Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/qZ9vCmktgVJOJlSmcCKZ_0Kss54.roa
File: qZ9vCmktgVJOJlSmcCKZ_0Kss54.roa (raw, json)
Hash identifier: mVbDrPd9yE6i8GNPlAaQal/Zd89QBSi5kZ9wFmjX2kk=
Subject key identifier: A9:9F:6F:0A:69:2D:81:52:4E:26:54:A6:70:22:99:FF:42:AC:B3:9E
Certificate issuer: /CN=00f98a702f84755664daad0954246212125fd63b
Certificate serial: 019F23687603EE3AEF9227A77EFBDED7ED4D
Authority key identifier: 00:F9:8A:70:2F:84:75:56:64:DA:AD:09:54:24:62:12:12:5F:D6:3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/APmKcC-EdVZk2q0JVCRiEhJf1js.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/qZ9vCmktgVJOJlSmcCKZ_0Kss54.roa
Signing time: Thu 02 Jul 2026 15:17:56 +0000
ROA not before: Thu 02 Jul 2026 15:17:56 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197978
IP address blocks: 91.198.247.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.crl
rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.mft
rsync://rpki.ripe.net/repository/DEFAULT/APmKcC-EdVZk2q0JVCRiEhJf1js.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:76:03:ee:3a:ef:92:27:a7:7e:fb:de:d7:ed:4d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00f98a702f84755664daad0954246212125fd63b
Validity
Not Before: Jul 2 15:17:56 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a99f6f0a692d81524e2654a6702299ff42acb39e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:15:96:40:50:52:92:95:1a:12:97:56:3c:43:
f7:31:2f:5e:9e:98:02:d2:da:9d:44:e8:68:ce:e8:
f3:ef:09:b5:c9:eb:07:0f:28:71:21:c9:db:0a:00:
8f:60:b4:bd:06:51:00:96:ed:c0:5a:fc:95:7b:0a:
14:55:d6:b3:75:6d:cf:a5:23:b5:14:eb:0c:4a:17:
56:b8:86:a1:1b:20:c2:db:df:5a:d7:fa:ac:af:57:
78:58:91:c2:82:7a:ba:af:de:ec:26:99:a1:94:6d:
0c:d9:f3:0b:83:c8:c9:f2:0f:9e:2e:52:07:a3:7f:
72:08:48:8d:3d:dd:f3:17:d5:81:66:56:ee:43:e8:
bb:e3:29:92:2d:bc:fe:5d:be:8f:8d:f0:c1:4b:f0:
79:97:e2:4e:d9:da:d3:2b:67:43:cd:5e:67:1d:50:
bd:86:44:c3:83:68:2f:9c:e8:14:ff:49:0f:03:8d:
68:a9:5d:25:14:ef:0a:44:ef:5e:17:be:2c:8b:ae:
04:c1:d3:f8:44:9c:54:42:ec:64:83:46:af:fa:e6:
7f:69:1a:41:69:26:a8:c2:a5:37:15:26:2e:f0:d9:
7e:f2:4a:ab:3e:df:0a:69:28:ba:a5:df:91:37:02:
cb:47:4d:d2:6e:5d:e3:99:71:51:1c:e0:68:db:7f:
80:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:9F:6F:0A:69:2D:81:52:4E:26:54:A6:70:22:99:FF:42:AC:B3:9E
X509v3 Authority Key Identifier:
keyid:00:F9:8A:70:2F:84:75:56:64:DA:AD:09:54:24:62:12:12:5F:D6:3B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/APmKcC-EdVZk2q0JVCRiEhJf1js.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/qZ9vCmktgVJOJlSmcCKZ_0Kss54.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0d/3246dc-1a98-4fb2-9585-7b2909f4f57a/1/APmKcC-EdVZk2q0JVCRiEhJf1js.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.247.0/24
Signature Algorithm: sha256WithRSAEncryption
8c:ca:b6:e9:4d:a1:17:d1:6b:c4:49:b1:b7:b3:95:d9:5f:34:
19:cb:ba:7b:8c:7c:06:4b:c0:66:1e:92:ef:36:9e:e5:68:ec:
bd:dd:13:3d:94:80:00:65:54:18:ec:4d:11:b6:1f:12:12:a7:
cb:af:81:d2:81:7a:dc:f0:03:09:36:9c:11:15:a0:99:49:80:
26:eb:ea:12:44:3f:30:af:29:1b:03:bf:3a:54:31:d1:cc:3d:
a7:a9:9c:b2:ac:ab:0f:84:cc:46:2a:21:8c:30:76:29:75:34:
45:fd:5f:60:7a:8b:14:5f:a9:a2:e4:08:aa:d0:ac:6c:ae:fd:
ea:66:44:33:2f:2c:84:ef:15:84:e6:8c:ae:98:8e:6c:db:32:
9f:31:39:82:2c:b8:26:42:d6:b5:69:d5:bb:2e:27:c1:5b:cc:
e8:5a:d2:6f:b2:e7:52:34:71:06:f8:dc:59:a0:ed:63:ff:a2:
12:e1:70:0c:fd:a9:4d:0f:ed:9e:f1:b1:2f:ca:4b:82:b3:46:
c8:99:19:dc:72:72:e3:15:e1:35:48:23:e1:a8:5e:05:a1:2d:
90:3e:4d:1b:50:97:47:64:94:d3:cd:e8:a6:72:21:9e:40:df:
77:50:21:65:b8:a7:2c:8f:a3:66:a6:67:7a:6b:ac:e6:dd:62:
56:7f:fb:69
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8jaHYD7jrvkienfvve1+1NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwZjk4YTcwMmY4NDc1NTY2NGRhYWQwOTU0MjQ2MjEyMTI1
ZmQ2M2IwHhcNMjYwNzAyMTUxNzU2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTlmNmYwYTY5MmQ4MTUyNGUyNjU0YTY3MDIyOTlmZjQyYWNiMzllMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtBWWQFBSkpUaEpdWPEP3MS9enpgC
0tqdROhozujz7wm1yesHDyhxIcnbCgCPYLS9BlEAlu3AWvyVewoUVdazdW3PpSO1
FOsMShdWuIahGyDC299a1/qsr1d4WJHCgnq6r97sJpmhlG0M2fMLg8jJ8g+eLlIH
o39yCEiNPd3zF9WBZlbuQ+i74ymSLbz+Xb6PjfDBS/B5l+JO2drTK2dDzV5nHVC9
hkTDg2gvnOgU/0kPA41oqV0lFO8KRO9eF74si64EwdP4RJxUQuxkg0av+uZ/aRpB
aSaowqU3FSYu8Nl+8kqrPt8KaSi6pd+RNwLLR03Sbl3jmXFRHOBo23+AhQIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFKmfbwppLYFSTiZUpnAimf9CrLOeMB8GA1UdIwQY
MBaAFAD5inAvhHVWZNqtCVQkYhISX9Y7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQVBtS2NDLUVkVlprMnEwSlZDUmlFaEpmMWpzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUt
N2IyOTA5ZjRmNTdhLzEvcVo5dkNta3RnVkpPSmxTbWNDS1pfMEtzczU0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZC8zMjQ2ZGMtMWE5OC00ZmIyLTk1ODUtN2IyOTA5ZjRmNTdh
LzEvQVBtS2NDLUVkVlprMnEwSlZDUmlFaEpmMWpzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAW8b3MA0G
CSqGSIb3DQEBCwUAA4IBAQCMyrbpTaEX0WvESbG3s5XZXzQZy7p7jHwGS8BmHpLv
Np7laOy93RM9lIAAZVQY7E0Rth8SEqfLr4HSgXrc8AMJNpwRFaCZSYAm6+oSRD8w
rykbA786VDHRzD2nqZyyrKsPhMxGKiGMMHYpdTRF/V9geosUX6mi5Aiq0Kxsrv3q
ZkQzLyyE7xWE5oyumI5s2zKfMTmCLLgmQta1adW7LifBW8zoWtJvsudSNHEG+NxZ
oO1j/6IS4XAM/alND+2e8bEvykuCs0bImRnccnLjFeE1SCPhqF4FoS2QPk0bUJdH
ZJTTzeimciGeQN93UCFluKcsj6Nmpmd6a6zm3WJWf/tp
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:37:26 2026 by rpki-client