Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/SqJOIStSbkS_sk9tOgXlq4DG9kU.roa
File: SqJOIStSbkS_sk9tOgXlq4DG9kU.roa (raw, json)
Hash identifier: ewVntvl+465lh5V5DV4NxkandQKCa7/BAmKlR+Vmpqw=
Subject key identifier: 4A:A2:4E:21:2B:52:6E:44:BF:B2:4F:6D:3A:05:E5:AB:80:C6:F6:45
Certificate issuer: /CN=e760126dce78bc16e66c2e6e7635848ac46846af
Certificate serial: 019DBA827C1A4E03237A2F862D8BFCFFD262
Authority key identifier: E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/SqJOIStSbkS_sk9tOgXlq4DG9kU.roa
Signing time: Thu 23 Apr 2026 13:23:26 +0000
ROA not before: Thu 23 Apr 2026 13:23:26 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2914
IP address blocks: 146.247.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 May 2026 18:48:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:ba:82:7c:1a:4e:03:23:7a:2f:86:2d:8b:fc:ff:d2:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e760126dce78bc16e66c2e6e7635848ac46846af
Validity
Not Before: Apr 23 13:23:26 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=4aa24e212b526e44bfb24f6d3a05e5ab80c6f645
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d1:dd:1b:6a:28:48:b6:36:d5:3a:23:86:90:
32:8e:a5:f1:4c:63:43:85:d6:37:4b:d2:14:78:16:
c1:14:5e:15:83:f6:d2:37:ed:fe:21:4d:7e:63:35:
45:75:f4:64:2f:99:44:47:aa:14:a6:b9:c4:a8:48:
73:72:48:fc:56:3d:89:8a:f3:8e:76:35:79:80:10:
72:bf:7d:4e:f7:6b:b0:c4:c6:10:c6:45:4b:ce:bb:
f2:95:69:c6:5a:13:05:c3:33:95:59:37:01:16:16:
7b:95:79:72:50:1a:59:d7:e7:ae:97:1a:ac:10:47:
ea:f8:05:46:ed:75:81:22:b2:1c:12:32:95:71:6c:
dd:a5:fc:18:27:83:95:76:41:3e:38:0c:b7:03:88:
e0:af:85:de:92:54:5d:c4:a4:93:d9:25:21:99:b2:
d0:9c:ad:41:04:0a:b9:1c:63:7c:de:c6:4e:45:23:
d8:6b:71:73:30:90:3a:db:8a:9c:ec:1e:fe:76:d1:
d0:fd:23:ce:ac:63:9d:67:3b:ab:e1:cf:95:22:cb:
5c:87:83:60:48:cd:74:2a:f1:ad:4e:4a:2a:16:50:
87:1f:cb:89:b5:8b:b4:9c:85:1a:2d:2e:eb:c3:4b:
bf:3f:2f:70:dc:6d:55:c6:bd:f8:d2:39:7a:8c:cc:
4f:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:A2:4E:21:2B:52:6E:44:BF:B2:4F:6D:3A:05:E5:AB:80:C6:F6:45
X509v3 Authority Key Identifier:
keyid:E7:60:12:6D:CE:78:BC:16:E6:6C:2E:6E:76:35:84:8A:C4:68:46:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52ASbc54vBbmbC5udjWEisRoRq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/SqJOIStSbkS_sk9tOgXlq4DG9kU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/488f61-2f00-4639-97b8-d24f562dedd2/1/52ASbc54vBbmbC5udjWEisRoRq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
146.247.109.0/24
Signature Algorithm: sha256WithRSAEncryption
86:07:56:68:f3:2a:db:13:66:9d:40:63:ca:94:a2:77:28:76:
f5:3e:e4:9d:0a:f3:49:dd:f9:39:86:2d:bf:42:33:ce:df:61:
4a:c8:e2:da:6a:0d:63:8b:e1:02:9f:4a:0d:a0:8b:7d:d0:18:
e3:76:14:bf:87:89:ac:dc:53:0d:1c:35:c5:dc:0b:93:17:ee:
d5:68:8f:cd:72:87:15:30:9b:c8:a5:a5:e4:a3:f0:92:a3:26:
88:c8:0c:0e:b9:5d:aa:39:e8:f2:68:cd:eb:96:79:4a:6f:3f:
74:bb:60:0d:80:75:2b:82:ac:bf:2c:9a:fd:f4:33:42:57:0e:
ca:f8:3b:8a:5f:93:a6:55:2d:c8:f0:39:62:2d:ac:7e:7b:d7:
38:b6:9c:ac:92:d4:f0:85:17:75:28:56:a2:8b:7d:43:1f:06:
83:12:6b:0c:76:d0:c8:43:97:d3:cc:f0:2b:c2:d7:39:f9:2a:
83:e2:59:04:b5:3b:f2:07:06:6d:75:df:10:8d:97:68:b1:32:
e0:8b:28:15:bd:ff:e3:05:73:27:a4:e9:bb:c5:47:15:ba:5b:
a6:2f:f6:7a:83:1d:79:9d:b5:37:f2:e1:42:d0:12:73:a0:da:
96:d5:63:16:78:29:0c:76:05:84:cf:4d:e6:d3:13:04:ac:98:
ef:aa:e6:9a
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ26gnwaTgMjei+GLYv8/9JiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NjAxMjZkY2U3OGJjMTZlNjZjMmU2ZTc2MzU4NDhhYzQ2
ODQ2YWYwHhcNMjYwNDIzMTMyMzI2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0YWEyNGUyMTJiNTI2ZTQ0YmZiMjRmNmQzYTA1ZTVhYjgwYzZmNjQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtHdG2ooSLY21TojhpAyjqXxTGND
hdY3S9IUeBbBFF4Vg/bSN+3+IU1+YzVFdfRkL5lER6oUprnEqEhzckj8Vj2JivOO
djV5gBByv31O92uwxMYQxkVLzrvylWnGWhMFwzOVWTcBFhZ7lXlyUBpZ1+eulxqs
EEfq+AVG7XWBIrIcEjKVcWzdpfwYJ4OVdkE+OAy3A4jgr4XeklRdxKST2SUhmbLQ
nK1BBAq5HGN83sZORSPYa3FzMJA624qc7B7+dtHQ/SPOrGOdZzur4c+VIstch4Ng
SM10KvGtTkoqFlCHH8uJtYu0nIUaLS7rw0u/Py9w3G1Vxr340jl6jMxPGwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFEqiTiErUm5Ev7JPbToF5auAxvZFMB8GA1UdIwQY
MBaAFOdgEm3OeLwW5mwubnY1hIrEaEavMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3Yjgt
ZDI0ZjU2MmRlZGQyLzEvU3FKT0lTdFNia1Nfc2s5dE9nWGxxNERHOWtVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS80ODhmNjEtMmYwMC00NjM5LTk3YjgtZDI0ZjU2MmRlZGQy
LzEvNTJBU2JjNTR2QmJtYkM1dWRqV0Vpc1JvUnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAkvdtMA0G
CSqGSIb3DQEBCwUAA4IBAQCGB1Zo8yrbE2adQGPKlKJ3KHb1PuSdCvNJ3fk5hi2/
QjPO32FKyOLaag1ji+ECn0oNoIt90BjjdhS/h4ms3FMNHDXF3AuTF+7VaI/NcocV
MJvIpaXko/CSoyaIyAwOuV2qOejyaM3rlnlKbz90u2ANgHUrgqy/LJr99DNCVw7K
+DuKX5OmVS3I8DliLax+e9c4tpysktTwhRd1KFaii31DHwaDEmsMdtDIQ5fTzPAr
wtc5+SqD4lkEtTvyBwZtdd8QjZdosTLgiygVvf/jBXMnpOm7xUcVulumL/Z6gx15
nbU38uFC0BJzoNqW1WMWeCkMdgWEz03m0xMErJjvquaa
-----END CERTIFICATE-----
Generated at Wed May 6 01:09:22 2026 by rpki-client