Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/iwqmKLXUuOArXvbBkZW7y-ChZt0.roa
File: iwqmKLXUuOArXvbBkZW7y-ChZt0.roa (raw, json)
Hash identifier: YnoIi/iHGRKLb9cTSBFYYYySVFtx+jH8kBK+SYHWRvs=
Subject key identifier: 8B:0A:A6:28:B5:D4:B8:E0:2B:5E:F6:C1:91:95:BB:CB:E0:A1:66:DD
Certificate issuer: /CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Certificate serial: 019ED60BA64D49BD93CB3657EE3D685C7D35
Authority key identifier: D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/iwqmKLXUuOArXvbBkZW7y-ChZt0.roa
Signing time: Wed 17 Jun 2026 14:45:48 +0000
ROA not before: Wed 17 Jun 2026 14:45:48 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 24768
IP address blocks: 176.111.108.0/22 maxlen: 22
176.111.108.0/24 maxlen: 24
176.111.109.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.mft
rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 23:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:d6:0b:a6:4d:49:bd:93:cb:36:57:ee:3d:68:5c:7d:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d3592aac489522d5db18fd6391e035a9778ea3b1
Validity
Not Before: Jun 17 14:45:48 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=8b0aa628b5d4b8e02b5ef6c19195bbcbe0a166dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:72:ce:1c:ff:6d:e8:c3:59:d1:97:00:1c:e9:
d8:8a:72:dd:94:67:40:a5:85:d1:d6:fd:5a:cf:74:
4d:c0:12:0b:34:f6:ee:d6:e7:66:20:01:50:8d:7b:
23:fd:ab:9b:c2:97:97:4f:74:18:7f:d0:e8:45:a7:
3e:8f:c7:95:12:5d:00:cd:20:ed:d2:5b:3f:ee:a2:
94:6d:a6:36:c2:bb:bf:7b:fc:c4:9a:92:45:72:81:
be:01:50:27:2b:a5:f1:11:45:80:3a:cf:4a:b4:ba:
7b:4a:90:90:37:c4:70:66:e3:fc:41:2e:cc:0a:e9:
51:70:3b:ff:54:f2:4b:54:c8:74:09:69:02:17:ed:
57:bb:11:3b:3a:d5:81:69:5f:12:b6:da:f6:c8:e2:
bd:ad:71:96:98:04:52:67:04:5e:05:e0:de:a3:04:
40:59:aa:15:b4:de:59:87:7f:ee:f8:1c:e4:04:c4:
5f:c6:18:49:6f:3d:b6:46:3d:d4:c1:5e:db:09:98:
d8:55:58:1b:ed:68:d3:74:43:da:c5:c4:9f:64:a6:
5d:6e:7d:2c:da:35:d5:e5:c2:ac:0b:c6:2e:82:59:
e9:91:4f:6f:f3:a4:1f:56:40:7a:12:51:94:04:b4:
28:86:70:19:30:fa:08:94:54:0d:b7:c0:ef:67:e9:
aa:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:0A:A6:28:B5:D4:B8:E0:2B:5E:F6:C1:91:95:BB:CB:E0:A1:66:DD
X509v3 Authority Key Identifier:
keyid:D3:59:2A:AC:48:95:22:D5:DB:18:FD:63:91:E0:35:A9:77:8E:A3:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/01kqrEiVItXbGP1jkeA1qXeOo7E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/iwqmKLXUuOArXvbBkZW7y-ChZt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5d/7b13fe-f62f-4e93-821e-e33ae106b54d/1/01kqrEiVItXbGP1jkeA1qXeOo7E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.111.108.0/22
Signature Algorithm: sha256WithRSAEncryption
7f:7b:fa:8d:5f:b0:2f:cc:dd:3a:ef:e7:fe:93:0b:7b:88:f6:
aa:ac:ea:5b:60:f9:d4:19:46:e1:4a:a3:2e:30:c9:ee:17:0d:
da:cc:a9:fb:04:c0:26:d2:70:90:c4:0c:6e:70:b1:11:cf:27:
ca:aa:1d:6a:31:82:06:c8:f4:13:92:7c:6f:a0:8c:40:78:8c:
92:91:44:0f:23:11:27:8d:04:b2:68:b9:a0:54:66:cc:27:4e:
19:1c:81:7b:1f:d3:31:7b:80:90:0c:61:dc:2c:94:32:ac:8d:
56:cb:fa:3f:90:45:66:e9:4d:b9:fc:ad:ff:b8:70:d9:62:2f:
14:ac:e2:8e:2b:6d:23:81:4f:89:24:c0:9e:42:b6:2a:7d:b6:
cb:6a:84:85:52:38:6b:d3:66:91:78:85:a3:b2:3d:50:f3:2b:
73:42:2b:0f:59:40:2d:6f:fd:21:13:38:c3:b2:94:df:c5:09:
23:c2:11:08:5d:f6:27:4a:7b:ab:8c:9b:c0:19:3a:6d:ba:7b:
ac:1f:52:a4:a7:25:dc:c8:24:6e:c2:74:77:a5:1f:b7:2f:7d:
9c:78:10:72:e2:b7:1c:e2:43:82:99:80:d5:92:09:7c:03:4a:
29:b6:b4:5d:12:b7:ca:45:b5:cb:e1:34:39:9c:2c:97:70:3d:
72:69:76:97
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ7WC6ZNSb2TyzZX7j1oXH01MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNTkyYWFjNDg5NTIyZDVkYjE4ZmQ2MzkxZTAzNWE5Nzc4
ZWEzYjEwHhcNMjYwNjE3MTQ0NTQ4WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
Eyg4YjBhYTYyOGI1ZDRiOGUwMmI1ZWY2YzE5MTk1YmJjYmUwYTE2NmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsnLOHP9t6MNZ0ZcAHOnYinLdlGdA
pYXR1v1az3RNwBILNPbu1udmIAFQjXsj/aubwpeXT3QYf9DoRac+j8eVEl0AzSDt
0ls/7qKUbaY2wru/e/zEmpJFcoG+AVAnK6XxEUWAOs9KtLp7SpCQN8RwZuP8QS7M
CulRcDv/VPJLVMh0CWkCF+1XuxE7OtWBaV8Sttr2yOK9rXGWmARSZwReBeDeowRA
WaoVtN5Zh3/u+BzkBMRfxhhJbz22Rj3UwV7bCZjYVVgb7WjTdEPaxcSfZKZdbn0s
2jXV5cKsC8YuglnpkU9v86QfVkB6ElGUBLQohnAZMPoIlFQNt8DvZ+mqfwIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFIsKpii11LjgK172wZGVu8vgoWbdMB8GA1UdIwQY
MBaAFNNZKqxIlSLV2xj9Y5HgNal3jqOxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZC83YjEzZmUtZjYyZi00ZTkzLTgyMWUt
ZTMzYWUxMDZiNTRkLzEvaXdxbUtMWFV1T0FyWHZiQmtaVzd5LUNoWnQwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZC83YjEzZmUtZjYyZi00ZTkzLTgyMWUtZTMzYWUxMDZiNTRk
LzEvMDFrcXJFaVZJdFhiR1AxamtlQTFxWGVPbzdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCsG9sMA0G
CSqGSIb3DQEBCwUAA4IBAQB/e/qNX7AvzN067+f+kwt7iPaqrOpbYPnUGUbhSqMu
MMnuFw3azKn7BMAm0nCQxAxucLERzyfKqh1qMYIGyPQTknxvoIxAeIySkUQPIxEn
jQSyaLmgVGbMJ04ZHIF7H9Mxe4CQDGHcLJQyrI1Wy/o/kEVm6U25/K3/uHDZYi8U
rOKOK20jgU+JJMCeQrYqfbbLaoSFUjhr02aReIWjsj1Q8ytzQisPWUAtb/0hEzjD
spTfxQkjwhEIXfYnSnurjJvAGTptunusH1KkpyXcyCRuwnR3pR+3L32ceBBy4rcc
4kOCmYDVkgl8A0optrRdErfKRbXL4TQ5nCyXcD1yaXaX
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:32 2026 by rpki-client