Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/qYRX3M3_LypSKK9F0SgvyfLS--s.roa
File: qYRX3M3_LypSKK9F0SgvyfLS--s.roa (raw, json)
Hash identifier: Mg/xiFNkEveDbvtZC57l3Qnip40P1VDuk1PEG3B2Wm4=
Subject key identifier: A9:84:57:DC:CD:FF:2F:2A:52:28:AF:45:D1:28:2F:C9:F2:D2:FB:EB
Certificate issuer: /CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Certificate serial: 01A1CA33959A1BF1ADB330EE1E1EBC8C7612
Authority key identifier: B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/qYRX3M3_LypSKK9F0SgvyfLS--s.roa
Signing time: Wed 11 Nov 2026 10:42:20 +0000
ROA not before: Wed 11 Nov 2026 10:42:20 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 396356
IP address blocks: 45.84.219.0/24 maxlen: 24
45.85.91.0/24 maxlen: 24
136.144.35.0/24 maxlen: 24
136.144.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.mft
rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Nov 2026 19:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ca:33:95:9a:1b:f1:ad:b3:30:ee:1e:1e:bc:8c:76:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b155009c3de421cc4e67b9a9ae423bb35de0b926
Validity
Not Before: Nov 11 10:42:20 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a98457dccdff2f2a5228af45d1282fc9f2d2fbeb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:e1:f5:bf:35:5f:57:52:b0:50:94:f7:b1:18:
17:19:19:0e:3e:9a:69:92:a3:e2:25:ce:7a:3e:c4:
a0:ba:f3:59:5f:78:a8:71:16:d2:73:39:1e:76:f2:
a4:8b:28:31:8e:28:a8:b1:b8:b2:bc:44:58:f8:34:
78:bc:b7:ef:7b:f8:f5:2e:4a:ce:6d:aa:af:55:64:
d0:71:31:7b:1f:ce:15:2b:34:11:9b:8f:0d:4e:fa:
70:3d:b1:65:51:6d:57:19:d8:58:d0:8c:6f:1e:21:
45:6e:7d:f0:88:eb:63:6a:92:78:7c:17:f4:e6:2a:
3c:9f:74:2b:d0:cf:76:89:70:24:5d:3e:90:30:39:
28:c2:85:6e:cd:c3:8b:ae:a7:f1:5b:f1:45:cc:39:
7c:00:44:48:53:05:b6:a9:56:f1:c5:41:07:70:6a:
fe:46:ce:0b:04:b1:85:16:21:38:22:9a:e5:53:44:
b1:90:92:ce:4f:3c:49:07:c3:64:b6:05:66:f1:01:
74:dc:66:f0:bd:8c:4b:4b:7e:9a:77:92:3d:55:ae:
0d:c5:15:a8:93:b4:60:ba:f5:93:23:c3:cb:31:8e:
94:d2:2d:cb:1d:f3:8e:2c:6b:f2:1f:c9:d6:7d:1d:
c1:e0:5a:3c:ab:8d:1c:46:2b:8e:f4:3a:fa:e6:74:
27:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:84:57:DC:CD:FF:2F:2A:52:28:AF:45:D1:28:2F:C9:F2:D2:FB:EB
X509v3 Authority Key Identifier:
keyid:B1:55:00:9C:3D:E4:21:CC:4E:67:B9:A9:AE:42:3B:B3:5D:E0:B9:26
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sVUAnD3kIcxOZ7mprkI7s13guSY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/qYRX3M3_LypSKK9F0SgvyfLS--s.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/de902c-3d13-47d1-a5e6-73856af49f3e/1/sVUAnD3kIcxOZ7mprkI7s13guSY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.84.219.0/24
45.85.91.0/24
136.144.35.0/24
136.144.43.0/24
Signature Algorithm: sha256WithRSAEncryption
7d:ac:86:40:08:07:2a:9f:36:a5:27:bf:02:67:a4:b1:ad:d8:
6d:64:9d:4f:83:eb:f3:af:28:26:a2:82:43:c5:c1:d1:00:b9:
31:b0:e6:4a:7b:74:4f:27:40:3a:7a:21:ef:31:40:cb:e0:8b:
4e:c5:ec:b8:88:00:e1:74:a8:13:c0:f3:6a:62:3f:0a:70:24:
a4:16:85:e6:95:47:b1:f0:2d:41:1a:e5:b9:0b:00:c9:c5:16:
66:33:53:06:d2:00:92:c6:3f:42:f1:96:08:c7:43:8e:7e:29:
1c:b1:62:53:e1:5e:5f:a9:22:3e:2a:e6:08:2c:5f:53:a2:c7:
9f:ef:35:06:19:5a:4f:b5:96:64:a7:c1:a7:81:6a:b4:17:c9:
16:8b:2b:2b:b7:73:ae:70:c9:0c:99:fe:7a:cd:7e:a7:03:cd:
0d:a7:fe:54:78:d0:de:0b:d5:5a:95:53:04:60:85:db:95:c4:
14:21:f6:01:ba:77:43:83:0a:52:ee:c8:8a:c4:75:75:28:ed:
17:bd:04:7a:2d:b4:56:ea:c7:77:23:e4:3c:05:7e:fb:c3:b6:
63:7d:ce:48:f6:01:c7:ec:aa:5f:ff:d9:47:50:88:d0:ba:51:
c5:a9:f6:ca:3b:ec:02:41:da:04:b9:6b:93:eb:26:27:82:f8:
0c:ae:44:f1
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaHKM5WaG/GtszDuHh68jHYSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNTUwMDljM2RlNDIxY2M0ZTY3YjlhOWFlNDIzYmIzNWRl
MGI5MjYwHhcNMjYxMTExMTA0MjIwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTg0NTdkY2NkZmYyZjJhNTIyOGFmNDVkMTI4MmZjOWYyZDJmYmViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwuH1vzVfV1KwUJT3sRgXGRkOPppp
kqPiJc56PsSguvNZX3iocRbSczkedvKkiygxjiiosbiyvERY+DR4vLfve/j1LkrO
baqvVWTQcTF7H84VKzQRm48NTvpwPbFlUW1XGdhY0IxvHiFFbn3wiOtjapJ4fBf0
5io8n3Qr0M92iXAkXT6QMDkowoVuzcOLrqfxW/FFzDl8AERIUwW2qVbxxUEHcGr+
Rs4LBLGFFiE4IprlU0SxkJLOTzxJB8NktgVm8QF03GbwvYxLS36ad5I9Va4NxRWo
k7RguvWTI8PLMY6U0i3LHfOOLGvyH8nWfR3B4Fo8q40cRiuO9Dr65nQnOQIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKmEV9zN/y8qUiivRdEoL8ny0vvrMB8GA1UdIwQY
MBaAFLFVAJw95CHMTme5qa5CO7Nd4LkmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYt
NzM4NTZhZjQ5ZjNlLzEvcVlSWDNNM19MeXBTS0s5RjBTZ3Z5ZkxTLS1zLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC9kZTkwMmMtM2QxMy00N2QxLWE1ZTYtNzM4NTZhZjQ5ZjNl
LzEvc1ZVQW5EM2tJY3hPWjdtcHJrSTdzMTNndVNZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQALVTbAwQA
LVVbAwQAiJAjAwQAiJArMA0GCSqGSIb3DQEBCwUAA4IBAQB9rIZACAcqnzalJ78C
Z6SxrdhtZJ1Pg+vzrygmooJDxcHRALkxsOZKe3RPJ0A6eiHvMUDL4ItOxey4iADh
dKgTwPNqYj8KcCSkFoXmlUex8C1BGuW5CwDJxRZmM1MG0gCSxj9C8ZYIx0OOfikc
sWJT4V5fqSI+KuYILF9Tosef7zUGGVpPtZZkp8GngWq0F8kWiysrt3OucMkMmf56
zX6nA80Np/5UeNDeC9ValVMEYIXblcQUIfYBundDgwpS7siKxHV1KO0XvQR6LbRW
6sd3I+Q8BX77w7Zjfc5I9gHH7Kpf/9lHUIjQulHFqfbKO+wCQdoEuWuT6yYngvgM
rkTx
-----END CERTIFICATE-----
Generated at Sat Nov 14 23:48:10 2026 by rpki-client