Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/qrB3Eo2Ov1FmKMVfZK8XfTmirqc.roa
File: qrB3Eo2Ov1FmKMVfZK8XfTmirqc.roa (raw, json)
Hash identifier: hZfGNLtJikKtYnLkrqax5kP9tjeXld/JNv+JEvk0F/g=
Subject key identifier: AA:B0:77:12:8D:8E:BF:51:66:28:C5:5F:64:AF:17:7D:39:A2:AE:A7
Certificate issuer: /CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Certificate serial: 019F26D6E57F45529AACA0B3FE06BCA6C5DF
Authority key identifier: 88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/qrB3Eo2Ov1FmKMVfZK8XfTmirqc.roa
Signing time: Fri 03 Jul 2026 07:17:25 +0000
ROA not before: Fri 03 Jul 2026 07:17:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 834
IP address blocks: 109.229.216.0/23 maxlen: 24
109.229.218.0/24 maxlen: 24
109.229.223.0/24 maxlen: 24
195.3.144.0/23 maxlen: 24
213.110.68.0/22 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.mft
rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 21:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:26:d6:e5:7f:45:52:9a:ac:a0:b3:fe:06:bc:a6:c5:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=88add9b671f7a36eb2367e34fee4bcb13b8f66cc
Validity
Not Before: Jul 3 07:17:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aab077128d8ebf516628c55f64af177d39a2aea7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:37:d0:8f:c6:46:94:2d:f8:4e:a8:a8:a7:2e:
a8:8a:44:42:dc:20:10:e5:3a:2c:cb:60:01:c4:12:
71:3b:08:5b:f5:d5:6d:33:d2:8f:4b:a5:75:53:ad:
41:b0:96:31:91:11:fe:00:2f:f9:9b:da:26:a8:bb:
5f:f6:27:cf:75:1b:66:4c:9e:5e:0d:fa:3f:5c:2a:
e9:4c:84:2e:ae:0b:e6:c7:df:f8:88:dc:2b:4c:cc:
3b:3e:cf:0e:21:f4:0f:96:fd:f6:ad:95:a6:78:f0:
b3:de:5b:90:9a:a4:f3:5e:13:d4:e9:bd:25:cb:93:
08:30:fc:5c:97:70:4c:61:1f:64:7f:20:7c:ec:9d:
04:a0:51:4b:fd:95:f3:ad:f4:66:5b:3c:27:2f:cc:
7a:e6:37:3d:ed:bc:12:66:79:06:e2:84:10:20:bd:
25:4a:65:0c:7e:df:e3:db:0d:03:90:42:e8:65:51:
4b:c5:02:65:d5:35:c0:b1:0b:64:e3:d1:a0:64:6a:
9c:e2:7c:fe:59:46:f0:e3:7d:c5:0a:61:67:04:83:
e6:6d:fa:1f:44:14:b4:33:6b:6a:0b:3e:59:eb:b0:
a8:b3:a6:c8:0c:b4:5a:6f:46:60:d7:ea:a4:f0:71:
5f:44:c4:b2:4a:07:09:6b:12:72:7b:22:d2:1a:69:
23:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:B0:77:12:8D:8E:BF:51:66:28:C5:5F:64:AF:17:7D:39:A2:AE:A7
X509v3 Authority Key Identifier:
keyid:88:AD:D9:B6:71:F7:A3:6E:B2:36:7E:34:FE:E4:BC:B1:3B:8F:66:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iK3ZtnH3o26yNn40_uS8sTuPZsw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/qrB3Eo2Ov1FmKMVfZK8XfTmirqc.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/3ed00a-15ee-4664-a7f1-a1b96b9b70f8/1/iK3ZtnH3o26yNn40_uS8sTuPZsw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
109.229.216.0-109.229.218.255
109.229.223.0/24
195.3.144.0/23
213.110.68.0/22
Signature Algorithm: sha256WithRSAEncryption
5d:f6:24:44:d1:30:e3:38:fd:aa:05:3e:54:1d:8e:7d:57:8a:
9b:bd:5b:2e:10:1e:49:5b:fa:9f:d5:d7:61:fd:fd:b9:b2:3c:
88:6c:a4:eb:57:be:12:50:70:1f:93:4f:d6:99:51:8a:cd:5f:
0d:b5:80:35:b6:c7:e0:59:9d:12:95:89:68:77:64:7a:f3:a4:
8c:ee:6e:bc:38:fd:df:b5:f9:c3:2a:ed:79:dc:bb:44:60:98:
e4:3a:b1:41:69:5a:81:34:2d:16:bb:f9:72:7b:5d:ba:9c:df:
4a:90:1f:f6:92:be:8d:69:eb:19:47:1a:58:e7:e2:d5:07:89:
d0:ae:f5:3d:70:3d:1e:ec:e7:c6:5c:df:ce:0f:11:d1:58:0f:
d5:8b:b6:6f:f4:28:de:75:50:38:0a:de:93:fa:63:79:cd:35:
d7:ec:20:de:c6:6a:da:8b:bf:41:7b:5b:72:92:84:9b:46:92:
58:61:71:06:d7:13:8a:3b:d2:dc:b2:ad:e6:37:fb:a6:9c:f0:
92:02:e1:42:ca:8c:83:ee:e1:f2:49:59:1b:7e:75:60:7e:a8:
b5:16:51:04:ae:b2:0a:98:be:b1:31:2c:cf:b2:ad:6d:8e:73:
ae:ac:32:5e:22:55:fb:6a:1b:65:3e:ee:39:33:30:48:44:99:
d8:fd:a1:9f
-----BEGIN CERTIFICATE-----
MIIFFzCCA/+gAwIBAgISAZ8m1uV/RVKarKCz/ga8psXfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg4YWRkOWI2NzFmN2EzNmViMjM2N2UzNGZlZTRiY2IxM2I4
ZjY2Y2MwHhcNMjYwNzAzMDcxNzI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYWIwNzcxMjhkOGViZjUxNjYyOGM1NWY2NGFmMTc3ZDM5YTJhZWE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3zfQj8ZGlC34Tqiopy6oikRC3CAQ
5Tosy2ABxBJxOwhb9dVtM9KPS6V1U61BsJYxkRH+AC/5m9omqLtf9ifPdRtmTJ5e
Dfo/XCrpTIQurgvmx9/4iNwrTMw7Ps8OIfQPlv32rZWmePCz3luQmqTzXhPU6b0l
y5MIMPxcl3BMYR9kfyB87J0EoFFL/ZXzrfRmWzwnL8x65jc97bwSZnkG4oQQIL0l
SmUMft/j2w0DkELoZVFLxQJl1TXAsQtk49GgZGqc4nz+WUbw433FCmFnBIPmbfof
RBS0M2tqCz5Z67Cos6bIDLRab0Zg1+qk8HFfRMSySgcJaxJyeyLSGmkj+wIDAQAB
o4ICIzCCAh8wHQYDVR0OBBYEFKqwdxKNjr9RZijFX2SvF305oq6nMB8GA1UdIwQY
MBaAFIit2bZx96NusjZ+NP7kvLE7j2bMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEt
YTFiOTZiOWI3MGY4LzEvcXJCM0VvMk92MUZtS01WZlpLOFhmVG1pcnFjLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8zZWQwMGEtMTVlZS00NjY0LWE3ZjEtYTFiOTZiOWI3MGY4
LzEvaUszWnRuSDNvMjZ5Tm40MF91UzhzVHVQWnN3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDkGCCsGAQUFBwEHAQH/BCowKDAmBAIAATAgMAwDBANt5dgD
BABt5doDBABt5d8DBAHDA5ADBALVbkQwDQYJKoZIhvcNAQELBQADggEBAF32JETR
MOM4/aoFPlQdjn1Xipu9Wy4QHklb+p/V12H9/bmyPIhspOtXvhJQcB+TT9aZUYrN
Xw21gDW2x+BZnRKViWh3ZHrzpIzubrw4/d+1+cMq7Xncu0RgmOQ6sUFpWoE0LRa7
+XJ7Xbqc30qQH/aSvo1p6xlHGljn4tUHidCu9T1wPR7s58Zc384PEdFYD9WLtm/0
KN51UDgK3pP6Y3nNNdfsIN7GatqLv0F7W3KShJtGklhhcQbXE4o70tyyreY3+6ac
8JIC4ULKjIPu4fJJWRt+dWB+qLUWUQSusgqYvrExLM+yrW2Oc66sMl4iVftqG2U+
7jkzMEhEmdj9oZ8=
-----END CERTIFICATE-----
Generated at Fri Jul 24 04:35:05 2026 by rpki-client