Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/qPSlTWuBwEhYZesqn2vIMokA97I.roa
File: qPSlTWuBwEhYZesqn2vIMokA97I.roa (raw, json)
Hash identifier: +VxHS7EmR7QvgmKrejlLV1ZOVtujydoNhAoPrqYBYks=
Subject key identifier: A8:F4:A5:4D:6B:81:C0:48:58:65:EB:2A:9F:6B:C8:32:89:00:F7:B2
Certificate issuer: /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial: 019C284DC15246B6F75A8EA8FF818E5FF89F
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/qPSlTWuBwEhYZesqn2vIMokA97I.roa
Signing time: Wed 04 Feb 2026 10:58:30 +0000
ROA not before: Wed 04 Feb 2026 10:58:30 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 42550
IP address blocks: 46.30.220.0/24 maxlen: 24
2a04:f440::/29 maxlen: 29
2a0d:cc0::/29 maxlen: 29
2a0f:ccc0::/29 maxlen: 29
2a10:b740::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Mar 2026 13:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:28:4d:c1:52:46:b6:f7:5a:8e:a8:ff:81:8e:5f:f8:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Validity
Not Before: Feb 4 10:58:30 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8f4a54d6b81c0485865eb2a9f6bc8328900f7b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:51:14:df:25:0e:df:cc:9f:2c:23:41:c4:4a:
2b:d9:bf:7f:2a:a9:60:33:61:0b:71:39:82:ec:0a:
4c:b0:9e:3b:e2:9a:fb:c8:2e:d6:2d:32:65:8c:07:
a0:48:37:45:6c:6e:2b:c2:c9:ed:e3:e2:62:ee:8a:
f3:77:e8:e6:fc:7b:7f:ae:54:1e:8c:13:68:23:af:
eb:84:98:36:bf:6b:48:0e:36:0e:e6:0b:91:86:d5:
bc:28:a9:17:1b:95:1a:fc:57:43:b8:59:2d:69:7d:
cb:69:f8:28:8e:82:75:69:48:ad:61:ee:65:a6:1b:
a8:74:3c:af:b8:df:49:e8:73:22:c9:73:03:07:4f:
4f:f2:46:6a:35:fa:e3:c2:65:82:ff:fb:94:f0:21:
4c:1b:ab:4c:9a:d9:35:f4:27:b6:62:c7:16:70:95:
72:e2:13:f1:bb:9c:3a:82:fd:30:a9:27:71:20:6b:
64:09:2c:8a:5c:40:9f:a0:a1:6e:ae:f5:b8:a6:87:
a8:fb:6e:32:c0:88:e6:81:db:1e:83:b2:4c:2b:08:
a5:8d:09:ed:e1:6c:45:67:be:cd:1a:95:f6:7d:c4:
e5:25:d2:4f:92:93:de:24:3a:fb:fc:b4:b3:d2:95:
94:58:9f:4e:53:a6:b5:0a:ea:88:c3:39:1d:5b:0f:
07:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:F4:A5:4D:6B:81:C0:48:58:65:EB:2A:9F:6B:C8:32:89:00:F7:B2
X509v3 Authority Key Identifier:
keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/qPSlTWuBwEhYZesqn2vIMokA97I.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.30.220.0/24
IPv6:
2a04:f440::/29
2a0d:cc0::/29
2a0f:ccc0::/29
2a10:b740::/29
Signature Algorithm: sha256WithRSAEncryption
8f:a0:6c:9a:f5:6d:bb:cd:6f:9e:af:03:40:bd:77:b2:a2:3d:
68:9d:80:53:b9:c1:b4:82:a2:a9:d0:80:d8:7c:1e:a8:ec:09:
c8:73:45:2b:ed:23:f9:46:c0:09:78:c4:ba:6b:8d:e9:ee:65:
7b:c5:41:0e:81:10:da:0b:fe:56:d0:c7:45:d3:a8:3a:c1:ef:
b2:52:35:40:cd:95:7b:0a:ce:e1:d0:9c:e3:cc:18:d9:c6:09:
75:ec:11:26:9b:c8:ae:1c:a7:12:55:5a:31:bc:21:d1:1d:aa:
f6:05:59:62:62:9d:b3:df:df:5f:98:9f:3b:53:6f:8f:a7:a0:
bf:56:21:30:96:1e:99:11:b0:c3:be:37:f0:10:51:a7:dd:58:
c2:1f:34:1d:55:ae:6c:84:cc:7f:83:cc:b2:93:71:40:cd:db:
92:5d:66:29:3b:f5:95:18:01:4b:25:c1:86:d3:8f:4f:97:69:
7d:27:b4:e5:7e:67:56:13:fb:03:83:4d:97:90:99:53:c0:c5:
29:b0:9b:18:0e:96:c1:40:21:5e:43:e2:b7:39:af:a3:3f:12:
b8:3b:4b:4e:25:43:22:d0:fa:9d:13:18:81:50:3c:6b:48:c6:
2c:90:41:ec:43:23:39:38:23:1b:0d:d9:e3:d7:18:60:87:27:
0c:5e:f0:fd
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgISAZwoTcFSRrb3Wo6o/4GOX/ifMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMTQ4ZGI0MmY5MGU5NjQ0N2JkN2Y2M2VkZDhhN2NjYmVl
YWE4NDIwHhcNMjYwMjA0MTA1ODMwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGY0YTU0ZDZiODFjMDQ4NTg2NWViMmE5ZjZiYzgzMjg5MDBmN2IyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtFEU3yUO38yfLCNBxEor2b9/Kqlg
M2ELcTmC7ApMsJ474pr7yC7WLTJljAegSDdFbG4rwsnt4+Ji7orzd+jm/Ht/rlQe
jBNoI6/rhJg2v2tIDjYO5guRhtW8KKkXG5Ua/FdDuFktaX3LafgojoJ1aUitYe5l
phuodDyvuN9J6HMiyXMDB09P8kZqNfrjwmWC//uU8CFMG6tMmtk19Ce2YscWcJVy
4hPxu5w6gv0wqSdxIGtkCSyKXECfoKFurvW4poeo+24ywIjmgdseg7JMKwiljQnt
4WxFZ77NGpX2fcTlJdJPkpPeJDr7/LSz0pWUWJ9OU6a1CuqIwzkdWw8H/wIDAQAB
o4ICLTCCAikwHQYDVR0OBBYEFKj0pU1rgcBIWGXrKp9ryDKJAPeyMB8GA1UdIwQY
MBaAFHsUjbQvkOlkR71/Y+3Yp8y+6qhCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mMjQ4ODUtYTRkYi00ZmExLWE3MmQt
ODZkNmMxMzA1MzU3LzEvcVBTbFRXdUJ3RWhZWmVzcW4ydklNb2tBOTdJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mMjQ4ODUtYTRkYi00ZmExLWE3MmQtODZkNmMxMzA1MzU3
LzEvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEMGCCsGAQUFBwEHAQH/BDQwMjAMBAIAATAGAwQALh7cMCIE
AgACMBwDBQMqBPRAAwUDKg0MwAMFAyoPzMADBQMqELdAMA0GCSqGSIb3DQEBCwUA
A4IBAQCPoGya9W27zW+erwNAvXeyoj1onYBTucG0gqKp0IDYfB6o7AnIc0Ur7SP5
RsAJeMS6a43p7mV7xUEOgRDaC/5W0MdF06g6we+yUjVAzZV7Cs7h0JzjzBjZxgl1
7BEmm8iuHKcSVVoxvCHRHar2BVliYp2z399fmJ87U2+Pp6C/ViEwlh6ZEbDDvjfw
EFGn3VjCHzQdVa5shMx/g8yyk3FAzduSXWYpO/WVGAFLJcGG049Pl2l9J7TlfmdW
E/sDg02XkJlTwMUpsJsYDpbBQCFeQ+K3Oa+jPxK4O0tOJUMi0PqdExiBUDxrSMYs
kEHsQyM5OCMbDdnj1xhghycMXvD9
-----END CERTIFICATE-----
Generated at Fri Mar 13 20:17:06 2026 by rpki-client