Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/Qaj8XrJL39gVPfuQvYiEccIv1TM.roa
File: Qaj8XrJL39gVPfuQvYiEccIv1TM.roa (raw, json)
Hash identifier: +YjoJNpJqyBfYGjUmNlUMkla8O1lDSOMg7Z6bqlGmyU=
Subject key identifier: 41:A8:FC:5E:B2:4B:DF:D8:15:3D:FB:90:BD:88:84:71:C2:2F:D5:33
Certificate issuer: /CN=f4a0d21b7d3b95b2ba49c93a21489a79a3a9f4df
Certificate serial: 019F0348E3BA5DC11E26F150BD5797378A09
Authority key identifier: F4:A0:D2:1B:7D:3B:95:B2:BA:49:C9:3A:21:48:9A:79:A3:A9:F4:DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9KDSG307lbK6Sck6IUiaeaOp9N8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/Qaj8XrJL39gVPfuQvYiEccIv1TM.roa
Signing time: Fri 26 Jun 2026 09:35:36 +0000
ROA not before: Fri 26 Jun 2026 09:35:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 50364
IP address blocks: 77.83.76.0/22 maxlen: 24
2a09:7d80::/29 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/9KDSG307lbK6Sck6IUiaeaOp9N8.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/9KDSG307lbK6Sck6IUiaeaOp9N8.mft
rsync://rpki.ripe.net/repository/DEFAULT/9KDSG307lbK6Sck6IUiaeaOp9N8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 30 Jun 2026 02:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:03:48:e3:ba:5d:c1:1e:26:f1:50:bd:57:97:37:8a:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4a0d21b7d3b95b2ba49c93a21489a79a3a9f4df
Validity
Not Before: Jun 26 09:35:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=41a8fc5eb24bdfd8153dfb90bd888471c22fd533
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:d1:49:5a:8a:35:50:da:0f:34:07:f4:f4:64:
77:cc:bc:e7:02:b6:91:cb:a3:ae:29:ea:26:1d:e7:
ee:66:f4:f5:0c:63:f7:14:eb:79:fb:7b:4f:e3:f4:
64:ed:8a:8d:da:39:8f:df:d5:5e:45:ea:b5:fe:99:
87:de:d3:6e:5d:db:6d:96:df:aa:7d:f8:83:fa:ab:
11:e1:09:c2:29:46:83:7e:5c:45:a8:de:5b:15:dc:
00:2c:79:61:f4:00:bd:17:f1:b4:6a:c1:be:a5:f1:
f3:56:ff:e0:98:7c:a0:d0:fb:02:64:96:1c:a6:78:
95:0a:1d:e4:27:60:8d:a5:6d:81:82:10:aa:9e:a4:
bb:47:29:b8:33:59:40:98:fc:c3:5c:d2:bf:cf:5a:
7e:34:13:e6:4d:5f:1e:75:2d:b3:8c:d1:46:79:a9:
4f:c0:ed:99:9a:22:dc:cc:56:6b:51:8e:4a:ca:c9:
fa:8a:27:f3:19:b7:4b:da:6a:18:b1:b9:9c:7b:34:
0a:79:d1:9c:12:88:52:f2:d4:18:85:1f:01:cf:da:
2f:8c:63:44:f6:7f:1d:4b:16:86:f8:0c:44:40:ce:
2f:88:d9:a9:92:68:15:0d:38:09:e0:28:b1:49:45:
33:78:73:be:70:3a:84:51:6a:94:1a:51:f2:0b:9a:
1d:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A8:FC:5E:B2:4B:DF:D8:15:3D:FB:90:BD:88:84:71:C2:2F:D5:33
X509v3 Authority Key Identifier:
keyid:F4:A0:D2:1B:7D:3B:95:B2:BA:49:C9:3A:21:48:9A:79:A3:A9:F4:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9KDSG307lbK6Sck6IUiaeaOp9N8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/Qaj8XrJL39gVPfuQvYiEccIv1TM.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/db3186-a7af-43b7-9703-93e1fd100172/1/9KDSG307lbK6Sck6IUiaeaOp9N8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
77.83.76.0/22
IPv6:
2a09:7d80::/29
Signature Algorithm: sha256WithRSAEncryption
77:51:65:3b:82:80:0a:a6:ab:2c:f4:9c:4c:d9:80:ae:35:fc:
ac:a7:08:f3:27:62:6d:9f:53:11:20:0f:7c:dd:e5:dc:c7:2a:
5d:90:f8:e5:06:81:83:53:f5:9e:30:b9:6c:17:77:72:ec:6a:
b5:20:02:84:b6:6b:72:0a:39:5f:23:ce:df:06:5a:f9:65:f6:
4f:ea:b6:5d:ee:e7:03:b8:2e:46:a3:1b:0d:0f:15:e9:37:f4:
31:78:10:35:08:6b:a6:f9:15:11:4a:28:37:02:ba:97:a3:79:
4e:bb:9e:f2:bb:3b:be:b5:dc:b5:04:5d:ae:7a:9b:12:ad:23:
b8:7b:d6:08:de:06:8e:ec:29:81:57:58:31:0b:28:a6:ba:de:
d2:25:fd:2c:68:08:c1:98:53:bc:2f:b6:eb:2e:a8:e3:a3:8b:
d5:38:1a:4a:27:0d:2e:56:9b:86:d9:4f:f1:7b:ac:a8:23:67:
52:32:dd:f3:a5:35:a2:45:92:f8:ff:35:cc:6e:b4:6e:bf:96:
a6:2c:d3:b1:9b:36:d1:e0:1b:e8:6b:01:0a:e7:83:ce:8a:ad:
69:e6:c2:f1:d5:29:c5:2a:56:0f:d7:5c:78:b7:21:90:72:35:
e6:d4:db:cc:4a:8b:7e:56:6d:30:5c:df:58:e5:34:4e:27:7f:
fb:6b:b3:f8
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAZ8DSOO6XcEeJvFQvVeXN4oJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0YTBkMjFiN2QzYjk1YjJiYTQ5YzkzYTIxNDg5YTc5YTNh
OWY0ZGYwHhcNMjYwNjI2MDkzNTM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MWE4ZmM1ZWIyNGJkZmQ4MTUzZGZiOTBiZDg4ODQ3MWMyMmZkNTMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArdFJWoo1UNoPNAf09GR3zLznAraR
y6OuKeomHefuZvT1DGP3FOt5+3tP4/Rk7YqN2jmP39VeReq1/pmH3tNuXdttlt+q
ffiD+qsR4QnCKUaDflxFqN5bFdwALHlh9AC9F/G0asG+pfHzVv/gmHyg0PsCZJYc
pniVCh3kJ2CNpW2BghCqnqS7Rym4M1lAmPzDXNK/z1p+NBPmTV8edS2zjNFGealP
wO2ZmiLczFZrUY5Kysn6iifzGbdL2moYsbmcezQKedGcEohS8tQYhR8Bz9ovjGNE
9n8dSxaG+AxEQM4viNmpkmgVDTgJ4CixSUUzeHO+cDqEUWqUGlHyC5odvQIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEGo/F6yS9/YFT37kL2IhHHCL9UzMB8GA1UdIwQY
MBaAFPSg0ht9O5WyuknJOiFImnmjqfTfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOUtEU0czMDdsYks2U2NrNklVaWFlYU9wOU44LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9kYjMxODYtYTdhZi00M2I3LTk3MDMt
OTNlMWZkMTAwMTcyLzEvUWFqOFhySkwzOWdWUGZ1UXZZaUVjY0l2MVRNLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9kYjMxODYtYTdhZi00M2I3LTk3MDMtOTNlMWZkMTAwMTcy
LzEvOUtEU0czMDdsYks2U2NrNklVaWFlYU9wOU44LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCTVNMMA0E
AgACMAcDBQMqCX2AMA0GCSqGSIb3DQEBCwUAA4IBAQB3UWU7goAKpqss9JxM2YCu
NfyspwjzJ2Jtn1MRIA983eXcxypdkPjlBoGDU/WeMLlsF3dy7Gq1IAKEtmtyCjlf
I87fBlr5ZfZP6rZd7ucDuC5GoxsNDxXpN/QxeBA1CGum+RURSig3ArqXo3lOu57y
uzu+tdy1BF2uepsSrSO4e9YI3gaO7CmBV1gxCyimut7SJf0saAjBmFO8L7brLqjj
o4vVOBpKJw0uVpuG2U/xe6yoI2dSMt3zpTWiRZL4/zXMbrRuv5amLNOxmzbR4Bvo
awEK54POiq1p5sLx1SnFKlYP11x4tyGQcjXm1NvMSot+Vm0wXN9Y5TROJ3/7a7P4
-----END CERTIFICATE-----
Generated at Mon Jun 29 10:35:28 2026 by rpki-client