Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qa_aJxOCl13PsQXpsP5FNrKM2As.roa
File: qa_aJxOCl13PsQXpsP5FNrKM2As.roa (raw, json)
Hash identifier: kSwyeYUOABGrstcus7SFDuODuA5nOVd5xi7W2l6sROo=
Subject key identifier: A9:AF:DA:27:13:82:97:5D:CF:B1:05:E9:B0:FE:45:36:B2:8C:D8:0B
Certificate issuer: /CN=7e20b034e2c497b1884488def106972704765029
Certificate serial: 01A118D4E0EC77D9AF74A70912201DA6A3A4
Authority key identifier: 7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qa_aJxOCl13PsQXpsP5FNrKM2As.roa
Signing time: Thu 08 Oct 2026 00:06:06 +0000
ROA not before: Thu 08 Oct 2026 00:06:06 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 174
IP address blocks: 82.110.120.0/22 maxlen: 24
87.86.160.0/22 maxlen: 24
212.134.168.0/23 maxlen: 24
217.204.10.0/24 maxlen: 24
217.204.12.0/24 maxlen: 24
217.204.14.0/24 maxlen: 24
217.204.15.0/24 maxlen: 24
217.204.32.0/24 maxlen: 24
217.204.33.0/24 maxlen: 24
217.204.35.0/24 maxlen: 24
217.204.60.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 Oct 2026 02:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:18:d4:e0:ec:77:d9:af:74:a7:09:12:20:1d:a6:a3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7e20b034e2c497b1884488def106972704765029
Validity
Not Before: Oct 8 00:06:06 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a9afda271382975dcfb105e9b0fe4536b28cd80b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:96:69:8c:a3:1c:b7:80:0a:05:2f:d0:16:0f:
fe:87:65:66:21:fc:86:fb:09:b2:60:41:e1:b7:88:
a0:5b:b9:d4:db:25:02:d1:36:36:d5:dd:b1:c7:7a:
81:a4:2f:8a:3c:53:fa:42:04:ef:d0:68:69:3e:5e:
9d:03:0f:b1:06:c8:30:14:db:12:1b:6f:6b:51:2c:
ec:b8:b5:64:cc:5c:e3:a2:19:38:69:ff:a8:18:35:
46:74:0b:2c:f7:78:5d:fd:3b:8c:1d:5c:05:15:ae:
be:68:50:36:70:aa:da:20:90:86:e0:a0:8f:cb:17:
51:7f:22:9e:06:59:db:ac:04:ab:74:3d:d6:af:59:
3a:b5:d2:45:40:32:b0:78:0d:f7:6a:c3:1f:d4:b0:
a2:92:39:16:6f:c8:7a:b3:1c:a8:0c:43:06:ac:3d:
05:95:c4:a6:a1:f2:ed:24:c9:51:b4:86:b4:d0:81:
a5:75:32:2d:fb:bb:2b:d5:ea:f1:18:52:54:41:6b:
14:44:92:16:93:22:a7:10:ab:f4:c7:95:87:93:21:
a7:72:54:ce:ca:6f:50:c8:8b:46:a2:c8:a5:05:cf:
6d:b7:53:56:cb:dc:2a:75:d2:70:89:39:3f:92:99:
7a:8d:e8:32:8a:1c:f2:ea:12:be:a1:3e:6e:58:c1:
41:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:AF:DA:27:13:82:97:5D:CF:B1:05:E9:B0:FE:45:36:B2:8C:D8:0B
X509v3 Authority Key Identifier:
keyid:7E:20:B0:34:E2:C4:97:B1:88:44:88:DE:F1:06:97:27:04:76:50:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fiCwNOLEl7GIRIje8QaXJwR2UCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/qa_aJxOCl13PsQXpsP5FNrKM2As.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/6b662d-02a1-46e7-b9cd-035d977f4216/1/fiCwNOLEl7GIRIje8QaXJwR2UCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
82.110.120.0/22
87.86.160.0/22
212.134.168.0/23
217.204.10.0/24
217.204.12.0/24
217.204.14.0/23
217.204.32.0/23
217.204.35.0/24
217.204.60.0/24
Signature Algorithm: sha256WithRSAEncryption
01:25:f3:ca:5a:fd:cc:76:8d:67:df:fe:65:af:7f:9c:18:dd:
e0:9d:74:98:85:24:98:4d:f7:0b:f7:71:e0:fa:69:ce:c5:96:
1e:07:f0:1d:47:37:86:08:73:10:c0:08:7b:10:8f:d8:e6:b1:
f0:ad:dc:39:b8:fc:33:75:1a:4a:fe:69:22:2c:52:d9:14:02:
58:72:a6:f3:90:34:9a:af:c6:6e:86:5b:0d:ab:60:46:26:fd:
61:ce:9d:36:80:6a:d5:b0:e8:cb:ee:96:1a:ef:dc:57:62:8c:
1e:8b:03:14:92:77:b1:62:e2:d3:35:a7:20:17:47:b4:a8:66:
23:7e:da:ce:e7:2f:27:2e:15:73:77:69:f7:80:e1:57:16:05:
d7:b5:23:16:97:0e:f9:2b:d6:cc:85:92:0d:02:0f:e8:d2:21:
03:c9:ec:e4:26:ff:0f:65:33:83:d5:0d:ab:24:79:c7:28:03:
85:a7:e3:0c:c1:60:b4:d2:a5:a3:c2:02:5a:cf:a4:ae:15:cd:
6f:1e:28:7d:99:0a:60:4a:2e:39:fe:ac:13:44:72:40:28:3a:
ca:5a:f6:d6:78:c7:05:b9:d0:a8:b1:dd:c4:48:ba:b1:65:6b:
78:89:bd:2e:ad:16:35:df:91:2a:98:94:60:84:1d:ae:7b:9a:
2e:8b:81:1f
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAaEY1ODsd9mvdKcJEiAdpqOkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdlMjBiMDM0ZTJjNDk3YjE4ODQ0ODhkZWYxMDY5NzI3MDQ3
NjUwMjkwHhcNMjYxMDA4MDAwNjA2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOWFmZGEyNzEzODI5NzVkY2ZiMTA1ZTliMGZlNDUzNmIyOGNkODBiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2JZpjKMct4AKBS/QFg/+h2VmIfyG
+wmyYEHht4igW7nU2yUC0TY21d2xx3qBpC+KPFP6QgTv0GhpPl6dAw+xBsgwFNsS
G29rUSzsuLVkzFzjohk4af+oGDVGdAss93hd/TuMHVwFFa6+aFA2cKraIJCG4KCP
yxdRfyKeBlnbrASrdD3Wr1k6tdJFQDKweA33asMf1LCikjkWb8h6sxyoDEMGrD0F
lcSmofLtJMlRtIa00IGldTIt+7sr1erxGFJUQWsURJIWkyKnEKv0x5WHkyGnclTO
ym9QyItGosilBc9tt1NWy9wqddJwiTk/kpl6jegyihzy6hK+oT5uWMFBJQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFKmv2icTgpddz7EF6bD+RTayjNgLMB8GA1UdIwQY
MBaAFH4gsDTixJexiESI3vEGlycEdlApMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2Qt
MDM1ZDk3N2Y0MjE2LzEvcWFfYUp4T0NsMTNQc1FYcHNQNUZOcktNMkFzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC82YjY2MmQtMDJhMS00NmU3LWI5Y2QtMDM1ZDk3N2Y0MjE2
LzEvZmlDd05PTEVsN0dJUklqZThRYVhKd1IyVUNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCUm54AwQC
V1agAwQB1IaoAwQA2cwKAwQA2cwMAwQB2cwOAwQB2cwgAwQA2cwjAwQA2cw8MA0G
CSqGSIb3DQEBCwUAA4IBAQABJfPKWv3Mdo1n3/5lr3+cGN3gnXSYhSSYTfcL93Hg
+mnOxZYeB/AdRzeGCHMQwAh7EI/Y5rHwrdw5uPwzdRpK/mkiLFLZFAJYcqbzkDSa
r8ZuhlsNq2BGJv1hzp02gGrVsOjL7pYa79xXYoweiwMUknexYuLTNacgF0e0qGYj
ftrO5y8nLhVzd2n3gOFXFgXXtSMWlw75K9bMhZINAg/o0iEDyezkJv8PZTOD1Q2r
JHnHKAOFp+MMwWC00qWjwgJaz6SuFc1vHih9mQpgSi45/qwTRHJAKDrKWvbWeMcF
udCosd3ESLqxZWt4ib0urRY135EqmJRghB2ue5oui4Ef
-----END CERTIFICATE-----
Generated at Sat Oct 10 12:52:43 2026 by rpki-client