Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/qqVPSfbsPEwFQO2Ykr_lE0T_b-0.roa
File: qqVPSfbsPEwFQO2Ykr_lE0T_b-0.roa (raw, json)
Hash identifier: 0pnyO/lOa7rY/JjcyVln/fFFjvMVoH70v7nIsAxN04M=
Subject key identifier: AA:A5:4F:49:F6:EC:3C:4C:05:40:ED:98:92:BF:E5:13:44:FF:6F:ED
Certificate issuer: /CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Certificate serial: 019DAB4914F080E096057643DCB7EF8865A4
Authority key identifier: DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/qqVPSfbsPEwFQO2Ykr_lE0T_b-0.roa
Signing time: Mon 20 Apr 2026 14:26:26 +0000
ROA not before: Mon 20 Apr 2026 14:26:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 207990
IP address blocks: 46.232.208.0/23 maxlen: 32
185.246.172.0/22 maxlen: 32
2a09:77c0::/30 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.mft
rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 28 Apr 2026 08:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ab:49:14:f0:80:e0:96:05:76:43:dc:b7:ef:88:65:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df8f961c6efbb7f9ce74217b1d5dbb54e981c6f2
Validity
Not Before: Apr 20 14:26:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aaa54f49f6ec3c4c0540ed9892bfe51344ff6fed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:e0:e5:2e:64:e7:b1:d1:38:bf:4f:55:d2:6f:
8d:7b:a1:5c:78:df:ef:97:d9:c6:41:d8:8d:24:a1:
53:88:81:3a:de:0a:4c:93:a9:cc:7d:e4:0b:87:d6:
e8:99:3b:e0:1e:3e:ec:1c:d7:75:62:f1:d6:75:2c:
22:d4:15:90:f9:dd:cf:63:85:47:6b:11:53:c3:a5:
30:d8:75:43:35:fa:04:ef:1a:fe:a8:58:af:17:60:
ef:4c:8c:c7:39:c2:85:ba:1b:2c:55:f8:c6:91:95:
b4:48:d9:2c:7d:e1:14:08:6a:af:f4:ae:78:85:45:
84:92:38:b9:58:64:53:c5:1c:6a:b2:20:8f:75:88:
0a:a3:73:11:d5:fa:fe:6c:6c:85:d9:39:70:0f:59:
31:d8:8e:3d:64:80:74:22:3c:8f:17:70:d5:9c:7a:
28:00:7a:90:9b:30:9b:bb:cf:ff:eb:73:eb:ce:45:
51:10:97:52:a2:fe:b8:b6:a1:4b:ba:8d:09:d9:ba:
44:69:6e:c1:51:c8:ac:14:fc:1e:35:6e:12:a2:db:
92:6b:50:fe:22:e8:cc:08:9b:3a:d2:bf:c1:9d:47:
e2:11:3f:0d:b1:59:77:c8:df:81:8b:59:24:23:88:
bd:76:90:9d:e5:40:e1:7a:5e:0f:a5:30:fa:9d:44:
1a:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:A5:4F:49:F6:EC:3C:4C:05:40:ED:98:92:BF:E5:13:44:FF:6F:ED
X509v3 Authority Key Identifier:
keyid:DF:8F:96:1C:6E:FB:B7:F9:CE:74:21:7B:1D:5D:BB:54:E9:81:C6:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/34-WHG77t_nOdCF7HV27VOmBxvI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/qqVPSfbsPEwFQO2Ykr_lE0T_b-0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/90e70f-85dc-44a9-bb23-27f2bc162a07/1/34-WHG77t_nOdCF7HV27VOmBxvI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
46.232.208.0/23
185.246.172.0/22
IPv6:
2a09:77c0::/30
Signature Algorithm: sha256WithRSAEncryption
2e:4c:93:12:d6:9b:b8:e9:6c:a2:8f:7c:cc:77:ea:51:ff:59:
74:f6:29:93:31:da:ed:82:be:70:63:39:41:26:93:ba:e6:b9:
85:ae:ed:63:7b:1a:e4:05:62:02:73:1d:b6:f1:83:bf:66:90:
1e:df:c2:06:9d:b8:cb:b5:06:e7:18:39:35:7c:9a:09:a5:90:
71:d0:3b:ba:59:59:8d:8a:25:b8:b7:84:dd:42:89:e9:0a:22:
f2:0b:84:7d:d1:26:22:fc:3a:5e:e7:d7:08:55:3b:54:43:8f:
51:3c:3a:8f:00:11:e3:f0:75:c3:95:ab:0a:f2:7f:75:c2:bc:
17:9d:96:6b:dc:db:e4:8a:20:04:bc:da:e2:f0:5e:8d:f8:23:
ce:11:96:44:71:a8:36:e6:50:40:58:81:88:8a:93:63:90:44:
c3:29:76:c3:49:e7:a3:fa:f4:6c:72:ae:fa:83:ba:60:f3:28:
83:94:73:f0:d7:58:37:66:9a:a2:6f:39:9c:84:f3:54:09:51:
7f:3f:52:73:fc:02:35:5d:66:a7:26:2d:a3:1b:8b:7e:2e:71:
54:3d:c9:97:13:b8:27:ea:36:43:16:40:fb:3c:e5:fe:f7:ff:
37:3b:5a:71:78:c4:a3:a1:9b:6a:4b:1a:d3:ad:d3:2f:06:a4:
51:4c:ec:24
-----BEGIN CERTIFICATE-----
MIIFEjCCA/qgAwIBAgISAZ2rSRTwgOCWBXZD3LfviGWkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmOGY5NjFjNmVmYmI3ZjljZTc0MjE3YjFkNWRiYjU0ZTk4
MWM2ZjIwHhcNMjYwNDIwMTQyNjI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWE1NGY0OWY2ZWMzYzRjMDU0MGVkOTg5MmJmZTUxMzQ0ZmY2ZmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu+DlLmTnsdE4v09V0m+Ne6FceN/v
l9nGQdiNJKFTiIE63gpMk6nMfeQLh9bomTvgHj7sHNd1YvHWdSwi1BWQ+d3PY4VH
axFTw6Uw2HVDNfoE7xr+qFivF2DvTIzHOcKFuhssVfjGkZW0SNksfeEUCGqv9K54
hUWEkji5WGRTxRxqsiCPdYgKo3MR1fr+bGyF2TlwD1kx2I49ZIB0IjyPF3DVnHoo
AHqQmzCbu8//63PrzkVREJdSov64tqFLuo0J2bpEaW7BUcisFPweNW4SotuSa1D+
IujMCJs60r/BnUfiET8NsVl3yN+Bi1kkI4i9dpCd5UDhel4PpTD6nUQaewIDAQAB
o4ICHjCCAhowHQYDVR0OBBYEFKqlT0n27DxMBUDtmJK/5RNE/2/tMB8GA1UdIwQY
MBaAFN+Plhxu+7f5znQhex1du1TpgcbyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzQtV0hHNzd0X25PZENGN0hWMjdWT21CeHZJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi85MGU3MGYtODVkYy00NGE5LWJiMjMt
MjdmMmJjMTYyYTA3LzEvcXFWUFNmYnNQRXdGUU8yWWtyX2xFMFRfYi0wLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi85MGU3MGYtODVkYy00NGE5LWJiMjMtMjdmMmJjMTYyYTA3
LzEvMzQtV0hHNzd0X25PZENGN0hWMjdWT21CeHZJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBLujQAwQC
ufasMA0EAgACMAcDBQIqCXfAMA0GCSqGSIb3DQEBCwUAA4IBAQAuTJMS1pu46Wyi
j3zMd+pR/1l09imTMdrtgr5wYzlBJpO65rmFru1jexrkBWICcx228YO/ZpAe38IG
nbjLtQbnGDk1fJoJpZBx0Du6WVmNiiW4t4TdQonpCiLyC4R90SYi/Dpe59cIVTtU
Q49RPDqPABHj8HXDlasK8n91wrwXnZZr3NvkiiAEvNri8F6N+CPOEZZEcag25lBA
WIGIipNjkETDKXbDSeej+vRscq76g7pg8yiDlHPw11g3ZpqibzmchPNUCVF/P1Jz
/AI1XWanJi2jG4t+LnFUPcmXE7gn6jZDFkD7POX+9/83O1pxeMSjoZtqSxrTrdMv
BqRRTOwk
-----END CERTIFICATE-----
Generated at Mon Apr 27 13:23:13 2026 by rpki-client