Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/rKGQ7poojETPp4y6kBV03CAX_QU.roa
File: rKGQ7poojETPp4y6kBV03CAX_QU.roa (raw, json)
Hash identifier: MFAKwx/30b1lSDbBv7QTFqnX5FoVInm26iYIXMltgCI=
Subject key identifier: AC:A1:90:EE:9A:28:8C:44:CF:A7:8C:BA:90:15:74:DC:20:17:FD:05
Certificate issuer: /CN=07f231365985828d5a9663ed1b440624b24fec13
Certificate serial: 019F1D68049B8A629DF111B8A777D6935AD0
Authority key identifier: 07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/rKGQ7poojETPp4y6kBV03CAX_QU.roa
Signing time: Wed 01 Jul 2026 11:19:43 +0000
ROA not before: Wed 01 Jul 2026 11:19:43 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 36.255.94.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 08 Jul 2026 14:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:1d:68:04:9b:8a:62:9d:f1:11:b8:a7:77:d6:93:5a:d0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07f231365985828d5a9663ed1b440624b24fec13
Validity
Not Before: Jul 1 11:19:43 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aca190ee9a288c44cfa78cba901574dc2017fd05
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:b3:f6:9e:1a:8c:32:2a:c6:ad:67:13:6b:fd:
44:f0:bc:1a:3c:d5:7f:5b:d5:2e:fd:c3:21:d5:38:
5d:79:e9:f0:a9:b8:eb:7c:68:75:e2:fc:f2:92:bc:
37:82:68:e6:c6:1f:3f:83:d8:09:e1:91:13:c1:da:
68:59:b3:80:f1:83:a7:59:9b:c0:04:db:8b:48:a2:
a6:92:b9:43:7c:a0:13:5a:8e:25:23:3a:d1:6a:fd:
b0:c2:d7:d2:ec:45:e8:ff:13:f9:b3:b2:72:d1:56:
28:24:fd:8c:cc:14:a4:79:a6:84:81:f1:b4:b5:93:
a8:f5:4b:d4:cd:cc:85:73:80:d8:e6:b0:cb:1f:b7:
60:9b:88:7e:5d:c2:15:62:1a:91:7d:3f:4a:aa:e7:
3b:f4:d5:42:af:96:5f:0b:29:ce:64:a9:c7:32:28:
8d:c6:64:b6:9e:8d:9a:23:94:95:68:b2:5a:e1:fd:
d0:22:f0:ab:c1:72:91:45:86:ea:91:79:49:da:fe:
ed:2a:59:d9:78:89:6d:13:ac:9a:ba:ec:8d:f6:57:
80:59:c7:4e:bb:d6:50:85:f7:98:0b:15:79:61:a8:
fd:b4:2a:d6:16:7d:a4:59:72:3f:39:15:68:08:35:
21:09:c8:ef:7d:b8:c8:14:0b:ec:59:22:db:e6:3f:
2d:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:A1:90:EE:9A:28:8C:44:CF:A7:8C:BA:90:15:74:DC:20:17:FD:05
X509v3 Authority Key Identifier:
keyid:07:F2:31:36:59:85:82:8D:5A:96:63:ED:1B:44:06:24:B2:4F:EC:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_IxNlmFgo1almPtG0QGJLJP7BM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/rKGQ7poojETPp4y6kBV03CAX_QU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/ef5fb3-3e56-4b77-aac7-085fa0a56052/1/B_IxNlmFgo1almPtG0QGJLJP7BM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
36.255.94.0/23
Signature Algorithm: sha256WithRSAEncryption
2d:25:36:8a:c4:ab:19:8e:05:9e:3a:65:2f:ed:fd:77:e7:ae:
70:04:b1:bc:b2:cc:67:09:b9:90:ac:d4:28:66:35:19:c0:45:
21:91:0b:06:3e:df:7e:83:37:02:fd:25:d4:da:06:12:ee:39:
9a:b7:7a:36:48:62:cb:43:57:ad:b3:67:1e:06:28:f1:c7:7e:
37:14:ae:55:28:df:10:05:13:22:78:ff:70:e9:ed:85:e9:01:
8c:96:a5:c0:85:3a:66:90:d4:5d:f6:b3:fe:4a:5b:42:4f:72:
97:9c:be:f6:58:49:35:df:fe:97:1b:a3:57:99:4f:65:05:0a:
bb:3a:f8:d9:98:d9:92:bf:e1:f3:d3:6b:4d:a0:9f:f0:cb:40:
fe:ea:3a:ca:de:8c:2b:9d:e6:d8:8f:90:8c:1f:b6:f5:5d:ca:
81:4e:2f:cf:0e:b0:f0:ef:94:85:3f:a2:79:cf:1b:d3:66:8b:
eb:dc:ef:87:76:d8:b0:47:28:3d:3a:e9:22:a2:a2:e0:3a:a9:
ac:2a:1b:7d:19:3b:a6:80:35:25:51:85:b9:98:69:c3:a7:ad:
ad:62:9a:0e:d3:b9:7c:8d:8b:9f:32:e4:cb:23:d4:8b:0f:ec:
78:43:cb:ff:22:dd:ef:67:86:64:44:d9:b8:41:f8:52:96:23:
7e:81:a4:16
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8daASbimKd8RG4p3fWk1rQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZjIzMTM2NTk4NTgyOGQ1YTk2NjNlZDFiNDQwNjI0YjI0
ZmVjMTMwHhcNMjYwNzAxMTExOTQzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhY2ExOTBlZTlhMjg4YzQ0Y2ZhNzhjYmE5MDE1NzRkYzIwMTdmZDA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAobP2nhqMMirGrWcTa/1E8LwaPNV/
W9Uu/cMh1ThdeenwqbjrfGh14vzykrw3gmjmxh8/g9gJ4ZETwdpoWbOA8YOnWZvA
BNuLSKKmkrlDfKATWo4lIzrRav2wwtfS7EXo/xP5s7Jy0VYoJP2MzBSkeaaEgfG0
tZOo9UvUzcyFc4DY5rDLH7dgm4h+XcIVYhqRfT9Kquc79NVCr5ZfCynOZKnHMiiN
xmS2no2aI5SVaLJa4f3QIvCrwXKRRYbqkXlJ2v7tKlnZeIltE6yauuyN9leAWcdO
u9ZQhfeYCxV5Yaj9tCrWFn2kWXI/ORVoCDUhCcjvfbjIFAvsWSLb5j8tXQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKyhkO6aKIxEz6eMupAVdNwgF/0FMB8GA1UdIwQY
MBaAFAfyMTZZhYKNWpZj7RtEBiSyT+wTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzct
MDg1ZmEwYTU2MDUyLzEvcktHUTdwb29qRVRQcDR5NmtCVjAzQ0FYX1FVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9lZjVmYjMtM2U1Ni00Yjc3LWFhYzctMDg1ZmEwYTU2MDUy
LzEvQl9JeE5sbUZnbzFhbG1QdEcwUUdKTEpQN0JNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQBJP9eMA0G
CSqGSIb3DQEBCwUAA4IBAQAtJTaKxKsZjgWeOmUv7f13565wBLG8ssxnCbmQrNQo
ZjUZwEUhkQsGPt9+gzcC/SXU2gYS7jmat3o2SGLLQ1ets2ceBijxx343FK5VKN8Q
BRMieP9w6e2F6QGMlqXAhTpmkNRd9rP+SltCT3KXnL72WEk13/6XG6NXmU9lBQq7
OvjZmNmSv+Hz02tNoJ/wy0D+6jrK3owrnebYj5CMH7b1XcqBTi/PDrDw75SFP6J5
zxvTZovr3O+HdtiwRyg9OukioqLgOqmsKht9GTumgDUlUYW5mGnDp62tYpoO07l8
jYufMuTLI9SLD+x4Q8v/It3vZ4ZkRNm4QfhSliN+gaQW
-----END CERTIFICATE-----
Generated at Tue Jul 7 22:10:43 2026 by rpki-client