Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/i_Qquj6nRcMisyx39z1OUJv2DJE.roa
File: i_Qquj6nRcMisyx39z1OUJv2DJE.roa (raw, json)
Hash identifier: OFGpzKu1pqQoshvsXPppirI5cw0o6HEcqfCjMg44qso=
Subject key identifier: 8B:F4:2A:BA:3E:A7:45:C3:22:B3:2C:77:F7:3D:4E:50:9B:F6:0C:91
Certificate issuer: /CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Certificate serial: 019DD976310E3E8A25F8D10F5F42E29750CE
Authority key identifier: 0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/i_Qquj6nRcMisyx39z1OUJv2DJE.roa
Signing time: Wed 29 Apr 2026 13:38:14 +0000
ROA not before: Wed 29 Apr 2026 13:38:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 58138
IP address blocks: 91.239.32.0/23 maxlen: 23
185.43.80.0/22 maxlen: 22
2a04:9040::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 17 May 2026 12:40:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d9:76:31:0e:3e:8a:25:f8:d1:0f:5f:42:e2:97:50:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ee3d4d810f2477841a8b85593b8f30e8aecd409
Validity
Not Before: Apr 29 13:38:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8bf42aba3ea745c322b32c77f73d4e509bf60c91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:14:c2:1a:8a:9c:5a:f3:66:80:fe:27:98:15:
4e:7c:ba:2c:7f:f4:69:b4:aa:08:1a:84:6d:7a:d4:
60:45:3a:c2:7c:40:27:52:4d:2d:be:f8:09:a9:5b:
6b:4d:49:fc:1e:97:46:fb:17:4a:be:95:a8:4a:de:
a3:3e:88:20:a4:c2:f9:22:8e:82:29:5b:f3:fc:1a:
bd:02:70:2c:d4:ed:c8:58:6a:f3:82:0b:fd:b8:d4:
30:c1:d0:db:5e:d0:1e:bc:2d:b7:84:af:ba:07:88:
41:bf:88:5b:c7:ab:ab:e4:3c:8a:68:23:2f:ca:0f:
5d:7b:01:58:28:d0:2f:d5:17:07:fa:82:d9:ad:d7:
e9:8b:4e:89:bd:94:3d:bf:52:a6:0b:83:c4:c1:91:
91:44:92:50:39:8c:b6:45:25:48:df:0f:e2:ba:84:
9c:7f:d3:21:17:9c:44:72:63:e3:6d:6d:71:47:dd:
c4:4c:db:38:d7:b9:ec:87:af:c6:39:04:70:0e:02:
2f:4a:6b:89:f2:26:f0:4c:2f:74:a5:30:29:28:cb:
98:54:26:dd:f6:f7:4c:40:e6:4a:d3:eb:9e:7e:f1:
cf:18:6d:9b:06:1f:ba:5b:14:c1:67:ba:70:ba:7e:
6d:6d:9c:a3:01:fb:6b:04:55:3b:0b:f2:7f:b0:ea:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:F4:2A:BA:3E:A7:45:C3:22:B3:2C:77:F7:3D:4E:50:9B:F6:0C:91
X509v3 Authority Key Identifier:
keyid:0E:E3:D4:D8:10:F2:47:78:41:A8:B8:55:93:B8:F3:0E:8A:EC:D4:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DuPU2BDyR3hBqLhVk7jzDors1Ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/i_Qquj6nRcMisyx39z1OUJv2DJE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/1bc6db-4576-4f1b-8672-c3326ad2cf8f/1/DuPU2BDyR3hBqLhVk7jzDors1Ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.239.32.0/23
185.43.80.0/22
IPv6:
2a04:9040::/29
Signature Algorithm: sha256WithRSAEncryption
4c:e0:b7:e5:fd:a5:4a:69:d3:33:27:15:bd:55:74:65:19:30:
70:8c:f7:ab:8e:b5:4f:81:90:b5:c8:96:da:75:91:64:23:c6:
80:18:50:43:06:1e:c7:9a:47:f9:53:5f:c2:55:60:53:bc:13:
76:ef:81:22:c2:dd:11:de:63:bf:c1:4d:8d:1f:3e:69:88:45:
e8:b6:36:91:2a:05:cb:96:ef:9c:a1:44:d5:68:7f:3f:22:22:
16:e3:2c:2a:4c:8b:20:68:df:e6:32:ac:cb:5a:26:a0:02:a5:
84:0e:4e:ab:a7:2e:0e:44:e9:24:9a:ca:25:e6:e7:0b:18:c3:
e2:61:70:02:95:2d:07:32:e8:c3:4a:87:08:88:87:a9:29:5a:
05:a6:a4:de:70:2b:39:f5:8d:06:62:24:d9:d3:d9:7e:fa:27:
41:2c:d0:60:3e:f5:2c:46:f1:64:3e:8f:44:85:6d:84:f1:11:
26:ad:12:c9:df:96:5e:7d:53:27:f9:64:fc:fc:c2:9f:ea:e2:
cb:72:f0:22:cd:53:d6:33:9e:70:a3:b4:10:b7:4b:40:01:a3:
6d:00:f4:d0:1a:e0:40:fa:b4:e9:a5:02:45:f5:99:bd:3b:bf:
14:fc:47:49:a4:3e:b2:ae:a9:f0:e7:30:c4:1a:ee:68:fc:d0:
7b:b1:81:cc
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ3ZdjEOPool+NEPX0Lil1DOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBlZTNkNGQ4MTBmMjQ3Nzg0MWE4Yjg1NTkzYjhmMzBlOGFl
Y2Q0MDkwHhcNMjYwNDI5MTMzODE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YmY0MmFiYTNlYTc0NWMzMjJiMzJjNzdmNzNkNGU1MDliZjYwYzkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RTCGoqcWvNmgP4nmBVOfLosf/Rp
tKoIGoRtetRgRTrCfEAnUk0tvvgJqVtrTUn8HpdG+xdKvpWoSt6jPoggpML5Io6C
KVvz/Bq9AnAs1O3IWGrzggv9uNQwwdDbXtAevC23hK+6B4hBv4hbx6ur5DyKaCMv
yg9dewFYKNAv1RcH+oLZrdfpi06JvZQ9v1KmC4PEwZGRRJJQOYy2RSVI3w/iuoSc
f9MhF5xEcmPjbW1xR93ETNs417nsh6/GOQRwDgIvSmuJ8ibwTC90pTApKMuYVCbd
9vdMQOZK0+uefvHPGG2bBh+6WxTBZ7pwun5tbZyjAftrBFU7C/J/sOrMDwIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFIv0Kro+p0XDIrMsd/c9TlCb9gyRMB8GA1UdIwQY
MBaAFA7j1NgQ8kd4Qai4VZO48w6K7NQJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRHVQVTJCRHlSM2hCcUxoVms3anpEb3JzMUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni8xYmM2ZGItNDU3Ni00ZjFiLTg2NzIt
YzMzMjZhZDJjZjhmLzEvaV9RcXVqNm5SY01pc3l4Mzl6MU9VSnYyREpFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni8xYmM2ZGItNDU3Ni00ZjFiLTg2NzItYzMzMjZhZDJjZjhm
LzEvRHVQVTJCRHlSM2hCcUxoVms3anpEb3JzMUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBW+8gAwQC
uStQMA0EAgACMAcDBQMqBJBAMA0GCSqGSIb3DQEBCwUAA4IBAQBM4Lfl/aVKadMz
JxW9VXRlGTBwjPerjrVPgZC1yJbadZFkI8aAGFBDBh7Hmkf5U1/CVWBTvBN274Ei
wt0R3mO/wU2NHz5piEXotjaRKgXLlu+coUTVaH8/IiIW4ywqTIsgaN/mMqzLWiag
AqWEDk6rpy4OROkkmsol5ucLGMPiYXAClS0HMujDSocIiIepKVoFpqTecCs59Y0G
YiTZ09l++idBLNBgPvUsRvFkPo9EhW2E8REmrRLJ35ZefVMn+WT8/MKf6uLLcvAi
zVPWM55wo7QQt0tAAaNtAPTQGuBA+rTppQJF9Zm9O78U/EdJpD6yrqnw5zDEGu5o
/NB7sYHM
-----END CERTIFICATE-----
Generated at Sat May 16 21:11:20 2026 by rpki-client