Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/qFFcx3mLrYx2nk6029Hm7ZOdMDk.roa
File: qFFcx3mLrYx2nk6029Hm7ZOdMDk.roa (raw, json)
Hash identifier: Jn9Y7Pa0WEwNSD3kcDgAMoYx0/NnNpXk4eVq0VyIbRU=
Subject key identifier: A8:51:5C:C7:79:8B:AD:8C:76:9E:4E:B4:DB:D1:E6:ED:93:9D:30:39
Certificate issuer: /CN=722a8c1d311895016108ffbd14575c77cc28773a
Certificate serial: 01A0EC6C22BB977AA43CBD4AC18E59446955
Authority key identifier: 72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/qFFcx3mLrYx2nk6029Hm7ZOdMDk.roa
Signing time: Tue 29 Sep 2026 09:08:24 +0000
ROA not before: Tue 29 Sep 2026 09:08:24 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 198364
IP address blocks: 109.160.32.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 23 Oct 2026 08:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:ec:6c:22:bb:97:7a:a4:3c:bd:4a:c1:8e:59:44:69:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=722a8c1d311895016108ffbd14575c77cc28773a
Validity
Not Before: Sep 29 09:08:24 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8515cc7798bad8c769e4eb4dbd1e6ed939d3039
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:d3:10:70:9d:c3:1a:95:3c:03:a1:65:7f:06:
ee:ba:98:b7:e8:90:e5:ae:1e:1c:ec:7b:43:0d:6c:
b5:f5:dc:4d:ab:d2:2e:84:8b:b3:13:64:59:61:1f:
46:50:02:f0:5f:47:07:2d:10:81:f5:65:4e:e9:d9:
ab:bf:08:ae:fd:b9:d6:de:9d:cf:85:d0:a7:2a:ba:
f7:49:80:9d:8e:4d:64:c2:11:09:ce:ba:b2:35:03:
cd:1b:00:a9:c5:0f:c2:43:26:81:5b:d2:a4:dc:05:
a3:fb:48:00:77:46:b4:d4:ca:af:ed:19:a6:70:49:
b8:fb:2f:4e:fa:87:74:00:37:e8:e0:3b:7d:4f:05:
c8:0a:91:c4:e7:4a:1b:d3:9c:54:61:3e:a9:05:2f:
50:1e:f2:a9:59:fb:f3:ae:9c:6c:e9:f4:d4:6e:d7:
28:77:d3:0d:f5:71:e5:95:94:39:19:00:b2:d6:e8:
79:94:09:14:2d:79:13:63:09:9c:a2:37:28:08:79:
c6:b6:5e:15:d1:d3:06:be:6d:67:3b:49:52:8d:2b:
47:a7:52:e6:ae:68:61:84:9e:df:cc:6f:c3:a8:d5:
c5:da:7c:fe:c1:05:7c:e3:c3:c3:c1:11:bc:fd:02:
a7:3f:14:3b:51:99:d4:47:ca:53:04:df:bd:93:d6:
87:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:51:5C:C7:79:8B:AD:8C:76:9E:4E:B4:DB:D1:E6:ED:93:9D:30:39
X509v3 Authority Key Identifier:
keyid:72:2A:8C:1D:31:18:95:01:61:08:FF:BD:14:57:5C:77:CC:28:77:3A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ciqMHTEYlQFhCP-9FFdcd8wodzo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/qFFcx3mLrYx2nk6029Hm7ZOdMDk.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/b1f6ee-c4ef-4355-af36-a558ee65431f/1/ciqMHTEYlQFhCP-9FFdcd8wodzo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.160.32.0/24
Signature Algorithm: sha256WithRSAEncryption
80:e7:90:8e:27:59:30:4e:63:3f:b7:48:55:2c:d7:65:2f:58:
cf:a1:42:a0:44:3f:c6:b4:c0:f8:c0:ef:9b:23:df:8b:8c:30:
fa:84:c3:87:b0:c4:c2:16:3a:92:79:02:b5:cd:37:52:55:1f:
00:ae:be:ea:93:05:88:52:99:c0:3b:37:d7:4d:cb:ee:19:ed:
b2:03:84:35:94:b1:44:26:1e:1e:ba:8b:95:ad:b6:03:da:86:
e5:f8:ef:e1:1c:25:bd:a8:32:ba:aa:76:ad:07:06:a3:a0:0b:
a8:39:f4:1a:d2:b6:1c:5a:bd:38:00:0f:d3:ab:dd:89:5e:0c:
16:5c:e5:95:54:cc:8d:cc:d9:48:3d:36:e5:2b:98:03:e5:6e:
cc:0c:1b:7b:4a:1a:15:f9:93:f5:f7:a7:bc:81:6d:d7:93:98:
8d:40:68:f6:c2:c2:ae:6d:2c:6c:d8:0d:43:15:0e:ea:a0:11:
49:17:7a:4a:9a:88:30:a3:e7:14:b3:3e:fd:ed:eb:d2:35:96:
cd:da:fa:6d:15:9e:79:88:ac:83:53:e1:0a:f3:ad:dc:f9:dd:
66:63:b6:0e:d9:5e:f5:99:3c:b6:1f:b7:0d:51:bd:60:cb:2f:
95:51:42:86:c6:c3:a7:80:44:c1:e7:85:cb:4b:86:5b:5a:08:
55:a3:79:48
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAaDsbCK7l3qkPL1KwY5ZRGlVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyMmE4YzFkMzExODk1MDE2MTA4ZmZiZDE0NTc1Yzc3Y2My
ODc3M2EwHhcNMjYwOTI5MDkwODI0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODUxNWNjNzc5OGJhZDhjNzY5ZTRlYjRkYmQxZTZlZDkzOWQzMDM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm9MQcJ3DGpU8A6Flfwbuupi36JDl
rh4c7HtDDWy19dxNq9IuhIuzE2RZYR9GUALwX0cHLRCB9WVO6dmrvwiu/bnW3p3P
hdCnKrr3SYCdjk1kwhEJzrqyNQPNGwCpxQ/CQyaBW9Kk3AWj+0gAd0a01Mqv7Rmm
cEm4+y9O+od0ADfo4Dt9TwXICpHE50ob05xUYT6pBS9QHvKpWfvzrpxs6fTUbtco
d9MN9XHllZQ5GQCy1uh5lAkULXkTYwmcojcoCHnGtl4V0dMGvm1nO0lSjStHp1Lm
rmhhhJ7fzG/DqNXF2nz+wQV848PDwRG8/QKnPxQ7UZnUR8pTBN+9k9aHfQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKhRXMd5i62Mdp5OtNvR5u2TnTA5MB8GA1UdIwQY
MBaAFHIqjB0xGJUBYQj/vRRXXHfMKHc6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYt
YTU1OGVlNjU0MzFmLzEvcUZGY3gzbUxyWXgybms2MDI5SG03Wk9kTURrLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9iMWY2ZWUtYzRlZi00MzU1LWFmMzYtYTU1OGVlNjU0MzFm
LzEvY2lxTUhURVlsUUZoQ1AtOUZGZGNkOHdvZHpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAbaAgMA0G
CSqGSIb3DQEBCwUAA4IBAQCA55COJ1kwTmM/t0hVLNdlL1jPoUKgRD/GtMD4wO+b
I9+LjDD6hMOHsMTCFjqSeQK1zTdSVR8Arr7qkwWIUpnAOzfXTcvuGe2yA4Q1lLFE
Jh4euouVrbYD2obl+O/hHCW9qDK6qnatBwajoAuoOfQa0rYcWr04AA/Tq92JXgwW
XOWVVMyNzNlIPTblK5gD5W7MDBt7ShoV+ZP196e8gW3Xk5iNQGj2wsKubSxs2A1D
FQ7qoBFJF3pKmogwo+cUsz797evSNZbN2vptFZ55iKyDU+EK863c+d1mY7YO2V71
mTy2H7cNUb1gyy+VUUKGxsOngETB54XLS4ZbWghVo3lI
-----END CERTIFICATE-----
Generated at Thu Oct 22 18:31:18 2026 by rpki-client