Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/qmCf1e-jWDmTm4raZ93mytx3rHI.roa
File: qmCf1e-jWDmTm4raZ93mytx3rHI.roa (raw, json)
Hash identifier: 7QJJv4V7oIAZ9vB/Q7ekKg4DrerzVkXar0li2MxwKbw=
Subject key identifier: AA:60:9F:D5:EF:A3:58:39:93:9B:8A:DA:67:DD:E6:CA:DC:77:AC:72
Certificate issuer: /CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Certificate serial: 01A1605371C0E677ADFE39C0FDB010164A43
Authority key identifier: 6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/qmCf1e-jWDmTm4raZ93mytx3rHI.roa
Signing time: Wed 21 Oct 2026 21:17:23 +0000
ROA not before: Wed 21 Oct 2026 21:17:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 21100
IP address blocks: 91.90.192.0/24 maxlen: 24
91.90.194.0/24 maxlen: 24
91.223.123.0/24 maxlen: 24
185.198.164.0/22 maxlen: 22
195.245.112.0/23 maxlen: 23
213.134.2.0/24 maxlen: 24
2001:67c:2f5c::/48 maxlen: 48
2a06:fcc0:3::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.mft
rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 26 Oct 2026 17:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:60:53:71:c0:e6:77:ad:fe:39:c0:fd:b0:10:16:4a:43
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6fccdffda6a4c48914b5e8cde7da5d820b9c9718
Validity
Not Before: Oct 21 21:17:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa609fd5efa35839939b8ada67dde6cadc77ac72
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:2c:3f:63:af:e3:c4:a4:e0:a1:65:41:72:a2:
c0:c6:23:30:37:e7:aa:70:66:00:f3:83:18:ab:a9:
89:c2:9a:a4:2b:f4:45:73:e8:8f:64:3b:c7:99:2a:
67:8d:4f:8e:d3:d7:69:f6:6b:32:a8:18:0f:4b:c7:
a7:ed:b1:45:ac:5b:0a:e7:04:4f:d2:18:b6:8c:e8:
04:26:4e:9e:42:23:0d:2e:a4:4f:85:31:b5:6c:9c:
2d:de:3f:c3:26:23:3e:72:eb:07:06:f1:39:3d:e1:
20:fe:e3:76:e7:2b:f5:c2:a1:25:12:50:4f:9a:92:
c0:b4:96:dd:dd:58:ec:ac:fa:24:db:db:6d:01:ed:
d6:7c:54:1c:64:d9:39:7a:ca:22:9a:6d:50:12:f6:
3c:43:94:99:02:1c:8e:b2:48:c3:57:c5:40:89:44:
af:35:50:32:b0:64:57:da:17:c3:52:bd:c9:de:c0:
f4:21:f1:34:bc:43:a2:f5:4a:0a:0b:7b:94:f3:f4:
70:0b:e4:06:ec:43:7b:38:08:5c:a6:e5:d2:73:cb:
bb:8d:b3:02:12:95:0f:5e:2a:90:f5:66:94:1b:46:
de:d1:8d:60:1c:b3:ac:8e:7c:b0:11:eb:e5:02:b1:
1c:24:0d:0a:2b:93:0d:95:13:80:4e:3e:0c:6d:3e:
4b:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:60:9F:D5:EF:A3:58:39:93:9B:8A:DA:67:DD:E6:CA:DC:77:AC:72
X509v3 Authority Key Identifier:
keyid:6F:CC:DF:FD:A6:A4:C4:89:14:B5:E8:CD:E7:DA:5D:82:0B:9C:97:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8zf_aakxIkUtejN59pdgguclxg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/qmCf1e-jWDmTm4raZ93mytx3rHI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/cb0153-803a-4bb6-b19d-a774e41d264c/1/b8zf_aakxIkUtejN59pdgguclxg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.90.192.0/24
91.90.194.0/24
91.223.123.0/24
185.198.164.0/22
195.245.112.0/23
213.134.2.0/24
IPv6:
2001:67c:2f5c::/48
2a06:fcc0:3::/48
Signature Algorithm: sha256WithRSAEncryption
60:78:05:5c:a2:c5:ca:1f:85:94:f3:41:fd:71:12:e6:a6:b8:
21:51:c2:7f:62:24:30:95:4f:c2:d9:f6:e3:0b:1d:45:bd:47:
e2:11:80:1c:e9:e9:8b:c4:9d:c1:f0:a8:a9:a8:82:24:b9:09:
32:89:06:d4:5f:6e:c9:5e:07:3d:45:71:08:d6:14:5b:92:2d:
24:e2:e8:a0:f1:98:86:44:86:a4:71:c9:47:6a:40:72:61:39:
be:76:ab:3a:35:b6:a6:d8:6d:e1:44:42:35:40:b9:93:4c:f2:
c6:65:c5:46:d9:98:47:cb:42:2c:1b:63:37:11:a0:3a:15:d7:
c3:df:0a:fc:a4:27:87:e5:84:7d:c3:75:36:65:6d:f9:de:c4:
a7:2f:45:c4:5e:04:7b:ba:9f:7b:72:4d:dc:5c:32:7b:1e:cc:
9f:67:72:11:e9:f6:1e:93:9e:72:fc:4c:dc:ce:d7:0b:f0:4a:
a2:a1:99:60:83:37:1b:51:63:74:5b:94:dd:86:5b:75:05:30:
b2:5b:e2:08:1b:be:05:67:f7:bb:e2:96:99:0d:5c:76:26:f0:
fb:8f:39:41:39:be:a3:c3:84:6f:06:4e:52:e0:c2:ce:0c:b1:
40:3c:c9:d4:ee:6b:08:eb:b3:dc:35:01:94:00:35:f8:23:eb:
cb:17:70:36
-----BEGIN CERTIFICATE-----
MIIFNTCCBB2gAwIBAgISAaFgU3HA5net/jnA/bAQFkpDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmY2NkZmZkYTZhNGM0ODkxNGI1ZThjZGU3ZGE1ZDgyMGI5
Yzk3MTgwHhcNMjYxMDIxMjExNzIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTYwOWZkNWVmYTM1ODM5OTM5YjhhZGE2N2RkZTZjYWRjNzdhYzcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyw/Y6/jxKTgoWVBcqLAxiMwN+eq
cGYA84MYq6mJwpqkK/RFc+iPZDvHmSpnjU+O09dp9msyqBgPS8en7bFFrFsK5wRP
0hi2jOgEJk6eQiMNLqRPhTG1bJwt3j/DJiM+cusHBvE5PeEg/uN25yv1wqElElBP
mpLAtJbd3VjsrPok29ttAe3WfFQcZNk5esoimm1QEvY8Q5SZAhyOskjDV8VAiUSv
NVAysGRX2hfDUr3J3sD0IfE0vEOi9UoKC3uU8/RwC+QG7EN7OAhcpuXSc8u7jbMC
EpUPXiqQ9WaUG0be0Y1gHLOsjnywEevlArEcJA0KK5MNlROATj4MbT5LNwIDAQAB
o4ICQTCCAj0wHQYDVR0OBBYEFKpgn9Xvo1g5k5uK2mfd5srcd6xyMB8GA1UdIwQY
MBaAFG/M3/2mpMSJFLXozefaXYILnJcYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQt
YTc3NGU0MWQyNjRjLzEvcW1DZjFlLWpXRG1UbTRyYVo5M215dHgzckhJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9jYjAxNTMtODAzYS00YmI2LWIxOWQtYTc3NGU0MWQyNjRj
LzEvYjh6Zl9hYWt4SWtVdGVqTjU5cGRnZ3VjbHhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFcGCCsGAQUFBwEHAQH/BEgwRjAqBAIAATAkAwQAW1rAAwQA
W1rCAwQAW997AwQCucakAwQBw/VwAwQA1YYCMBgEAgACMBIDBwAgAQZ8L1wDBwAq
BvzAAAMwDQYJKoZIhvcNAQELBQADggEBAGB4BVyixcofhZTzQf1xEuamuCFRwn9i
JDCVT8LZ9uMLHUW9R+IRgBzp6YvEncHwqKmogiS5CTKJBtRfbsleBz1FcQjWFFuS
LSTi6KDxmIZEhqRxyUdqQHJhOb52qzo1tqbYbeFEQjVAuZNM8sZlxUbZmEfLQiwb
YzcRoDoV18PfCvykJ4flhH3DdTZlbfnexKcvRcReBHu6n3tyTdxcMnsezJ9nchHp
9h6TnnL8TNzO1wvwSqKhmWCDNxtRY3RblN2GW3UFMLJb4ggbvgVn97vilpkNXHYm
8PuPOUE5vqPDhG8GTlLgws4MsUA8ydTuawjrs9w1AZQANfgj68sXcDY=
-----END CERTIFICATE-----
Generated at Mon Oct 26 02:16:26 2026 by rpki-client