Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/QqmtIi8aZzS_eyP7hN81mG7xjmA.roa
File: QqmtIi8aZzS_eyP7hN81mG7xjmA.roa (raw, json)
Hash identifier: lbx1JIelw4fsBA4mgzx1BmWJ0OtXQYto6xsyBBan36k=
Subject key identifier: 42:A9:AD:22:2F:1A:67:34:BF:7B:23:FB:84:DF:35:98:6E:F1:8E:60
Certificate issuer: /CN=260d76042292896f9653aa689e41607942b34f87
Certificate serial: 01A01A9FAEC0B145E0384F36B1D510A9148E
Authority key identifier: 26:0D:76:04:22:92:89:6F:96:53:AA:68:9E:41:60:79:42:B3:4F:87
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/QqmtIi8aZzS_eyP7hN81mG7xjmA.roa
Signing time: Wed 19 Aug 2026 15:24:27 +0000
ROA not before: Wed 19 Aug 2026 15:24:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219504
IP address blocks: 91.203.122.0/23 maxlen: 24
2a07::/29 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.mft
rsync://rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Sep 2026 04:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:1a:9f:ae:c0:b1:45:e0:38:4f:36:b1:d5:10:a9:14:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=260d76042292896f9653aa689e41607942b34f87
Validity
Not Before: Aug 19 15:24:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=42a9ad222f1a6734bf7b23fb84df35986ef18e60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ce:16:ca:e5:02:44:1b:bd:0b:57:4a:8c:6f:
bb:9a:3e:77:4d:c4:7a:83:bb:27:50:cb:13:fc:6d:
6a:1f:d5:63:b5:49:6f:40:d5:c2:23:da:a8:50:5f:
5a:c3:ad:44:17:40:df:0d:58:10:e9:c8:df:b1:2c:
24:f4:c3:62:a9:d8:6c:08:ae:40:c0:ed:ad:e9:c5:
1f:d0:2a:b9:63:05:3a:83:fd:fa:25:44:cd:70:f2:
96:1b:65:78:75:7a:e6:d0:bd:9a:1c:de:4e:af:93:
22:33:d5:58:c6:89:be:66:47:eb:92:4d:c7:24:77:
ad:29:b0:8b:0b:14:29:bb:16:ae:a6:20:a1:66:56:
05:e0:d3:0b:6b:da:12:3a:11:36:72:19:11:08:76:
dc:62:6e:d6:d3:0c:07:89:81:4e:c6:01:bd:c7:ca:
f7:47:3b:9e:96:13:87:5f:a5:b3:99:73:fe:e3:61:
20:7f:29:bc:c6:16:ed:16:c9:07:96:ca:7e:45:2b:
eb:5b:2f:4b:7c:b1:af:fa:aa:f8:94:ea:69:25:95:
f8:d3:4e:65:70:65:ae:18:de:f0:bb:1f:cd:0d:f4:
4d:45:fc:c6:30:e8:84:29:29:eb:bf:f2:86:bd:53:
96:31:d7:57:25:91:80:5d:92:c7:37:6d:01:fa:00:
e3:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:A9:AD:22:2F:1A:67:34:BF:7B:23:FB:84:DF:35:98:6E:F1:8E:60
X509v3 Authority Key Identifier:
keyid:26:0D:76:04:22:92:89:6F:96:53:AA:68:9E:41:60:79:42:B3:4F:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Jg12BCKSiW-WU6ponkFgeUKzT4c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/QqmtIi8aZzS_eyP7hN81mG7xjmA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/0a77ba-4685-4c02-a9e1-2fe739a03cb9/1/Jg12BCKSiW-WU6ponkFgeUKzT4c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.203.122.0/23
IPv6:
2a07::/29
Signature Algorithm: sha256WithRSAEncryption
6b:1e:5a:40:1e:1a:7d:f2:f5:3b:de:84:db:15:71:62:87:f0:
23:29:da:61:d8:84:50:00:ff:99:0d:e2:7c:0a:64:1e:a9:93:
7b:ad:6e:53:94:b8:d2:91:89:17:74:44:2b:07:32:f5:4e:1d:
c5:21:59:5a:38:c7:de:5e:e3:4a:20:2b:71:d4:eb:25:70:96:
63:5e:3d:76:44:aa:ce:3e:3d:17:01:a8:41:18:fa:83:3b:f2:
3e:f9:b8:f0:97:81:25:e6:cc:1c:eb:db:6b:7f:fa:4b:43:e2:
43:80:ad:8c:95:5f:5a:a7:99:7a:7f:7e:5c:fb:91:c0:aa:83:
fa:e7:ab:71:35:15:da:a5:53:da:5e:04:34:7f:47:ed:40:d3:
26:d2:1e:4f:88:67:9c:00:27:16:87:f7:63:2d:17:9f:1f:c0:
ec:a7:9d:39:72:6a:0d:de:4e:e7:3e:d5:31:35:1f:b6:88:2f:
d1:f4:17:90:fa:b3:da:da:c7:5d:33:c5:66:f3:5e:73:c0:70:
e8:52:b8:2d:84:a9:f4:84:ff:56:2f:ac:fa:2a:4d:f7:0c:97:
3c:02:c4:b9:83:24:60:70:b6:61:9f:94:c9:7e:0b:37:b8:3e:
f4:99:2d:5d:e9:64:8b:a0:08:a1:c0:e3:f3:c7:66:99:1f:c3:
40:e1:19:79
-----BEGIN CERTIFICATE-----
MIIFDDCCA/SgAwIBAgISAaAan67AsUXgOE82sdUQqRSOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDI2MGQ3NjA0MjI5Mjg5NmY5NjUzYWE2ODllNDE2MDc5NDJi
MzRmODcwHhcNMjYwODE5MTUyNDI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg0MmE5YWQyMjJmMWE2NzM0YmY3YjIzZmI4NGRmMzU5ODZlZjE4ZTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5c4WyuUCRBu9C1dKjG+7mj53TcR6
g7snUMsT/G1qH9VjtUlvQNXCI9qoUF9aw61EF0DfDVgQ6cjfsSwk9MNiqdhsCK5A
wO2t6cUf0Cq5YwU6g/36JUTNcPKWG2V4dXrm0L2aHN5Or5MiM9VYxom+Zkfrkk3H
JHetKbCLCxQpuxaupiChZlYF4NMLa9oSOhE2chkRCHbcYm7W0wwHiYFOxgG9x8r3
RzuelhOHX6WzmXP+42Egfym8xhbtFskHlsp+RSvrWy9LfLGv+qr4lOppJZX4005l
cGWuGN7wux/NDfRNRfzGMOiEKSnrv/KGvVOWMddXJZGAXZLHN20B+gDj3QIDAQAB
o4ICGDCCAhQwHQYDVR0OBBYEFEKprSIvGmc0v3sj+4TfNZhu8Y5gMB8GA1UdIwQY
MBaAFCYNdgQikolvllOqaJ5BYHlCs0+HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSmcxMkJDS1NpVy1XVTZwb25rRmdlVUt6VDRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC8wYTc3YmEtNDY4NS00YzAyLWE5ZTEt
MmZlNzM5YTAzY2I5LzEvUXFtdElpOGFaelNfZXlQN2hOODFtRzd4am1BLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC8wYTc3YmEtNDY4NS00YzAyLWE5ZTEtMmZlNzM5YTAzY2I5
LzEvSmcxMkJDS1NpVy1XVTZwb25rRmdlVUt6VDRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBW8t6MA0E
AgACMAcDBQMqBwAAMA0GCSqGSIb3DQEBCwUAA4IBAQBrHlpAHhp98vU73oTbFXFi
h/AjKdph2IRQAP+ZDeJ8CmQeqZN7rW5TlLjSkYkXdEQrBzL1Th3FIVlaOMfeXuNK
ICtx1OslcJZjXj12RKrOPj0XAahBGPqDO/I++bjwl4El5swc69trf/pLQ+JDgK2M
lV9ap5l6f35c+5HAqoP656txNRXapVPaXgQ0f0ftQNMm0h5PiGecACcWh/djLRef
H8Dsp505cmoN3k7nPtUxNR+2iC/R9BeQ+rPa2sddM8Vm815zwHDoUrgthKn0hP9W
L6z6Kk33DJc8AsS5gyRgcLZhn5TJfgs3uD70mS1d6WSLoAihwOPzx2aZH8NA4Rl5
-----END CERTIFICATE-----
Generated at Sun Sep 27 08:26:29 2026 by rpki-client