Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/_RQQ5tVF2eFgG4W622rODRsfodw.roa
File: _RQQ5tVF2eFgG4W622rODRsfodw.roa (raw, json)
Hash identifier: tBfa8G6tBLKfwxInkvbCwg+hxTDjAv00awjpszqTn38=
Subject key identifier: FD:14:10:E6:D5:45:D9:E1:60:1B:85:BA:DB:6A:CE:0D:1B:1F:A1:DC
Certificate issuer: /CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Certificate serial: 019DD48BDDC3112619465CD6556291BCB33A
Authority key identifier: 75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/_RQQ5tVF2eFgG4W622rODRsfodw.roa
Signing time: Tue 28 Apr 2026 14:43:49 +0000
ROA not before: Tue 28 Apr 2026 14:43:49 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 3352
IP address blocks: 89.32.183.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.mft
rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 30 Apr 2026 13:39:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:d4:8b:dd:c3:11:26:19:46:5c:d6:55:62:91:bc:b3:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e05bc21b2a6f1033711ffca6491c6c30ce5a4a
Validity
Not Before: Apr 28 14:43:49 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=fd1410e6d545d9e1601b85badb6ace0d1b1fa1dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:b5:f9:03:ed:58:d4:59:8a:85:63:c5:c3:ca:
f2:a5:4a:f8:07:16:f8:ff:ba:14:c6:e4:9b:b3:b9:
92:2a:13:52:11:2f:ad:73:31:63:c3:83:81:c9:f5:
55:d1:6b:f0:55:bf:41:e4:b2:18:ba:33:18:3f:52:
cb:1e:b7:f3:d4:e1:c2:60:27:5b:71:cf:55:13:34:
46:e9:21:ab:37:3b:c1:d2:46:a2:36:be:5c:37:90:
59:d7:39:47:31:27:a9:0f:f9:f6:5b:8a:a5:ed:42:
d5:f4:9e:a0:fa:1e:76:9e:db:5d:69:18:ee:1b:42:
51:72:e5:53:19:b2:55:4c:aa:62:6e:de:50:18:ba:
cc:3f:f7:5d:7a:63:9c:85:e3:8f:f2:e2:ea:4b:72:
3a:3b:41:34:fd:90:21:f4:c4:92:a2:4d:2a:82:53:
64:44:44:69:f3:d5:16:9d:f8:ab:1d:ee:d2:5f:e5:
61:08:8b:7e:42:2e:da:9e:81:ec:ae:89:c0:7d:06:
a9:84:e9:bf:e3:34:24:27:20:1e:8a:67:89:97:30:
3a:0c:0c:49:a0:84:ff:60:6b:02:c6:16:3d:f1:b6:
12:b7:d3:31:b5:c9:2b:b0:52:1b:85:64:3f:4b:bd:
87:32:0c:c7:95:1e:6d:41:d9:c9:9e:ae:1c:f6:4f:
fc:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:14:10:E6:D5:45:D9:E1:60:1B:85:BA:DB:6A:CE:0D:1B:1F:A1:DC
X509v3 Authority Key Identifier:
keyid:75:E0:5B:C2:1B:2A:6F:10:33:71:1F:FC:A6:49:1C:6C:30:CE:5A:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deBbwhsqbxAzcR_8pkkcbDDOWko.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/_RQQ5tVF2eFgG4W622rODRsfodw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/2b4934-4ea2-45c1-ae07-d45ab7df2de1/1/deBbwhsqbxAzcR_8pkkcbDDOWko.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
89.32.183.0/24
Signature Algorithm: sha256WithRSAEncryption
a3:23:d0:04:1c:d3:ff:b0:8b:f4:6b:3c:f8:69:c3:74:36:60:
96:0e:8d:cc:f6:33:8d:40:0e:d3:ae:a2:dc:be:d1:b8:3d:9e:
64:de:a7:5f:4e:fd:3c:5f:06:38:21:7b:a9:dd:99:c3:df:ba:
8e:12:28:81:52:ee:4a:80:46:b2:5c:eb:cf:10:15:77:80:a3:
56:2c:ee:36:7f:0e:82:2a:db:43:5d:e7:5c:3f:01:bf:08:67:
70:ee:30:57:28:2b:90:01:05:1f:87:c0:e4:6c:ca:4e:11:97:
59:11:7b:20:aa:e3:65:34:48:b7:59:9f:fe:a0:0a:0d:18:19:
e6:5c:23:c2:83:16:da:26:fd:e8:68:55:a1:93:7b:46:11:c7:
a5:2e:c0:78:3b:56:19:73:9c:bc:6f:4b:cc:0a:f0:58:b1:d2:
5a:2c:8f:79:f2:b1:c1:6c:26:46:9d:2d:4b:a6:07:3f:50:7e:
88:19:39:3f:b6:7b:1b:89:36:11:0e:21:6b:51:34:a3:5e:74:
40:40:fd:02:b7:d3:d5:6e:5f:c0:a0:d5:a8:1c:4f:94:b8:fe:
57:d1:99:2d:27:40:fa:7c:52:b5:53:5d:b4:57:af:c1:80:24:
2d:3e:eb:4a:8c:f6:30:f6:58:a2:06:13:eb:40:50:01:1e:ce:
5c:09:98:27
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ3Ui93DESYZRlzWVWKRvLM6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZTA1YmMyMWIyYTZmMTAzMzcxMWZmY2E2NDkxYzZjMzBj
ZTVhNGEwHhcNMjYwNDI4MTQ0MzQ5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhmZDE0MTBlNmQ1NDVkOWUxNjAxYjg1YmFkYjZhY2UwZDFiMWZhMWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlLX5A+1Y1FmKhWPFw8rypUr4Bxb4
/7oUxuSbs7mSKhNSES+tczFjw4OByfVV0WvwVb9B5LIYujMYP1LLHrfz1OHCYCdb
cc9VEzRG6SGrNzvB0kaiNr5cN5BZ1zlHMSepD/n2W4ql7ULV9J6g+h52nttdaRju
G0JRcuVTGbJVTKpibt5QGLrMP/ddemOcheOP8uLqS3I6O0E0/ZAh9MSSok0qglNk
RERp89UWnfirHe7SX+VhCIt+Qi7anoHsronAfQaphOm/4zQkJyAeimeJlzA6DAxJ
oIT/YGsCxhY98bYSt9MxtckrsFIbhWQ/S72HMgzHlR5tQdnJnq4c9k/8MQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFP0UEObVRdnhYBuFuttqzg0bH6HcMB8GA1UdIwQY
MBaAFHXgW8IbKm8QM3Ef/KZJHGwwzlpKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDct
ZDQ1YWI3ZGYyZGUxLzEvX1JRUTV0VkYyZUZnRzRXNjIyck9EUnNmb2R3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8yYjQ5MzQtNGVhMi00NWMxLWFlMDctZDQ1YWI3ZGYyZGUx
LzEvZGVCYndoc3FieEF6Y1JfOHBra2NiRERPV2tvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAWSC3MA0G
CSqGSIb3DQEBCwUAA4IBAQCjI9AEHNP/sIv0azz4acN0NmCWDo3M9jONQA7TrqLc
vtG4PZ5k3qdfTv08XwY4IXup3ZnD37qOEiiBUu5KgEayXOvPEBV3gKNWLO42fw6C
KttDXedcPwG/CGdw7jBXKCuQAQUfh8DkbMpOEZdZEXsgquNlNEi3WZ/+oAoNGBnm
XCPCgxbaJv3oaFWhk3tGEcelLsB4O1YZc5y8b0vMCvBYsdJaLI958rHBbCZGnS1L
pgc/UH6IGTk/tnsbiTYRDiFrUTSjXnRAQP0Ct9PVbl/AoNWoHE+UuP5X0ZktJ0D6
fFK1U120V6/BgCQtPutKjPYw9liiBhPrQFABHs5cCZgn
-----END CERTIFICATE-----
Generated at Wed Apr 29 18:54:45 2026 by rpki-client