Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/qF1M2XFi5y1l08ioMUd4lkYvVeo.roa
File: qF1M2XFi5y1l08ioMUd4lkYvVeo.roa (raw, json)
Hash identifier: gdBUqWhk1EMJwQ/Ax3tsMp26Twn14+T6mJIn/33f00g=
Subject key identifier: A8:5D:4C:D9:71:62:E7:2D:65:D3:C8:A8:31:47:78:96:46:2F:55:EA
Certificate issuer: /CN=6816171b3f91b1d10b0445987f611428abf13e1a
Certificate serial: 01A15D9AB98664905D5804371E349D708B98
Authority key identifier: 68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/qF1M2XFi5y1l08ioMUd4lkYvVeo.roa
Signing time: Wed 21 Oct 2026 08:36:23 +0000
ROA not before: Wed 21 Oct 2026 08:36:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 680
IP address blocks: 147.172.0.0/16 maxlen: 16
192.80.51.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.mft
rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 27 Oct 2026 23:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:5d:9a:b9:86:64:90:5d:58:04:37:1e:34:9d:70:8b:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6816171b3f91b1d10b0445987f611428abf13e1a
Validity
Not Before: Oct 21 08:36:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a85d4cd97162e72d65d3c8a831477896462f55ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:6f:b1:49:79:67:76:a2:41:1f:ac:a0:11:dd:
1f:6f:1e:bb:38:48:ef:e7:a0:6c:2c:66:c1:2c:56:
35:96:c1:f2:f7:86:9c:b5:e4:ae:af:dd:20:09:7a:
59:aa:fe:63:6e:e7:e5:7e:cf:6a:db:eb:8b:6d:a6:
0b:be:f3:b8:f7:66:9b:47:e8:8b:dd:b1:71:ba:6f:
0d:90:f2:e0:c0:d6:11:a1:12:e8:72:37:ad:87:88:
f6:1b:1e:eb:bd:0b:8f:38:13:0f:2d:57:f5:f3:0a:
76:83:e2:16:6c:31:2c:9d:ea:12:5f:77:b6:55:40:
3e:d1:b1:86:5f:a3:bc:cc:03:46:8a:96:19:a2:29:
cd:a4:50:12:2a:26:0d:f5:aa:2a:c1:49:2e:1c:d7:
d7:e3:3a:46:1c:a1:c1:88:46:c2:23:22:90:3b:6e:
a6:23:d8:c6:96:62:79:bb:8f:dc:db:e1:69:4e:1b:
5b:59:36:22:ad:43:fd:7b:d8:24:17:9c:5b:cb:b3:
d2:26:86:3e:53:66:1a:b9:a3:57:1f:13:fe:8c:c0:
c8:f2:4d:79:3b:02:5e:36:f8:e3:32:45:29:98:50:
f5:b1:f6:5e:7f:8e:39:c6:21:68:7c:f8:5f:75:08:
24:39:1b:e4:ed:4f:61:0f:a2:3f:71:ad:39:e6:a3:
9f:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:5D:4C:D9:71:62:E7:2D:65:D3:C8:A8:31:47:78:96:46:2F:55:EA
X509v3 Authority Key Identifier:
keyid:68:16:17:1B:3F:91:B1:D1:0B:04:45:98:7F:61:14:28:AB:F1:3E:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aBYXGz-RsdELBEWYf2EUKKvxPho.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/qF1M2XFi5y1l08ioMUd4lkYvVeo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/2a5155-1336-4507-9a3f-f0a7e1ca3c85/1/aBYXGz-RsdELBEWYf2EUKKvxPho.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
147.172.0.0/16
192.80.51.0/24
Signature Algorithm: sha256WithRSAEncryption
1f:11:af:79:d5:2a:59:1c:c7:2e:fa:79:e4:f5:7b:59:f3:05:
5a:11:13:a6:72:07:45:28:6a:be:6a:bc:f6:16:c3:99:e1:5c:
eb:a0:c1:ea:8e:dc:3d:b5:a5:5b:e1:9d:cc:d0:9c:16:51:5b:
75:2d:12:bf:85:fe:c9:1b:3a:5e:5c:1e:f0:bf:cf:c8:85:0f:
5d:c6:d7:c7:04:83:07:05:11:67:a3:a3:40:82:d2:84:cb:57:
39:43:bd:3c:75:11:69:d8:1a:95:e9:25:ef:69:fa:0e:dd:2d:
02:2c:c5:e5:fc:7c:b6:a6:85:9d:2b:c1:bb:83:c2:02:36:b7:
7a:71:5d:b1:08:40:10:33:6f:66:de:94:6d:bd:79:e7:1a:68:
68:d4:fc:07:af:49:6d:96:3a:37:af:aa:06:68:f0:02:d7:f4:
8d:3d:d8:19:04:ea:b9:fe:11:45:e7:3e:0e:2a:ee:1e:22:95:
9a:31:00:dd:c3:7e:c8:e9:83:f7:4c:e6:3f:66:b9:e2:76:5d:
ec:fb:c0:61:73:59:83:85:26:89:b8:ed:0b:52:60:2c:db:0e:
22:94:a5:1a:64:85:4c:41:eb:cd:54:86:9b:71:de:59:22:7f:
cf:96:73:0b:73:ed:62:40:70:40:cd:9a:73:21:73:89:84:39:
34:a9:84:b6
-----BEGIN CERTIFICATE-----
MIIFAjCCA+qgAwIBAgISAaFdmrmGZJBdWAQ3HjSdcIuYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4MTYxNzFiM2Y5MWIxZDEwYjA0NDU5ODdmNjExNDI4YWJm
MTNlMWEwHhcNMjYxMDIxMDgzNjIzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODVkNGNkOTcxNjJlNzJkNjVkM2M4YTgzMTQ3Nzg5NjQ2MmY1NWVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq2+xSXlndqJBH6ygEd0fbx67OEjv
56BsLGbBLFY1lsHy94acteSur90gCXpZqv5jbuflfs9q2+uLbaYLvvO492abR+iL
3bFxum8NkPLgwNYRoRLocjeth4j2Gx7rvQuPOBMPLVf18wp2g+IWbDEsneoSX3e2
VUA+0bGGX6O8zANGipYZoinNpFASKiYN9aoqwUkuHNfX4zpGHKHBiEbCIyKQO26m
I9jGlmJ5u4/c2+FpThtbWTYirUP9e9gkF5xby7PSJoY+U2YauaNXHxP+jMDI8k15
OwJeNvjjMkUpmFD1sfZef445xiFofPhfdQgkORvk7U9hD6I/ca055qOfvQIDAQAB
o4ICDjCCAgowHQYDVR0OBBYEFKhdTNlxYuctZdPIqDFHeJZGL1XqMB8GA1UdIwQY
MBaAFGgWFxs/kbHRCwRFmH9hFCir8T4aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYUJZWEd6LVJzZEVMQkVXWWYyRVVLS3Z4UGhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yYTUxNTUtMTMzNi00NTA3LTlhM2Yt
ZjBhN2UxY2EzYzg1LzEvcUYxTTJYRmk1eTFsMDhpb01VZDRsa1l2VmVvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8yYTUxNTUtMTMzNi00NTA3LTlhM2YtZjBhN2UxY2EzYzg1
LzEvYUJZWEd6LVJzZEVMQkVXWWYyRVVLS3Z4UGhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCQGCCsGAQUFBwEHAQH/BBUwEzARBAIAATALAwMAk6wDBADA
UDMwDQYJKoZIhvcNAQELBQADggEBAB8Rr3nVKlkcxy76eeT1e1nzBVoRE6ZyB0Uo
ar5qvPYWw5nhXOugweqO3D21pVvhnczQnBZRW3UtEr+F/skbOl5cHvC/z8iFD13G
18cEgwcFEWejo0CC0oTLVzlDvTx1EWnYGpXpJe9p+g7dLQIsxeX8fLamhZ0rwbuD
wgI2t3pxXbEIQBAzb2belG29eecaaGjU/AevSW2WOjevqgZo8ALX9I092BkE6rn+
EUXnPg4q7h4ilZoxAN3Dfsjpg/dM5j9mueJ2Xez7wGFzWYOFJom47QtSYCzbDiKU
pRpkhUxB681Uhptx3lkif8+Wcwtz7WJAcEDNmnMhc4mEOTSphLY=
-----END CERTIFICATE-----
Generated at Tue Oct 27 08:26:55 2026 by rpki-client