Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/TDrwPz5cSUxFPnVvws0Z_s91Mkg.roa
File: TDrwPz5cSUxFPnVvws0Z_s91Mkg.roa (raw, json)
Hash identifier: 3eqyc2mDwFuCfQZiQCI5BqQ2pZcss/40LOFRlTEbAQg=
Subject key identifier: 4C:3A:F0:3F:3E:5C:49:4C:45:3E:75:6F:C2:CD:19:FE:CF:75:32:48
Certificate issuer: /CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Certificate serial: 019FA9012CB0D8FF77DD2593A12423F99D90
Authority key identifier: AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/TDrwPz5cSUxFPnVvws0Z_s91Mkg.roa
Signing time: Tue 28 Jul 2026 13:54:14 +0000
ROA not before: Tue 28 Jul 2026 13:54:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 201682
IP address blocks: 89.34.16.0/22 maxlen: 22
176.126.168.0/22 maxlen: 22
185.33.100.0/22 maxlen: 22
185.67.44.0/22 maxlen: 22
2a03:2420::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 04 Aug 2026 13:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:a9:01:2c:b0:d8:ff:77:dd:25:93:a1:24:23:f9:9d:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aa4aac1948cee23ddf4d715f803522f93b0cddb4
Validity
Not Before: Jul 28 13:54:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4c3af03f3e5c494c453e756fc2cd19fecf753248
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:a9:b4:db:66:24:52:d2:1c:13:95:9b:40:b1:
17:97:7b:5f:bc:cc:5e:d5:82:7c:47:44:61:98:8c:
ab:62:02:be:80:62:49:43:54:b6:c8:94:c2:e9:7b:
b2:ff:5e:d9:41:9d:b0:79:ee:38:01:61:9b:1e:f3:
3d:6e:bf:95:05:2b:3c:cc:d0:ab:42:3a:10:35:8e:
7e:b4:1d:92:c2:ce:db:70:ad:78:dd:ad:64:dc:17:
ad:fd:09:fe:a6:a3:49:78:c6:ca:d2:c6:72:63:ca:
51:99:03:17:38:83:7e:99:b1:46:69:33:32:17:7e:
e1:87:3e:fc:e4:c5:f6:78:52:8b:db:65:3b:3d:f7:
ae:37:c8:5a:65:61:5b:79:bc:64:f0:34:dd:c6:4d:
e8:be:56:3a:6f:89:aa:17:51:75:fc:2b:b5:23:88:
83:fc:5c:2b:b8:35:34:7e:76:f3:c2:d2:7c:3b:e8:
3f:e1:b0:03:b4:97:4a:c5:6d:12:c1:e2:36:86:12:
05:3a:31:36:f5:ba:f6:5f:75:8c:0a:c5:b7:37:05:
ab:7a:fe:e2:7c:b8:43:7c:eb:d8:bb:01:ae:de:a7:
23:b7:ab:e5:c6:bf:65:a6:48:43:47:00:53:f6:a8:
30:04:d6:fc:e5:e5:1a:1c:b8:c5:f0:12:0b:d4:e2:
0d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:3A:F0:3F:3E:5C:49:4C:45:3E:75:6F:C2:CD:19:FE:CF:75:32:48
X509v3 Authority Key Identifier:
keyid:AA:4A:AC:19:48:CE:E2:3D:DF:4D:71:5F:80:35:22:F9:3B:0C:DD:B4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/TDrwPz5cSUxFPnVvws0Z_s91Mkg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a2/06b241-6de7-485c-98ae-f9bd64ca6e4c/1/qkqsGUjO4j3fTXFfgDUi-TsM3bQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.34.16.0/22
176.126.168.0/22
185.33.100.0/22
185.67.44.0/22
IPv6:
2a03:2420::/32
Signature Algorithm: sha256WithRSAEncryption
43:c6:b8:1e:2a:9e:22:4d:82:b3:4d:df:e4:85:ec:6f:b6:2d:
b9:2e:93:19:26:29:20:2d:fb:92:5f:48:1e:26:b6:0a:a7:3d:
31:0b:91:fc:43:f0:76:ad:3d:28:6d:be:37:8b:ff:46:aa:6c:
93:ba:8c:8b:9f:f0:33:22:06:d0:9c:9b:c9:d3:ef:75:31:80:
10:f1:ea:ea:d4:25:a2:ff:a9:a4:cc:88:d4:89:2a:50:63:76:
b2:3a:3e:79:6c:a7:9e:86:c5:21:4a:1e:46:e6:97:e3:62:c7:
2d:08:84:fb:35:e5:48:69:82:01:67:f9:e4:91:7c:11:06:1b:
a0:9f:81:0d:d8:04:7d:f3:3b:e6:a9:27:c9:7c:16:8b:21:22:
8e:28:d6:1d:53:7f:0d:78:bf:7f:a7:fb:15:1b:0c:04:f9:e5:
e9:26:20:10:7e:5f:b8:b6:d4:10:a5:e7:89:ea:aa:9f:c9:98:
9f:b2:ec:c7:2b:3e:67:e2:a5:33:8d:23:d0:7a:d5:e0:6f:12:
0e:5a:8c:59:74:77:00:07:92:78:2f:e7:cc:bd:89:e6:38:06:
9a:27:a4:74:fe:64:c3:37:e5:78:db:78:0a:f6:7c:c5:01:9d:
fa:96:c3:91:5e:98:c4:5e:a8:26:a0:1e:c9:62:43:74:db:f7:
86:81:4a:4f
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAZ+pASyw2P933SWToSQj+Z2QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFhNGFhYzE5NDhjZWUyM2RkZjRkNzE1ZjgwMzUyMmY5M2Iw
Y2RkYjQwHhcNMjYwNzI4MTM1NDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YzNhZjAzZjNlNWM0OTRjNDUzZTc1NmZjMmNkMTlmZWNmNzUzMjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6m022YkUtIcE5WbQLEXl3tfvMxe
1YJ8R0RhmIyrYgK+gGJJQ1S2yJTC6Xuy/17ZQZ2wee44AWGbHvM9br+VBSs8zNCr
QjoQNY5+tB2Sws7bcK143a1k3Bet/Qn+pqNJeMbK0sZyY8pRmQMXOIN+mbFGaTMy
F37hhz785MX2eFKL22U7PfeuN8haZWFbebxk8DTdxk3ovlY6b4mqF1F1/Cu1I4iD
/FwruDU0fnbzwtJ8O+g/4bADtJdKxW0SweI2hhIFOjE29br2X3WMCsW3NwWrev7i
fLhDfOvYuwGu3qcjt6vlxr9lpkhDRwBT9qgwBNb85eUaHLjF8BIL1OINbwIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFEw68D8+XElMRT51b8LNGf7PdTJIMB8GA1UdIwQY
MBaAFKpKrBlIzuI9301xX4A1Ivk7DN20MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcWtxc0dVak80ajNmVFhGZmdEVWktVHNNM2JRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMi8wNmIyNDEtNmRlNy00ODVjLTk4YWUt
ZjliZDY0Y2E2ZTRjLzEvVERyd1B6NWNTVXhGUG5WdndzMFpfczkxTWtnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMi8wNmIyNDEtNmRlNy00ODVjLTk4YWUtZjliZDY0Y2E2ZTRj
LzEvcWtxc0dVak80ajNmVFhGZmdEVWktVHNNM2JRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQCWSIQAwQC
sH6oAwQCuSFkAwQCuUMsMA0EAgACMAcDBQAqAyQgMA0GCSqGSIb3DQEBCwUAA4IB
AQBDxrgeKp4iTYKzTd/khexvti25LpMZJikgLfuSX0geJrYKpz0xC5H8Q/B2rT0o
bb43i/9GqmyTuoyLn/AzIgbQnJvJ0+91MYAQ8erq1CWi/6mkzIjUiSpQY3ayOj55
bKeehsUhSh5G5pfjYsctCIT7NeVIaYIBZ/nkkXwRBhugn4EN2AR98zvmqSfJfBaL
ISKOKNYdU38NeL9/p/sVGwwE+eXpJiAQfl+4ttQQpeeJ6qqfyZifsuzHKz5n4qUz
jSPQetXgbxIOWoxZdHcAB5J4L+fMvYnmOAaaJ6R0/mTDN+V423gK9nzFAZ36lsOR
XpjEXqgmoB7JYkN02/eGgUpP
-----END CERTIFICATE-----
Generated at Mon Aug 3 15:24:24 2026 by rpki-client