Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/qV4BzWghOJcIjFL2t572uLzc5A8.roa
File: qV4BzWghOJcIjFL2t572uLzc5A8.roa (raw, json)
Hash identifier: /tlNW3pQSqKGNUqp2nGES7Pv5A/y9d61Lu+dWRJiM1c=
Subject key identifier: A9:5E:01:CD:68:21:38:97:08:8C:52:F6:B7:9E:F6:B8:BC:DC:E4:0F
Certificate issuer: /CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Certificate serial: 01A11CF38F970496BABB25761F463FBC664E
Authority key identifier: C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/qV4BzWghOJcIjFL2t572uLzc5A8.roa
Signing time: Thu 08 Oct 2026 19:18:06 +0000
ROA not before: Thu 08 Oct 2026 19:18:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 218450
IP address blocks: 185.141.34.0/24 maxlen: 24
185.254.239.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.mft
rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 22 Oct 2026 11:02:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:1c:f3:8f:97:04:96:ba:bb:25:76:1f:46:3f:bc:66:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c616c4195152effedbf7b3afee2aa72e19090e4d
Validity
Not Before: Oct 8 19:18:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a95e01cd68213897088c52f6b79ef6b8bcdce40f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:1c:08:80:e6:b2:87:92:a4:45:06:23:40:f3:
84:f2:53:be:07:60:7b:cc:2f:e8:62:58:4a:73:99:
b6:98:0d:c1:78:ee:67:f8:35:a7:73:73:98:0d:db:
b4:34:50:ad:e2:cc:9a:d4:0d:ef:2e:07:50:8a:c3:
30:f8:c0:16:2a:40:04:13:d8:0d:0c:63:53:af:6f:
83:e6:d3:06:2f:47:23:2e:c6:01:0d:1f:cf:b5:da:
f9:1e:b3:c9:78:d8:d6:e6:2c:a8:7a:9f:5d:80:00:
0f:b8:24:75:de:f4:e2:b6:d5:1a:2c:c5:93:8b:e5:
cf:62:c0:70:6e:de:41:be:1a:50:77:f9:4f:d3:61:
96:ab:da:bf:3e:05:a2:79:b0:b1:da:30:81:21:e3:
aa:9e:9b:77:4a:a7:f3:30:a3:3a:01:a5:48:8f:9a:
73:32:a8:4a:89:3d:dc:93:23:22:4a:c7:f4:15:2f:
0e:a1:6a:8b:bb:45:5d:e9:c8:68:25:6c:76:4c:08:
94:f2:eb:7c:23:f0:9f:e4:e4:3d:3d:db:c7:e5:af:
78:db:7e:2e:be:70:8c:e9:d8:a6:c9:d4:37:a3:cd:
ae:cc:5c:fa:1f:16:2e:3d:08:9e:95:26:98:b6:c8:
9b:3e:ba:f9:fd:34:91:fd:b9:da:7f:cb:6f:2a:20:
8e:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:5E:01:CD:68:21:38:97:08:8C:52:F6:B7:9E:F6:B8:BC:DC:E4:0F
X509v3 Authority Key Identifier:
keyid:C6:16:C4:19:51:52:EF:FE:DB:F7:B3:AF:EE:2A:A7:2E:19:09:0E:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xhbEGVFS7_7b97Ov7iqnLhkJDk0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/qV4BzWghOJcIjFL2t572uLzc5A8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/47/ad6521-d3a9-4b13-be69-39fdb986f059/1/xhbEGVFS7_7b97Ov7iqnLhkJDk0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.141.34.0/24
185.254.239.0/24
Signature Algorithm: sha256WithRSAEncryption
a0:31:29:e8:9e:0d:df:f6:7e:57:3b:bf:19:27:ff:4e:d7:40:
f3:a0:c6:75:37:01:7a:9c:eb:84:63:f7:66:bf:98:fa:3f:86:
6e:fd:4a:a0:9b:22:fc:a6:2f:d7:d7:f0:29:a5:84:bc:12:c0:
ac:eb:78:ea:46:2a:d6:f5:a0:04:14:cc:c4:fe:bd:4b:af:95:
fe:c6:b8:66:c2:fa:80:90:e1:14:4f:6c:f2:3d:43:d3:c1:5a:
56:09:e3:2c:de:50:1d:7e:f1:97:cd:ce:7f:7b:7b:10:66:05:
f7:85:fa:5e:10:69:5b:f8:b2:41:4a:9d:70:18:c6:c6:bf:62:
bc:84:d2:e8:b1:7e:3f:f6:b0:3d:8b:27:2e:bc:b0:98:fb:5d:
43:c2:20:ae:31:dd:60:c2:a6:e3:5d:cd:0b:e9:de:e0:1d:9c:
33:cc:47:2c:82:46:5b:0a:d3:61:58:99:7a:63:d0:28:f2:f2:
06:02:eb:9c:5d:e6:46:2a:87:d2:8d:27:8d:77:9e:3c:bd:77:
6d:9a:71:05:2a:59:d2:3d:b7:dd:21:8e:e5:34:f6:c7:4a:eb:
a2:9a:96:f3:56:b8:53:20:69:ba:f7:79:93:70:fc:01:d3:92:
55:5c:c9:07:3b:03:d4:cf:d9:44:a4:a8:b5:0f:d0:75:a6:e9:
7a:e6:62:23
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAaEc84+XBJa6uyV2H0Y/vGZOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2MTZjNDE5NTE1MmVmZmVkYmY3YjNhZmVlMmFhNzJlMTkw
OTBlNGQwHhcNMjYxMDA4MTkxODA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTVlMDFjZDY4MjEzODk3MDg4YzUyZjZiNzllZjZiOGJjZGNlNDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxBwIgOayh5KkRQYjQPOE8lO+B2B7
zC/oYlhKc5m2mA3BeO5n+DWnc3OYDdu0NFCt4sya1A3vLgdQisMw+MAWKkAEE9gN
DGNTr2+D5tMGL0cjLsYBDR/Ptdr5HrPJeNjW5iyoep9dgAAPuCR13vTittUaLMWT
i+XPYsBwbt5BvhpQd/lP02GWq9q/PgWiebCx2jCBIeOqnpt3SqfzMKM6AaVIj5pz
MqhKiT3ckyMiSsf0FS8OoWqLu0Vd6choJWx2TAiU8ut8I/Cf5OQ9PdvH5a94234u
vnCM6dimydQ3o82uzFz6HxYuPQielSaYtsibPrr5/TSR/bnaf8tvKiCOGwIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKleAc1oITiXCIxS9ree9ri83OQPMB8GA1UdIwQY
MBaAFMYWxBlRUu/+2/ezr+4qpy4ZCQ5NMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjkt
MzlmZGI5ODZmMDU5LzEvcVY0QnpXZ2hPSmNJakZMMnQ1NzJ1THpjNUE4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ny9hZDY1MjEtZDNhOS00YjEzLWJlNjktMzlmZGI5ODZmMDU5
LzEveGhiRUdWRlM3XzdiOTdPdjdpcW5MaGtKRGswLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAuY0iAwQA
uf7vMA0GCSqGSIb3DQEBCwUAA4IBAQCgMSnong3f9n5XO78ZJ/9O10DzoMZ1NwF6
nOuEY/dmv5j6P4Zu/UqgmyL8pi/X1/AppYS8EsCs63jqRirW9aAEFMzE/r1Lr5X+
xrhmwvqAkOEUT2zyPUPTwVpWCeMs3lAdfvGXzc5/e3sQZgX3hfpeEGlb+LJBSp1w
GMbGv2K8hNLosX4/9rA9iycuvLCY+11DwiCuMd1gwqbjXc0L6d7gHZwzzEcsgkZb
CtNhWJl6Y9Ao8vIGAuucXeZGKofSjSeNd548vXdtmnEFKlnSPbfdIY7lNPbHSuui
mpbzVrhTIGm693mTcPwB05JVXMkHOwPUz9lEpKi1D9B1pul65mIj
-----END CERTIFICATE-----
Generated at Wed Oct 21 21:12:58 2026 by rpki-client