Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/rqm3VGL99bS6gXzHzKM3jKk2CPw.roa
File: rqm3VGL99bS6gXzHzKM3jKk2CPw.roa (raw, json)
Hash identifier: y6WkOsNV2X6oLb+/xZFlNJA0358pQJ+p4klD4GKZS8A=
Subject key identifier: AE:A9:B7:54:62:FD:F5:B4:BA:81:7C:C7:CC:A3:37:8C:A9:36:08:FC
Certificate issuer: /CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Certificate serial: 01A066358E0350E516D6AEF4B4C70A623AEA
Authority key identifier: D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/rqm3VGL99bS6gXzHzKM3jKk2CPw.roa
Signing time: Thu 03 Sep 2026 07:39:40 +0000
ROA not before: Thu 03 Sep 2026 07:39:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 5650
IP address blocks: 31.187.92.0/22 maxlen: 24
91.210.80.0/22 maxlen: 24
94.101.103.0/24 maxlen: 24
95.178.8.0/21 maxlen: 24
95.215.144.0/22 maxlen: 24
116.50.16.0/21 maxlen: 24
141.193.108.0/22 maxlen: 24
162.250.216.0/22 maxlen: 24
176.222.48.0/22 maxlen: 24
188.215.12.0/22 maxlen: 24
192.109.205.0/24 maxlen: 24
212.32.96.0/19 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Sep 2026 11:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:66:35:8e:03:50:e5:16:d6:ae:f4:b4:c7:0a:62:3a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d48a27f44b10404c52f6ffc4e08dc82bf8b5dee4
Validity
Not Before: Sep 3 07:39:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aea9b75462fdf5b4ba817cc7cca3378ca93608fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:c5:96:d9:74:8a:4d:41:08:61:80:0c:8a:55:
60:93:91:b7:e5:53:ed:97:33:28:a5:e9:6e:13:d3:
90:c4:6a:0c:cb:79:95:17:8d:76:dd:a9:85:e0:97:
76:56:ac:bd:d3:8c:58:24:21:72:b4:c5:c9:f9:32:
9b:d5:17:5a:05:26:fc:d2:be:c3:10:06:d8:34:22:
42:3b:ab:b2:58:c5:cd:6c:01:19:5b:b8:5c:3a:d4:
25:1d:27:52:35:c5:4e:20:40:f2:a9:2d:49:4a:c2:
cd:45:1d:94:5d:a0:13:61:7d:4d:89:51:e3:be:73:
5f:23:55:e4:ae:88:81:2b:51:d5:03:72:b6:9e:1c:
16:41:75:75:d4:cf:b3:34:3a:30:77:04:f5:ad:00:
7b:a6:a3:dc:39:5f:dc:2d:b5:14:2e:1f:ef:c4:8f:
e7:ef:aa:1a:0f:4c:b8:2b:fa:42:60:cb:39:a3:18:
e8:e6:52:94:93:8a:63:bb:c2:4f:7e:3f:4d:05:f4:
fb:f9:79:f9:f2:db:d5:aa:2d:56:d4:35:32:bd:0a:
08:87:38:73:67:cd:bf:95:37:0e:d5:b4:63:e8:77:
f1:74:4d:f7:70:cd:35:9e:1a:1a:b7:98:95:1b:e2:
cc:b7:85:c3:f8:08:7c:52:db:7b:bb:81:16:f5:4e:
84:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AE:A9:B7:54:62:FD:F5:B4:BA:81:7C:C7:CC:A3:37:8C:A9:36:08:FC
X509v3 Authority Key Identifier:
keyid:D4:8A:27:F4:4B:10:40:4C:52:F6:FF:C4:E0:8D:C8:2B:F8:B5:DE:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1Ion9EsQQExS9v_E4I3IK_i13uQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/rqm3VGL99bS6gXzHzKM3jKk2CPw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/4bb5a7-346c-4195-9d0f-59f5984b64ea/1/1Ion9EsQQExS9v_E4I3IK_i13uQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.187.92.0/22
91.210.80.0/22
94.101.103.0/24
95.178.8.0/21
95.215.144.0/22
116.50.16.0/21
141.193.108.0/22
162.250.216.0/22
176.222.48.0/22
188.215.12.0/22
192.109.205.0/24
212.32.96.0/19
Signature Algorithm: sha256WithRSAEncryption
2e:11:4d:88:58:24:37:ee:d7:6f:f8:1a:ee:b6:70:b4:7e:98:
5b:69:81:2f:68:87:29:f8:5e:70:c4:ff:c2:a8:fd:9b:b5:ed:
a0:f8:6a:23:2d:b0:8f:c5:ad:dd:39:95:ee:1f:f3:80:97:47:
de:60:7f:2d:dc:4e:85:a7:0f:ff:34:ac:de:86:26:3e:2a:57:
f9:3b:40:5c:3a:71:5c:41:2e:c7:f9:6c:61:66:fc:cd:90:5e:
04:92:e5:30:a6:40:82:bc:92:1d:ba:a8:df:12:0c:43:56:88:
71:69:6d:a3:8c:af:a6:4b:42:8c:22:f8:c8:c0:c3:f6:a6:1e:
1d:44:ba:d5:37:fd:30:11:52:72:17:a9:9d:47:3a:19:1c:ee:
91:9a:e3:f5:b3:87:24:54:d3:16:27:28:5a:78:05:7e:a8:2c:
33:56:7b:a8:7f:a6:85:d6:1a:90:99:77:94:6e:b6:2f:80:3f:
31:33:c1:e0:ce:37:dc:7e:6d:19:6a:2d:c7:9d:24:84:35:59:
17:9a:56:56:c0:6f:d2:49:f3:a8:9c:6e:3e:c7:0c:86:84:0a:
d1:c3:fd:d8:5b:86:be:56:8d:74:c8:24:0f:83:9e:39:03:86:
eb:60:b7:b2:59:c3:4e:74:f2:c2:4c:ca:1d:6c:79:e1:99:07:
b1:14:99:7a
-----BEGIN CERTIFICATE-----
MIIFPzCCBCegAwIBAgISAaBmNY4DUOUW1q70tMcKYjrqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0OGEyN2Y0NGIxMDQwNGM1MmY2ZmZjNGUwOGRjODJiZjhi
NWRlZTQwHhcNMjYwOTAzMDczOTQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZWE5Yjc1NDYyZmRmNWI0YmE4MTdjYzdjY2EzMzc4Y2E5MzYwOGZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA88WW2XSKTUEIYYAMilVgk5G35VPt
lzMopeluE9OQxGoMy3mVF4123amF4Jd2Vqy904xYJCFytMXJ+TKb1RdaBSb80r7D
EAbYNCJCO6uyWMXNbAEZW7hcOtQlHSdSNcVOIEDyqS1JSsLNRR2UXaATYX1NiVHj
vnNfI1XkroiBK1HVA3K2nhwWQXV11M+zNDowdwT1rQB7pqPcOV/cLbUULh/vxI/n
76oaD0y4K/pCYMs5oxjo5lKUk4pju8JPfj9NBfT7+Xn58tvVqi1W1DUyvQoIhzhz
Z82/lTcO1bRj6HfxdE33cM01nhoat5iVG+LMt4XD+Ah8Utt7u4EW9U6E8wIDAQAB
o4ICSzCCAkcwHQYDVR0OBBYEFK6pt1Ri/fW0uoF8x8yjN4ypNgj8MB8GA1UdIwQY
MBaAFNSKJ/RLEEBMUvb/xOCNyCv4td7kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYt
NTlmNTk4NGI2NGVhLzEvcnFtM1ZHTDk5YlM2Z1h6SHpLTTNqS2syQ1B3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS80YmI1YTctMzQ2Yy00MTk1LTlkMGYtNTlmNTk4NGI2NGVh
LzEvMUlvbjlFc1FRRXhTOXZfRTRJM0lLX2kxM3VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGEGCCsGAQUFBwEHAQH/BFIwUDBOBAIAATBIAwQCH7tcAwQC
W9JQAwQAXmVnAwQDX7IIAwQCX9eQAwQDdDIQAwQCjcFsAwQCovrYAwQCsN4wAwQC
vNcMAwQAwG3NAwQF1CBgMA0GCSqGSIb3DQEBCwUAA4IBAQAuEU2IWCQ37tdv+Bru
tnC0fphbaYEvaIcp+F5wxP/CqP2bte2g+GojLbCPxa3dOZXuH/OAl0feYH8t3E6F
pw//NKzehiY+Klf5O0BcOnFcQS7H+WxhZvzNkF4EkuUwpkCCvJIduqjfEgxDVohx
aW2jjK+mS0KMIvjIwMP2ph4dRLrVN/0wEVJyF6mdRzoZHO6RmuP1s4ckVNMWJyha
eAV+qCwzVnuof6aF1hqQmXeUbrYvgD8xM8Hgzjfcfm0Zai3HnSSENVkXmlZWwG/S
SfOonG4+xwyGhArRw/3YW4a+Vo10yCQPg545A4brYLeyWcNOdPLCTModbHnhmQex
FJl6
-----END CERTIFICATE-----
Generated at Fri Sep 4 22:17:55 2026 by rpki-client