Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Aj4QBwQL2uNoWKXRywa_DkLBxU8.roa
File: Aj4QBwQL2uNoWKXRywa_DkLBxU8.roa (raw, json)
Hash identifier: AEwHfAxrbOcjeazAx/K/5vrZbUowV0UzX8EfJJIkJVk=
Subject key identifier: 02:3E:10:07:04:0B:DA:E3:68:58:A5:D1:CB:06:BF:0E:42:C1:C5:4F
Certificate issuer: /CN=423e62a5c2a80fdf7ea68453efe8a29f41fc207d
Certificate serial: 019F8E9541E1D2B35C29FB33CFE15821EDBA
Authority key identifier: 42:3E:62:A5:C2:A8:0F:DF:7E:A6:84:53:EF:E8:A2:9F:41:FC:20:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Qj5ipcKoD99-poRT7-iin0H8IH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Aj4QBwQL2uNoWKXRywa_DkLBxU8.roa
Signing time: Thu 23 Jul 2026 10:46:14 +0000
ROA not before: Thu 23 Jul 2026 10:46:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 2108
IP address blocks: 31.147.0.0/16 maxlen: 16
82.132.0.0/17 maxlen: 17
161.53.0.0/16 maxlen: 16
192.84.105.0/24 maxlen: 24
192.84.106.0/24 maxlen: 24
193.198.0.0/16 maxlen: 16
2001:b68::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/Qj5ipcKoD99-poRT7-iin0H8IH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 04:00:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:8e:95:41:e1:d2:b3:5c:29:fb:33:cf:e1:58:21:ed:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=423e62a5c2a80fdf7ea68453efe8a29f41fc207d
Validity
Not Before: Jul 23 10:46:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=023e1007040bdae36858a5d1cb06bf0e42c1c54f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:61:9d:60:34:03:1d:6c:85:24:cb:42:4c:de:
bc:96:78:ed:13:70:c0:d7:2d:f8:29:f6:59:bf:42:
b4:20:5e:6b:76:b0:13:7e:15:d0:11:58:76:8a:37:
9c:b9:c1:c9:c9:4f:d5:06:c3:f3:69:77:a3:3a:f2:
e2:27:39:dc:2d:1e:7e:2f:86:21:ac:b9:37:a1:a1:
c4:b5:3e:aa:ce:0b:48:ff:18:bc:78:53:76:a5:39:
12:4d:03:07:15:42:e3:66:29:53:ee:ea:75:62:bb:
ed:d9:40:08:ff:ce:da:35:2e:8b:e9:de:47:db:db:
bd:fb:a8:32:35:f6:65:c7:8b:b0:9f:8f:8b:44:d3:
5d:f1:ca:ca:df:0d:d0:73:12:f7:72:28:82:7e:a2:
91:6c:45:4f:52:3f:b8:b2:f3:51:bf:b8:41:a2:ea:
49:e6:db:69:6e:dc:a1:a0:32:fd:94:94:64:53:06:
01:19:9f:c7:a4:57:2a:93:fc:bb:0d:00:da:c7:dc:
05:63:e2:9a:24:16:7a:8e:60:8b:ff:d2:c7:11:39:
4e:16:47:ef:00:84:32:8c:cb:b4:33:fc:98:3f:38:
6f:c5:3f:c0:75:37:b2:b3:bd:a6:76:78:9a:89:15:
7e:ee:71:0f:95:fd:06:3e:8f:7b:27:76:09:2d:24:
9e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:3E:10:07:04:0B:DA:E3:68:58:A5:D1:CB:06:BF:0E:42:C1:C5:4F
X509v3 Authority Key Identifier:
keyid:42:3E:62:A5:C2:A8:0F:DF:7E:A6:84:53:EF:E8:A2:9F:41:FC:20:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Qj5ipcKoD99-poRT7-iin0H8IH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Aj4QBwQL2uNoWKXRywa_DkLBxU8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3d/8d53d0-ef20-4d22-ac47-7791752a9c6e/1/Qj5ipcKoD99-poRT7-iin0H8IH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
31.147.0.0/16
82.132.0.0/17
161.53.0.0/16
192.84.105.0-192.84.106.255
193.198.0.0/16
IPv6:
2001:b68::/32
Signature Algorithm: sha256WithRSAEncryption
6c:46:2f:18:d4:8f:52:d2:4e:4d:a6:cd:13:91:fc:ec:5c:52:
d8:16:32:79:b5:f2:4f:ee:f2:63:df:08:cf:93:5d:5a:a8:92:
8e:d6:ed:bf:85:8b:70:70:3f:da:25:fc:b7:c3:f7:99:82:bc:
e3:76:e1:ca:1b:53:23:1e:a1:11:85:03:9e:08:8b:5d:14:4b:
c0:82:3c:d9:62:0e:f7:9e:91:cc:8e:d3:df:df:ec:c3:30:9a:
ac:7c:c1:af:be:e4:3a:2f:5f:85:e9:4b:77:f1:67:30:4f:9c:
eb:af:71:41:d5:a0:6c:f1:47:fa:7e:f0:5e:00:b2:4c:35:01:
06:25:07:93:56:7f:2c:85:23:be:9d:b2:75:dd:31:c0:2d:e4:
54:ba:f7:0c:80:48:82:2b:11:f7:3d:51:30:e8:ae:62:79:f7:
d8:bf:23:4f:fc:1b:a5:96:b6:0e:c4:cf:41:ba:57:f6:99:e7:
71:04:18:d9:e1:d4:76:6f:37:ff:bb:3a:35:42:f6:01:4a:2b:
13:21:dc:13:d5:99:e7:cb:29:ca:f6:63:55:37:83:b1:9e:a6:
6d:74:8b:30:1b:42:8a:a7:d9:86:d1:9b:0c:33:04:a2:f3:ad:
36:ac:b6:df:19:de:2b:c0:48:de:71:c1:79:21:c1:a6:77:11:
16:9e:96:f1
-----BEGIN CERTIFICATE-----
MIIFKTCCBBGgAwIBAgISAZ+OlUHh0rNcKfszz+FYIe26MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQyM2U2MmE1YzJhODBmZGY3ZWE2ODQ1M2VmZThhMjlmNDFm
YzIwN2QwHhcNMjYwNzIzMTA0NjE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwMjNlMTAwNzA0MGJkYWUzNjg1OGE1ZDFjYjA2YmYwZTQyYzFjNTRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtGGdYDQDHWyFJMtCTN68lnjtE3DA
1y34KfZZv0K0IF5rdrATfhXQEVh2ijecucHJyU/VBsPzaXejOvLiJzncLR5+L4Yh
rLk3oaHEtT6qzgtI/xi8eFN2pTkSTQMHFULjZilT7up1Yrvt2UAI/87aNS6L6d5H
29u9+6gyNfZlx4uwn4+LRNNd8crK3w3QcxL3ciiCfqKRbEVPUj+4svNRv7hBoupJ
5ttpbtyhoDL9lJRkUwYBGZ/HpFcqk/y7DQDax9wFY+KaJBZ6jmCL/9LHETlOFkfv
AIQyjMu0M/yYPzhvxT/AdTeys72mdniaiRV+7nEPlf0GPo97J3YJLSSenQIDAQAB
o4ICNTCCAjEwHQYDVR0OBBYEFAI+EAcEC9rjaFil0csGvw5CwcVPMB8GA1UdIwQY
MBaAFEI+YqXCqA/ffqaEU+/oop9B/CB9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUWo1aXBjS29EOTktcG9SVDctaWluMEg4SUgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zZC84ZDUzZDAtZWYyMC00ZDIyLWFjNDct
Nzc5MTc1MmE5YzZlLzEvQWo0UUJ3UUwydU5vV0tYUnl3YV9Ea0xCeFU4LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zZC84ZDUzZDAtZWYyMC00ZDIyLWFjNDctNzc5MTc1MmE5YzZl
LzEvUWo1aXBjS29EOTktcG9SVDctaWluMEg4SUgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEsGCCsGAQUFBwEHAQH/BDwwOjApBAIAATAjAwMAH5MDBAdS
hAADAwChNTAMAwQAwFRpAwQAwFRqAwMAwcYwDQQCAAIwBwMFACABC2gwDQYJKoZI
hvcNAQELBQADggEBAGxGLxjUj1LSTk2mzROR/OxcUtgWMnm18k/u8mPfCM+TXVqo
ko7W7b+Fi3BwP9ol/LfD95mCvON24cobUyMeoRGFA54Ii10US8CCPNliDveekcyO
09/f7MMwmqx8wa++5DovX4XpS3fxZzBPnOuvcUHVoGzxR/p+8F4Askw1AQYlB5NW
fyyFI76dsnXdMcAt5FS69wyASIIrEfc9UTDormJ599i/I0/8G6WWtg7Ez0G6V/aZ
53EEGNnh1HZvN/+7OjVC9gFKKxMh3BPVmefLKcr2Y1U3g7Gepm10izAbQoqn2YbR
mwwzBKLzrTastt8Z3ivASN5xwXkhwaZ3ERaelvE=
-----END CERTIFICATE-----
Generated at Fri Jul 24 09:59:57 2026 by rpki-client