Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/qsvSYt_EBTj0D4qt2QoEMH74YEw.roa
File: qsvSYt_EBTj0D4qt2QoEMH74YEw.roa (raw, json)
Hash identifier: xOazcLY9pAeAKwSCYmBAkPRN6rzWqpKY798GdNgA6FA=
Subject key identifier: AA:CB:D2:62:DF:C4:05:38:F4:0F:8A:AD:D9:0A:04:30:7E:F8:60:4C
Certificate issuer: /CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Certificate serial: 019F746884B96E0E0F3871A72C2B86D175A1
Authority key identifier: D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/qsvSYt_EBTj0D4qt2QoEMH74YEw.roa
Signing time: Sat 18 Jul 2026 08:47:14 +0000
ROA not before: Sat 18 Jul 2026 08:47:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 136526
IP address blocks: 2.59.152.0/22 maxlen: 22
45.91.224.0/22 maxlen: 22
45.142.152.0/22 maxlen: 22
91.204.224.0/22 maxlen: 22
185.202.100.0/22 maxlen: 22
185.202.103.0/24 maxlen: 24
193.239.150.0/23 maxlen: 23
193.239.154.0/23 maxlen: 23
193.239.154.0/24 maxlen: 24
194.126.215.0/24 maxlen: 24
194.126.219.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.mft
rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 02:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:74:68:84:b9:6e:0e:0f:38:71:a7:2c:2b:86:d1:75:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34456e11b77bf2e4820dfb69541d4be0ea94e7c
Validity
Not Before: Jul 18 08:47:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aacbd262dfc40538f40f8aadd90a04307ef8604c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:3e:06:cf:5c:3c:9c:b4:d8:cb:3f:42:8f:81:
18:75:c2:9a:e2:93:fd:43:e0:58:c6:89:bc:4f:0b:
8b:46:43:ae:d1:a6:27:8c:8a:c9:4f:61:83:4f:8b:
ba:50:4b:15:c6:23:5e:0d:c4:56:a7:4f:35:fe:68:
62:24:20:d2:25:1e:f3:f2:01:15:d7:4d:c0:01:b8:
17:d8:2c:75:5f:97:94:7f:30:cd:b8:9c:3e:fd:3f:
2c:7e:48:21:4a:dc:4d:4b:9a:55:3c:38:59:c9:8f:
af:8d:0a:b9:b2:03:80:65:01:1c:b0:55:ad:33:73:
1b:24:04:de:5a:39:bf:bb:5d:9f:f9:98:59:a1:11:
fe:12:e1:19:dd:6e:c4:97:fd:bd:98:4d:6a:99:73:
cb:16:ea:3e:72:df:95:cc:3b:cf:67:32:33:0d:76:
0c:bf:0b:c1:ec:f3:47:7a:9a:69:7a:29:e9:2e:35:
67:6c:bd:a1:01:87:49:42:2a:2e:32:3d:21:c0:da:
3f:ef:74:fe:c1:f0:37:8f:0c:ec:04:86:5e:b9:65:
e6:50:b4:44:5a:16:c1:f7:b3:75:1d:34:4f:5a:8e:
fd:58:29:66:40:a4:d8:40:68:76:ae:81:b7:5e:08:
11:11:59:1a:ad:25:e1:c4:5c:b4:e4:3f:32:69:fd:
59:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:CB:D2:62:DF:C4:05:38:F4:0F:8A:AD:D9:0A:04:30:7E:F8:60:4C
X509v3 Authority Key Identifier:
keyid:D3:44:56:E1:1B:77:BF:2E:48:20:DF:B6:95:41:D4:BE:0E:A9:4E:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00RW4Rt3vy5IIN-2lUHUvg6pTnw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/qsvSYt_EBTj0D4qt2QoEMH74YEw.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/27/348ce5-ca20-4848-8844-ae50273681a7/1/00RW4Rt3vy5IIN-2lUHUvg6pTnw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
2.59.152.0/22
45.91.224.0/22
45.142.152.0/22
91.204.224.0/22
185.202.100.0/22
193.239.150.0/23
193.239.154.0/23
194.126.215.0/24
194.126.219.0/24
Signature Algorithm: sha256WithRSAEncryption
85:21:23:cb:da:37:c6:8d:06:06:cb:f4:3f:aa:e3:60:7d:09:
de:43:1d:7a:c4:3c:fe:9a:90:38:31:1a:fa:26:e1:60:de:e5:
d5:13:63:ed:ca:d2:39:f9:10:39:ae:db:09:55:62:c8:2b:3a:
9a:fa:13:07:a7:1f:53:3a:2e:40:44:ee:cc:41:e6:ab:8a:8d:
5e:18:ec:bf:48:e1:49:b9:e2:d7:8f:37:82:6d:7e:b2:de:e0:
47:d3:d2:f7:37:2a:2e:70:ac:68:b2:67:26:5a:d2:84:9a:29:
b6:f6:e7:20:18:b5:94:7d:d9:f0:57:cc:dd:21:e5:ad:8c:de:
27:ac:d7:50:5f:e9:52:14:ae:88:57:c9:1c:07:bc:72:33:29:
a3:02:8f:19:44:67:3c:45:fc:e2:14:54:18:ed:4f:a5:ca:7d:
52:b6:9d:d2:02:9a:54:51:30:b2:33:6f:ab:f4:c6:61:76:6b:
e4:1d:1c:38:75:e4:e3:46:8f:f8:ec:90:a5:01:61:2c:1c:7f:
90:76:1a:23:cb:f0:01:dd:66:1d:04:58:dc:b3:f5:47:d0:0e:
31:97:0e:da:a1:3f:6f:aa:36:7d:65:4c:94:8f:0a:2a:cb:33:
dd:3a:52:79:96:6e:5f:90:0b:2a:82:4d:c6:74:da:19:57:09:
94:4f:d8:25
-----BEGIN CERTIFICATE-----
MIIFLTCCBBWgAwIBAgISAZ90aIS5bg4POHGnLCuG0XWhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNDQ1NmUxMWI3N2JmMmU0ODIwZGZiNjk1NDFkNGJlMGVh
OTRlN2MwHhcNMjYwNzE4MDg0NzE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWNiZDI2MmRmYzQwNTM4ZjQwZjhhYWRkOTBhMDQzMDdlZjg2MDRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2T4Gz1w8nLTYyz9Cj4EYdcKa4pP9
Q+BYxom8TwuLRkOu0aYnjIrJT2GDT4u6UEsVxiNeDcRWp081/mhiJCDSJR7z8gEV
103AAbgX2Cx1X5eUfzDNuJw+/T8sfkghStxNS5pVPDhZyY+vjQq5sgOAZQEcsFWt
M3MbJATeWjm/u12f+ZhZoRH+EuEZ3W7El/29mE1qmXPLFuo+ct+VzDvPZzIzDXYM
vwvB7PNHepppeinpLjVnbL2hAYdJQiouMj0hwNo/73T+wfA3jwzsBIZeuWXmULRE
WhbB97N1HTRPWo79WClmQKTYQGh2roG3XggREVkarSXhxFy05D8yaf1ZoQIDAQAB
o4ICOTCCAjUwHQYDVR0OBBYEFKrL0mLfxAU49A+KrdkKBDB++GBMMB8GA1UdIwQY
MBaAFNNEVuEbd78uSCDftpVB1L4OqU58MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDBSVzRSdDN2eTVJSU4tMmxVSFV2ZzZwVG53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQt
YWU1MDI3MzY4MWE3LzEvcXN2U1l0X0VCVGowRDRxdDJRb0VNSDc0WUV3LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNy8zNDhjZTUtY2EyMC00ODQ4LTg4NDQtYWU1MDI3MzY4MWE3
LzEvMDBSVzRSdDN2eTVJSU4tMmxVSFV2ZzZwVG53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CME8GCCsGAQUFBwEHAQH/BEAwPjA8BAIAATA2AwQCAjuYAwQC
LVvgAwQCLY6YAwQCW8zgAwQCucpkAwQBwe+WAwQBwe+aAwQAwn7XAwQAwn7bMA0G
CSqGSIb3DQEBCwUAA4IBAQCFISPL2jfGjQYGy/Q/quNgfQneQx16xDz+mpA4MRr6
JuFg3uXVE2PtytI5+RA5rtsJVWLIKzqa+hMHpx9TOi5ARO7MQeario1eGOy/SOFJ
ueLXjzeCbX6y3uBH09L3NyoucKxosmcmWtKEmim29ucgGLWUfdnwV8zdIeWtjN4n
rNdQX+lSFK6IV8kcB7xyMymjAo8ZRGc8RfziFFQY7U+lyn1Stp3SAppUUTCyM2+r
9MZhdmvkHRw4deTjRo/47JClAWEsHH+Qdhojy/AB3WYdBFjcs/VH0A4xlw7aoT9v
qjZ9ZUyUjwoqyzPdOlJ5lm5fkAsqgk3GdNoZVwmUT9gl
-----END CERTIFICATE-----
Generated at Fri Jul 24 13:06:54 2026 by rpki-client