Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/qICYlqQKnUp69sPFBkSudA-GEjQ.roa
File: qICYlqQKnUp69sPFBkSudA-GEjQ.roa (raw, json)
Hash identifier: lj3RVVuEbPd9/CqRy/WnF37Zb0OlvVGPlQOnHzEZNs8=
Subject key identifier: A8:80:98:96:A4:0A:9D:4A:7A:F6:C3:C5:06:44:AE:74:0F:86:12:34
Certificate issuer: /CN=7d502e2d24b1f216913088207a268e6626b0ce39
Certificate serial: 019EF0BFB23A1070DDC446C05709D2F10D8A
Authority key identifier: 7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/qICYlqQKnUp69sPFBkSudA-GEjQ.roa
Signing time: Mon 22 Jun 2026 19:12:35 +0000
ROA not before: Mon 22 Jun 2026 19:12:35 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 209505
IP address blocks: 185.250.8.0/22 maxlen: 22
185.250.8.0/24 maxlen: 24
185.250.9.0/24 maxlen: 24
185.250.10.0/23 maxlen: 23
195.10.233.0/24 maxlen: 24
2a0b:9400::/30 maxlen: 30
2a0b:9400:1000::/48 maxlen: 48
2a0b:9401::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 10 Jul 2026 05:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:f0:bf:b2:3a:10:70:dd:c4:46:c0:57:09:d2:f1:0d:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7d502e2d24b1f216913088207a268e6626b0ce39
Validity
Not Before: Jun 22 19:12:35 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8809896a40a9d4a7af6c3c50644ae740f861234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:2f:b3:67:e9:45:c9:8c:42:bc:f3:89:1b:76:
b8:3e:67:2a:13:91:0b:4e:41:ae:ea:70:29:1a:33:
56:3f:15:23:19:a2:88:84:ca:36:fb:ca:d5:f2:09:
61:35:ef:ac:20:44:8a:47:cd:bd:f8:d9:54:27:a6:
c6:2f:96:f5:82:7f:ea:a4:38:1e:6c:85:54:71:4d:
c3:31:5e:2b:98:8e:e3:f9:f9:c4:62:f0:44:8a:25:
83:a2:08:ad:ac:0b:74:39:a5:bf:d1:35:77:d5:72:
27:8f:31:6d:4b:96:45:59:e7:f6:27:5b:55:3e:f8:
23:52:ef:8d:81:b6:40:3c:79:fa:44:58:cb:37:f0:
61:32:07:13:00:62:da:6e:32:03:da:ec:b0:87:b2:
63:94:50:98:5a:de:e5:12:fd:41:b0:5a:a4:c8:47:
a8:39:7b:04:c8:bf:50:e4:38:c5:f7:6a:e2:19:5f:
93:8d:6c:c9:49:72:52:ff:ae:36:3c:a9:8e:2a:0a:
1f:18:8e:01:a4:13:d5:7d:6a:81:02:90:d7:4d:f2:
a5:c2:75:71:f5:04:ef:2c:c8:fb:2d:9d:d4:98:2a:
13:79:90:72:a9:d2:6f:60:32:b8:c7:6f:b1:2e:c6:
a8:2f:f5:8b:82:e2:b2:68:1c:b0:16:5b:0b:e9:66:
a4:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:80:98:96:A4:0A:9D:4A:7A:F6:C3:C5:06:44:AE:74:0F:86:12:34
X509v3 Authority Key Identifier:
keyid:7D:50:2E:2D:24:B1:F2:16:91:30:88:20:7A:26:8E:66:26:B0:CE:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fVAuLSSx8haRMIggeiaOZiawzjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/qICYlqQKnUp69sPFBkSudA-GEjQ.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/aa53cf-f988-40eb-8083-51d75568a9e3/1/fVAuLSSx8haRMIggeiaOZiawzjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.250.8.0/22
195.10.233.0/24
IPv6:
2a0b:9400::/30
Signature Algorithm: sha256WithRSAEncryption
7e:f7:2d:06:97:67:25:4d:a6:fa:7d:56:cd:db:c5:77:6c:28:
6a:e6:fe:17:5a:0d:dc:e6:06:40:15:55:97:f3:52:3b:d0:9f:
0f:38:dd:27:3a:ea:a2:c7:4d:57:09:8d:35:fc:4d:1d:6f:68:
21:f2:c7:ed:91:7b:4b:bb:29:5f:f7:a1:32:30:0a:64:bd:b0:
9c:cb:ad:26:51:36:07:d4:31:6d:5c:fe:9b:4f:ee:5b:1b:a8:
f9:4f:e4:0e:4a:9b:db:f5:a4:cd:cc:ed:b5:ff:21:1e:75:f6:
9a:05:66:30:db:6b:fb:83:97:2c:84:b2:09:d2:dd:0c:9e:85:
2e:4d:6b:86:58:a4:eb:f7:9a:59:cd:06:b6:a5:ae:6c:46:88:
79:9b:fd:17:c3:2b:3a:d1:70:11:61:86:ec:22:fb:8e:73:60:
ca:2a:7a:bf:fa:16:ff:91:7d:ec:9d:bb:4f:f9:53:d8:58:43:
a3:56:b7:6e:ed:72:28:64:4e:d4:56:db:b8:fa:5f:06:3b:4d:
c7:9a:aa:3a:76:bd:00:c2:91:75:ec:cd:15:b6:f7:1e:30:da:
63:d8:ee:0f:03:19:cd:05:d7:8c:ef:91:66:b0:a0:b5:9e:e5:
72:03:1d:17:47:8b:d7:e0:4e:be:40:88:a7:55:58:d3:f1:a0:
0a:f0:48:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jul 9 08:53:50 2026 by rpki-client