Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/nqNiVlcnTsEAzaX737y8-4ABceE.roa
File: nqNiVlcnTsEAzaX737y8-4ABceE.roa (raw, json)
Hash identifier: exmeRmprROseDzh2DPQ445sV4HkcVczO7R6fRKpDb0E=
Subject key identifier: 9E:A3:62:56:57:27:4E:C1:00:CD:A5:FB:DF:BC:BC:FB:80:01:71:E1
Certificate issuer: /CN=69fa2623b222d08d9356975044b9407b5fea48ba
Certificate serial: 019F23686857DDA461AC482B3B043DFFF846
Authority key identifier: 69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/nqNiVlcnTsEAzaX737y8-4ABceE.roa
Signing time: Thu 02 Jul 2026 15:17:52 +0000
ROA not before: Thu 02 Jul 2026 15:17:52 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 206446
IP address blocks: 189.74.107.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.mft
rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 22 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:68:57:dd:a4:61:ac:48:2b:3b:04:3d:ff:f8:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69fa2623b222d08d9356975044b9407b5fea48ba
Validity
Not Before: Jul 2 15:17:52 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=9ea3625657274ec100cda5fbdfbcbcfb800171e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:e9:16:5b:37:a7:4f:ff:cd:45:08:ba:4c:8e:
17:8c:e0:eb:64:ed:e2:35:3d:41:ac:7c:8e:f6:80:
01:08:a3:50:0c:40:b2:59:d9:25:df:4f:28:31:fe:
d8:07:a7:56:e0:93:ac:e6:50:15:6d:3a:6e:06:b0:
b0:32:34:67:20:f5:f3:2f:71:92:ad:34:20:59:b5:
82:92:e6:12:28:3d:9c:a4:ab:a9:a8:9c:38:00:59:
4d:b3:4b:eb:4c:07:07:7a:86:22:07:16:ab:d1:74:
96:cd:d7:ae:7b:f1:64:27:7a:49:8d:5d:9d:f5:95:
79:45:6a:c5:fe:82:72:52:84:3a:3d:00:3e:11:68:
7b:ee:ef:ab:aa:1d:1a:02:56:75:8f:35:b9:5a:41:
ea:75:3c:6e:48:d9:63:cd:3e:f8:68:00:58:30:2c:
df:36:13:b9:2b:50:41:1e:d4:c1:1e:51:7b:05:f8:
f6:99:ad:98:e2:03:7e:76:a8:81:1e:b0:39:06:38:
3a:58:2b:11:f4:aa:b6:d0:85:c9:21:55:ae:ef:ba:
94:ce:ea:f2:a3:69:83:1b:c7:48:2e:cc:3f:5b:55:
88:4a:09:2d:bb:69:6f:fe:64:75:99:2e:2b:1f:dc:
8b:bc:3e:92:c0:4e:3b:21:7f:60:cd:0f:37:81:56:
a4:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:A3:62:56:57:27:4E:C1:00:CD:A5:FB:DF:BC:BC:FB:80:01:71:E1
X509v3 Authority Key Identifier:
keyid:69:FA:26:23:B2:22:D0:8D:93:56:97:50:44:B9:40:7B:5F:EA:48:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/afomI7Ii0I2TVpdQRLlAe1_qSLo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/nqNiVlcnTsEAzaX737y8-4ABceE.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/ddb424-7eb2-495e-8bb6-72fb97d59ce4/1/afomI7Ii0I2TVpdQRLlAe1_qSLo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
189.74.107.0/24
Signature Algorithm: sha256WithRSAEncryption
57:bd:87:31:c8:ca:5f:3d:8f:6d:7f:77:06:89:93:3b:0b:bd:
2f:d8:d6:b5:fd:c8:ac:d9:61:4e:30:bd:0d:78:91:fe:e9:f7:
1a:64:ef:24:6a:ef:00:9a:79:87:8a:6c:95:14:31:ff:be:a6:
69:2d:d6:aa:bb:37:87:24:e8:f6:43:7c:7f:bd:6d:df:f4:f3:
88:34:73:5b:27:ef:ac:9f:29:6e:d8:9c:d1:ef:34:71:e6:d5:
3d:be:e9:dc:24:89:15:e4:13:1a:5b:e7:e1:44:06:23:c6:ba:
65:f4:06:99:11:64:82:d2:46:a5:25:1a:02:c3:42:f1:ca:90:
f4:2c:47:28:3e:2d:4a:75:42:c1:e8:9e:8d:82:63:02:b9:79:
33:6b:67:78:ae:c1:a5:76:38:a4:dd:34:fa:fa:95:25:8b:1b:
02:cc:53:da:55:e3:46:09:da:3a:08:7d:74:5c:46:ae:8e:6e:
60:91:f4:0a:be:d4:a4:94:40:08:7b:8f:74:81:05:b5:34:dc:
85:f5:dc:89:08:11:47:1b:34:44:77:b4:b8:3d:c8:9a:4a:c9:
5c:23:27:a4:c1:ea:04:c0:30:21:21:b0:43:ee:36:8e:c3:4a:
0f:e1:c1:9c:ff:98:9e:9a:ce:b8:1f:7a:65:05:95:cc:8d:9c:
18:7c:f0:96
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaGhX3aRhrEgrOwQ9//hGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZmEyNjIzYjIyMmQwOGQ5MzU2OTc1MDQ0Yjk0MDdiNWZl
YTQ4YmEwHhcNMjYwNzAyMTUxNzUyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg5ZWEzNjI1NjU3Mjc0ZWMxMDBjZGE1ZmJkZmJjYmNmYjgwMDE3MWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArukWWzenT//NRQi6TI4XjODrZO3i
NT1BrHyO9oABCKNQDECyWdkl308oMf7YB6dW4JOs5lAVbTpuBrCwMjRnIPXzL3GS
rTQgWbWCkuYSKD2cpKupqJw4AFlNs0vrTAcHeoYiBxar0XSWzdeue/FkJ3pJjV2d
9ZV5RWrF/oJyUoQ6PQA+EWh77u+rqh0aAlZ1jzW5WkHqdTxuSNljzT74aABYMCzf
NhO5K1BBHtTBHlF7Bfj2ma2Y4gN+dqiBHrA5Bjg6WCsR9Kq20IXJIVWu77qUzury
o2mDG8dILsw/W1WISgktu2lv/mR1mS4rH9yLvD6SwE47IX9gzQ83gVakowIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFJ6jYlZXJ07BAM2l+9+8vPuAAXHhMB8GA1UdIwQY
MBaAFGn6JiOyItCNk1aXUES5QHtf6ki6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYt
NzJmYjk3ZDU5Y2U0LzEvbnFOaVZsY25Uc0VBemFYNzM3eTgtNEFCY2VFLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC9kZGI0MjQtN2ViMi00OTVlLThiYjYtNzJmYjk3ZDU5Y2U0
LzEvYWZvbUk3SWkwSTJUVnBkUVJMbEFlMV9xU0xvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAvUprMA0G
CSqGSIb3DQEBCwUAA4IBAQBXvYcxyMpfPY9tf3cGiZM7C70v2Na1/cis2WFOML0N
eJH+6fcaZO8kau8AmnmHimyVFDH/vqZpLdaquzeHJOj2Q3x/vW3f9POINHNbJ++s
nylu2JzR7zRx5tU9vuncJIkV5BMaW+fhRAYjxrpl9AaZEWSC0kalJRoCw0LxypD0
LEcoPi1KdULB6J6NgmMCuXkza2d4rsGldjik3TT6+pUlixsCzFPaVeNGCdo6CH10
XEaujm5gkfQKvtSklEAIe490gQW1NNyF9dyJCBFHGzREd7S4PciaSslcIyekweoE
wDAhIbBD7jaOw0oP4cGc/5iems64H3plBZXMjZwYfPCW
-----END CERTIFICATE-----
Generated at Tue Jul 21 14:27:06 2026 by rpki-client