Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/q7z-_g9KX26ZCoyk310fazxHgu4.roa
File: q7z-_g9KX26ZCoyk310fazxHgu4.roa (raw, json)
Hash identifier: i3apefuS2JrB3YfOznyuTACZobm/02Kv3FMxr+cXyGY=
Subject key identifier: AB:BC:FE:FE:0F:4A:5F:6E:99:0A:8C:A4:DF:5D:1F:6B:3C:47:82:EE
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 019FCBD7F56C29B2D0AC258AB5AB95FF2748
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/q7z-_g9KX26ZCoyk310fazxHgu4.roa
Signing time: Tue 04 Aug 2026 08:15:55 +0000
ROA not before: Tue 04 Aug 2026 08:15:55 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48806
IP address blocks: 45.83.188.0/22 maxlen: 24
45.154.139.0/24 maxlen: 24
89.36.36.0/24 maxlen: 24
89.38.38.0/24 maxlen: 24
89.46.46.0/24 maxlen: 24
185.51.193.0/24 maxlen: 24
185.51.194.0/23 maxlen: 23
185.114.60.0/22 maxlen: 22
188.208.38.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Sep 2026 13:57:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:cb:d7:f5:6c:29:b2:d0:ac:25:8a:b5:ab:95:ff:27:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Aug 4 08:15:55 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abbcfefe0f4a5f6e990a8ca4df5d1f6b3c4782ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:ab:da:df:4a:7a:fa:79:2c:8c:ed:03:06:00:
08:37:a5:0f:92:c9:0a:55:7b:57:34:23:2b:2f:a0:
06:d3:26:0e:45:bb:e1:96:b8:53:e6:51:b6:d8:29:
f3:bc:06:3d:42:06:e8:68:f5:65:7a:c2:d2:73:2e:
18:65:9e:f1:16:3f:09:f1:35:58:68:af:58:03:5a:
13:67:b2:e0:4b:da:fe:33:f0:23:7f:c5:6a:93:b4:
1e:b3:f6:0d:74:9e:fb:3b:f2:2e:25:88:72:f0:f9:
62:67:b9:83:6b:bb:33:fc:a2:e6:91:6d:b5:80:8f:
7e:d1:3e:01:3a:8d:14:5e:59:c5:94:79:06:5d:96:
9d:ca:75:3e:1c:c2:de:45:a7:e0:67:71:64:4f:46:
f5:6d:bf:36:fa:d9:04:c0:fd:a8:71:78:ce:83:38:
04:a0:7c:fc:bb:09:b2:c1:9b:c5:69:7d:9d:2c:80:
37:3a:e8:99:cf:05:45:63:f2:55:42:db:0a:8a:6e:
2a:80:06:e5:20:d3:74:6e:f1:8e:a5:65:f2:95:b8:
f0:78:5e:cc:4e:8a:16:53:f5:d0:b3:da:f1:cc:27:
a7:96:f1:cd:d5:6b:fc:eb:76:60:55:48:c5:89:7e:
d5:2d:21:24:3b:dc:d2:96:17:04:22:6c:89:0f:2e:
0a:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:BC:FE:FE:0F:4A:5F:6E:99:0A:8C:A4:DF:5D:1F:6B:3C:47:82:EE
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/q7z-_g9KX26ZCoyk310fazxHgu4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.83.188.0/22
45.154.139.0/24
89.36.36.0/24
89.38.38.0/24
89.46.46.0/24
185.51.193.0-185.51.195.255
185.114.60.0/22
188.208.38.0/23
Signature Algorithm: sha256WithRSAEncryption
4d:7e:29:de:b5:5a:62:d1:b2:5e:11:d5:24:24:6c:df:e0:15:
bf:d3:46:a8:67:81:bd:9a:92:d6:98:19:18:99:af:33:82:36:
aa:23:da:a0:c6:14:80:f4:f2:ea:f1:8b:0a:7b:a5:79:f8:93:
25:fb:8f:a2:ba:ab:90:00:51:36:cd:e8:6f:ff:30:94:ed:82:
6f:9a:d9:e7:9d:96:8d:9f:0b:bf:63:e0:96:40:c4:59:ef:55:
8b:ad:18:95:02:7b:d2:81:40:af:a2:11:7c:40:33:be:c2:c5:
df:ca:6a:2e:f2:48:a0:b5:a8:36:fb:42:36:5e:28:71:6e:80:
6a:09:0a:b0:04:5e:c0:2c:b8:ff:c2:6e:43:90:d3:4d:2a:33:
55:db:bf:a7:9a:e3:8c:5c:da:7a:c2:3d:da:2a:9f:1c:3a:2a:
bc:15:44:97:87:bf:f5:14:1e:16:38:9d:41:62:ad:e1:03:27:
88:d5:39:ad:61:47:1e:10:3e:5f:fc:e7:7e:99:c5:51:f6:9a:
85:be:96:ae:d7:0c:7c:c0:8b:7e:a5:46:9e:3d:b9:3f:0c:12:
63:48:05:d8:cb:6b:97:25:23:72:7c:a6:a4:73:9e:dd:52:62:
d4:90:3d:e8:66:3e:69:69:2d:44:ce:dc:85:15:00:61:31:1a:
10:78:93:43
-----BEGIN CERTIFICATE-----
MIIFLzCCBBegAwIBAgISAZ/L1/VsKbLQrCWKtauV/ydIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjYwODA0MDgxNTU1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmJjZmVmZTBmNGE1ZjZlOTkwYThjYTRkZjVkMWY2YjNjNDc4MmVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkKva30p6+nksjO0DBgAIN6UPkskK
VXtXNCMrL6AG0yYORbvhlrhT5lG22CnzvAY9QgboaPVlesLScy4YZZ7xFj8J8TVY
aK9YA1oTZ7LgS9r+M/Ajf8Vqk7Qes/YNdJ77O/IuJYhy8PliZ7mDa7sz/KLmkW21
gI9+0T4BOo0UXlnFlHkGXZadynU+HMLeRafgZ3FkT0b1bb82+tkEwP2ocXjOgzgE
oHz8uwmywZvFaX2dLIA3OuiZzwVFY/JVQtsKim4qgAblINN0bvGOpWXylbjweF7M
TooWU/XQs9rxzCenlvHN1Wv863ZgVUjFiX7VLSEkO9zSlhcEImyJDy4KGwIDAQAB
o4ICOzCCAjcwHQYDVR0OBBYEFKu8/v4PSl9umQqMpN9dH2s8R4LuMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvcTd6LV9nOUtYMjZaQ295azMxMGZhenhIZ3U0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFEGCCsGAQUFBwEHAQH/BEIwQDA+BAIAATA4AwQCLVO8AwQA
LZqLAwQAWSQkAwQAWSYmAwQAWS4uMAwDBAC5M8EDBAK5M8ADBAK5cjwDBAG80CYw
DQYJKoZIhvcNAQELBQADggEBAE1+Kd61WmLRsl4R1SQkbN/gFb/TRqhngb2aktaY
GRiZrzOCNqoj2qDGFID08urxiwp7pXn4kyX7j6K6q5AAUTbN6G//MJTtgm+a2eed
lo2fC79j4JZAxFnvVYutGJUCe9KBQK+iEXxAM77Cxd/Kai7ySKC1qDb7QjZeKHFu
gGoJCrAEXsAsuP/CbkOQ000qM1Xbv6ea44xc2nrCPdoqnxw6KrwVRJeHv/UUHhY4
nUFireEDJ4jVOa1hRx4QPl/8536ZxVH2moW+lq7XDHzAi36lRp49uT8MEmNIBdjL
a5clI3J8pqRznt1SYtSQPehmPmlpLUTO3IUVAGExGhB4k0M=
-----END CERTIFICATE-----
Generated at Thu Sep 3 22:28:59 2026 by rpki-client