwc3
3byRyBRvtO6SJ++08KsUmrTJn1+MbE+MdzYFzWCDxFwiytzKPaGSO90Q0cqZIMrG
q+OXNL1FKLTjLQwAhuRLyapiAJjcteAO95Vjl8cOx6j/YW3P3L714V1t2QIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFEJuuI4H6sS3c06lD9shRWQsBBZEMB8GA1UdIwQY
MBaAFIoBq2zUSno+pAAsEGqWxCe1LIHVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEt
OWZlYmY4YzNlMzNmLzEvUW02NGpnZnF4TGR6VHFVUDJ5RkZaQ3dFRmtRLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNi81ODMyZjQtZTRlMi00OThiLWEwNmEtOWZlYmY4YzNlMzNm
LzEvaWdHcmJOUktlajZrQUN3UWFwYkVKN1VzZ2RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAjWKXAwQA
1EIyMA0GCSqGSIb3DQEBCwUAA4IBAQBsz2db2dSHBGclECRXy/2/HCsGkKt+rIM9
KqNICiOZXtso2RyMOrIi88v5y/Smy427au8Qks1cXN5e0U4f+jPmBzjQlYUJ+8mM
NJ3GaZN9pgnwJaP4QRvK4wDh66GCcPm0L9NAxzZ5cVeqaHXgD66DKE5kagILlMTe
eY8BmsUjLUfwsu06AFn/HO2vL6qA1q+XkH06l+bShqPLyHDMS6m6yO1VTifEUwEo
kFG6dNV6qQkSI8k9u6HUSWh6BB5OCBPh92En8Os3Va3SbmUkKebfEgBYsiriscRH
tk3lpFVaC6j4NPNnRn1OvuSxpNSr58Eg5stossQrO0XaMQv9xDzR
-----END CERTIFICATE-----
Generated at Sat Jun 27 17:21:32 2026 by rpki-client