Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/q4wW-YXv4K_Q2__Fto1OvGJawss.roa
File: q4wW-YXv4K_Q2__Fto1OvGJawss.roa (raw, json)
Hash identifier: jnTnq/LFPODqTvtlZrmgjvpj+t1fUdEjh4tvKg0JZjc=
Subject key identifier: AB:8C:16:F9:85:EF:E0:AF:D0:DB:FF:C5:B6:8D:4E:BC:62:5A:C2:CB
Certificate issuer: /CN=c6b619d4d1835745b04be9e44dab102d0614622f
Certificate serial: 019F23692C2DEBBFCBB2A1A001C6C5C80578
Authority key identifier: C6:B6:19:D4:D1:83:57:45:B0:4B:E9:E4:4D:AB:10:2D:06:14:62:2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/q4wW-YXv4K_Q2__Fto1OvGJawss.roa
Signing time: Thu 02 Jul 2026 15:18:42 +0000
ROA not before: Thu 02 Jul 2026 15:18:42 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 133499
IP address blocks: 80.240.116.0/22 maxlen: 32
80.240.120.0/22 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.mft
rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Jul 2026 17:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:69:2c:2d:eb:bf:cb:b2:a1:a0:01:c6:c5:c8:05:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c6b619d4d1835745b04be9e44dab102d0614622f
Validity
Not Before: Jul 2 15:18:42 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab8c16f985efe0afd0dbffc5b68d4ebc625ac2cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:e7:a2:cf:7d:7c:83:fe:59:4f:ff:90:60:72:
17:76:3e:87:66:5b:53:17:a9:51:fb:36:4c:97:e8:
5b:af:80:75:2e:96:69:c9:32:dd:5f:13:7c:28:aa:
47:09:a5:32:4b:ba:a3:2d:ec:a6:81:93:1e:b9:c9:
58:d2:e1:2d:d6:d1:6b:6b:3f:20:6e:d1:35:c5:92:
41:76:77:34:c3:e5:f1:d5:56:6c:18:f7:4e:97:69:
f1:e5:da:57:c0:9d:c2:10:7d:a7:b6:2d:f8:2f:79:
e9:b0:7d:07:c0:43:42:3f:39:f1:35:61:fe:8f:3d:
f8:81:87:b3:a0:9c:af:3c:f0:8b:fa:f7:2a:88:27:
05:b1:dd:a7:df:12:51:19:17:9a:dd:dc:2e:4e:7a:
9a:21:06:32:62:8d:82:fc:81:a3:7f:db:df:1b:8b:
2d:63:43:97:5b:b5:33:76:51:7d:3d:ec:4f:83:93:
11:3f:46:aa:2b:e0:d2:ff:4b:86:6f:f5:cc:4d:55:
5b:c5:1e:4e:bd:6f:87:71:7b:15:76:0f:d9:46:01:
3d:d8:66:f7:fe:28:45:e2:d4:9c:54:50:ea:cf:96:
9b:b8:f7:da:e3:b3:fd:22:c0:ff:77:ce:3b:73:29:
1c:6d:9b:8e:c1:f1:39:47:27:47:d6:c7:be:d6:17:
c2:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:8C:16:F9:85:EF:E0:AF:D0:DB:FF:C5:B6:8D:4E:BC:62:5A:C2:CB
X509v3 Authority Key Identifier:
keyid:C6:B6:19:D4:D1:83:57:45:B0:4B:E9:E4:4D:AB:10:2D:06:14:62:2F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xrYZ1NGDV0WwS-nkTasQLQYUYi8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/q4wW-YXv4K_Q2__Fto1OvGJawss.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/8f46be-028b-4d03-a973-fda011e5c972/1/xrYZ1NGDV0WwS-nkTasQLQYUYi8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.240.116.0-80.240.123.255
Signature Algorithm: sha256WithRSAEncryption
8c:0c:93:30:bf:5c:53:e3:e1:d3:7f:2e:fc:10:09:8e:ec:f5:
a4:de:e2:0c:70:43:38:e0:fe:0b:16:a6:6e:82:1c:e6:5b:00:
63:17:ac:44:d3:b8:c3:3a:bd:ab:c6:af:e7:9e:f9:d6:c6:99:
30:a5:ff:bc:54:c6:2e:2f:db:b3:38:f9:20:4b:65:66:43:f8:
68:78:c1:da:e5:90:e1:dd:44:93:af:7c:03:6f:62:2f:4e:3a:
f2:31:e8:d5:ca:8d:fb:87:3f:1d:64:d3:e4:46:ef:08:1b:2b:
59:15:85:f0:02:72:7b:73:79:35:7c:a0:86:b3:b5:48:9b:64:
41:a3:5f:4e:76:66:8d:35:a3:c3:67:f7:e0:6a:37:b6:ad:9d:
99:a7:f0:fb:46:7b:35:56:05:72:83:4c:b6:fc:d4:ee:2a:6b:
d8:cd:aa:57:6b:fd:59:33:fd:75:cc:57:b5:df:84:b2:38:dd:
ef:cd:5b:c5:25:52:6a:36:b4:2b:0f:77:60:81:93:9e:0b:ef:
4d:fd:97:86:29:f7:03:28:0f:3a:5a:df:19:9c:13:08:70:a0:
aa:48:d3:5e:13:43:eb:33:a1:61:62:1c:07:f9:5e:40:7e:28:
c3:fe:78:e0:7d:f0:04:90:90:f2:e4:cc:30:29:1a:94:d9:94:
8c:42:75:c1
-----BEGIN CERTIFICATE-----
MIIFBTCCA+2gAwIBAgISAZ8jaSwt67/LsqGgAcbFyAV4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM2YjYxOWQ0ZDE4MzU3NDViMDRiZTllNDRkYWIxMDJkMDYx
NDYyMmYwHhcNMjYwNzAyMTUxODQyWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjhjMTZmOTg1ZWZlMGFmZDBkYmZmYzViNjhkNGViYzYyNWFjMmNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAweeiz318g/5ZT/+QYHIXdj6HZltT
F6lR+zZMl+hbr4B1LpZpyTLdXxN8KKpHCaUyS7qjLeymgZMeuclY0uEt1tFraz8g
btE1xZJBdnc0w+Xx1VZsGPdOl2nx5dpXwJ3CEH2nti34L3npsH0HwENCPznxNWH+
jz34gYezoJyvPPCL+vcqiCcFsd2n3xJRGRea3dwuTnqaIQYyYo2C/IGjf9vfG4st
Y0OXW7UzdlF9PexPg5MRP0aqK+DS/0uGb/XMTVVbxR5OvW+HcXsVdg/ZRgE92Gb3
/ihF4tScVFDqz5abuPfa47P9IsD/d847cykcbZuOwfE5RydH1se+1hfCNQIDAQAB
o4ICETCCAg0wHQYDVR0OBBYEFKuMFvmF7+Cv0Nv/xbaNTrxiWsLLMB8GA1UdIwQY
MBaAFMa2GdTRg1dFsEvp5E2rEC0GFGIvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHJZWjFOR0RWMFd3Uy1ua1Rhc1FMUVlVWWk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMt
ZmRhMDExZTVjOTcyLzEvcTR3Vy1ZWHY0S19RMl9fRnRvMU92R0phd3NzLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy84ZjQ2YmUtMDI4Yi00ZDAzLWE5NzMtZmRhMDExZTVjOTcy
LzEveHJZWjFOR0RWMFd3Uy1ua1Rhc1FMUVlVWWk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCcGCCsGAQUFBwEHAQH/BBgwFjAUBAIAATAOMAwDBAJQ8HQD
BAJQ8HgwDQYJKoZIhvcNAQELBQADggEBAIwMkzC/XFPj4dN/LvwQCY7s9aTe4gxw
Qzjg/gsWpm6CHOZbAGMXrETTuMM6vavGr+ee+dbGmTCl/7xUxi4v27M4+SBLZWZD
+Gh4wdrlkOHdRJOvfANvYi9OOvIx6NXKjfuHPx1k0+RG7wgbK1kVhfACcntzeTV8
oIaztUibZEGjX052Zo01o8Nn9+BqN7atnZmn8PtGezVWBXKDTLb81O4qa9jNqldr
/Vkz/XXMV7XfhLI43e/NW8UlUmo2tCsPd2CBk54L7039l4Yp9wMoDzpa3xmcEwhw
oKpI014TQ+szoWFiHAf5XkB+KMP+eOB98ASQkPLkzDApGpTZlIxCdcE=
-----END CERTIFICATE-----
Generated at Sat Jul 18 03:24:59 2026 by rpki-client