Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/q1JURLd9vPg2ZEVFw3HbNbZQiwY.roa
File: q1JURLd9vPg2ZEVFw3HbNbZQiwY.roa (raw, json)
Hash identifier: iHyXS2U/MvjHApO8EPSodH4gSLDPv/lbRHcjdHk3d+c=
Subject key identifier: AB:52:54:44:B7:7D:BC:F8:36:64:45:45:C3:71:DB:35:B6:50:8B:06
Certificate issuer: /CN=52226f671c2643a5c04846264fee01f943ac2bfc
Certificate serial: 019F5FA61AB0A4E66D8277DE1B648876875B
Authority key identifier: 52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/q1JURLd9vPg2ZEVFw3HbNbZQiwY.roa
Signing time: Tue 14 Jul 2026 08:02:29 +0000
ROA not before: Tue 14 Jul 2026 08:02:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 219429
IP address blocks: 80.86.215.0/24 maxlen: 24
80.86.218.0/23 maxlen: 23
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.mft
rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:5f:a6:1a:b0:a4:e6:6d:82:77:de:1b:64:88:76:87:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52226f671c2643a5c04846264fee01f943ac2bfc
Validity
Not Before: Jul 14 08:02:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ab525444b77dbcf836644545c371db35b6508b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:e5:98:d2:78:13:d6:53:07:c6:b7:38:bd:26:
15:7e:a0:f0:16:47:51:71:be:2c:38:2b:11:db:f0:
3c:cf:2d:3d:ab:85:81:7b:f3:b1:7b:87:e4:67:35:
f2:c6:d0:be:0c:ee:3d:8d:76:49:1d:05:2e:27:6f:
e7:e2:17:7c:0a:46:97:4e:6e:ba:db:55:8d:d6:ff:
4b:b5:cb:f9:31:30:ff:a6:c8:69:2a:88:29:8d:0a:
93:21:e5:69:5f:d6:3f:0a:7a:b5:33:9a:fe:59:fd:
a6:ef:ab:a3:b1:10:b0:76:d7:07:50:88:13:06:f2:
9c:ed:81:82:96:94:0e:28:1b:0a:56:91:f9:4b:b8:
66:6f:f7:bd:2e:98:80:82:ce:2c:d8:c0:05:6c:27:
40:3d:91:07:29:6f:8c:29:0b:1c:eb:a1:32:33:a6:
34:5b:80:83:8b:a8:d1:99:f8:d5:39:12:dc:5a:13:
64:2b:9f:cd:20:3d:81:7b:53:aa:c3:11:e5:14:26:
e1:25:a8:75:93:64:fe:3e:97:b6:d7:87:4a:d4:73:
88:2d:8b:40:bc:bb:25:b1:c5:8c:29:44:73:87:fb:
15:b3:96:36:4c:4a:4a:7b:ab:28:34:5a:f8:af:00:
e8:e5:52:ab:2f:a2:9d:42:03:0d:f1:a2:83:9f:e1:
47:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:52:54:44:B7:7D:BC:F8:36:64:45:45:C3:71:DB:35:B6:50:8B:06
X509v3 Authority Key Identifier:
keyid:52:22:6F:67:1C:26:43:A5:C0:48:46:26:4F:EE:01:F9:43:AC:2B:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UiJvZxwmQ6XASEYmT-4B-UOsK_w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/q1JURLd9vPg2ZEVFw3HbNbZQiwY.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/2b4d0f-219f-4c00-8648-a12de3a33553/1/UiJvZxwmQ6XASEYmT-4B-UOsK_w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.86.215.0/24
80.86.218.0/23
Signature Algorithm: sha256WithRSAEncryption
8c:cf:ce:e1:e5:55:80:9c:9a:09:b7:0f:da:7c:ec:a5:8b:2d:
52:28:25:aa:d7:e2:10:49:c6:d8:93:f8:b5:e4:d1:c5:6a:dd:
4d:3f:9d:7a:2e:6b:6f:99:bc:08:0e:13:e3:2d:de:90:c0:5a:
a8:c0:08:5f:5a:20:5f:2a:e4:d7:b4:72:36:36:98:20:47:70:
80:53:04:89:53:a4:19:9a:76:1d:42:cb:c5:44:bb:20:35:35:
40:d9:80:f0:f2:67:55:55:fc:4d:ae:e9:b5:1e:2d:d9:72:c6:
27:51:79:9e:de:94:d0:a5:d6:ca:3e:f2:3e:35:97:b7:92:f5:
88:b3:fc:c2:22:e3:ef:c3:b1:ad:08:29:7a:39:c5:4f:7b:99:
2c:95:f5:c1:29:ec:b9:ea:75:a4:4d:a4:52:5a:56:fa:8a:57:
21:3a:d5:33:07:a1:b2:76:6a:3e:1b:61:79:31:42:56:ca:99:
df:c8:57:2a:5f:03:86:bd:bb:4b:d9:4b:5d:46:01:0a:bf:df:
bd:b5:60:89:ee:07:4e:05:87:92:88:59:98:93:c8:fb:53:41:
a7:54:34:ea:83:03:c6:cf:6d:79:f8:8e:3b:ef:0d:0c:ff:27:
b0:c7:0b:a4:5b:0b:fd:8a:fc:bb:a7:7e:ba:40:d0:d7:54:3e:
95:20:e2:bb
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZ9fphqwpOZtgnfeG2SIdodbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyMjI2ZjY3MWMyNjQzYTVjMDQ4NDYyNjRmZWUwMWY5NDNh
YzJiZmMwHhcNMjYwNzE0MDgwMjI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYjUyNTQ0NGI3N2RiY2Y4MzY2NDQ1NDVjMzcxZGIzNWI2NTA4YjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAquWY0ngT1lMHxrc4vSYVfqDwFkdR
cb4sOCsR2/A8zy09q4WBe/Oxe4fkZzXyxtC+DO49jXZJHQUuJ2/n4hd8CkaXTm66
21WN1v9Ltcv5MTD/pshpKogpjQqTIeVpX9Y/Cnq1M5r+Wf2m76ujsRCwdtcHUIgT
BvKc7YGClpQOKBsKVpH5S7hmb/e9LpiAgs4s2MAFbCdAPZEHKW+MKQsc66EyM6Y0
W4CDi6jRmfjVORLcWhNkK5/NID2Be1OqwxHlFCbhJah1k2T+Ppe214dK1HOILYtA
vLslscWMKURzh/sVs5Y2TEpKe6soNFr4rwDo5VKrL6KdQgMN8aKDn+FH9wIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFKtSVES3fbz4NmRFRcNx2zW2UIsGMB8GA1UdIwQY
MBaAFFIib2ccJkOlwEhGJk/uAflDrCv8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgt
YTEyZGUzYTMzNTUzLzEvcTFKVVJMZDl2UGcyWkVWRnczSGJOYlpRaXdZLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8yYjRkMGYtMjE5Zi00YzAwLTg2NDgtYTEyZGUzYTMzNTUz
LzEvVWlKdlp4d21RNlhBU0VZbVQtNEItVU9zS193LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQAUFbXAwQB
UFbaMA0GCSqGSIb3DQEBCwUAA4IBAQCMz87h5VWAnJoJtw/afOyliy1SKCWq1+IQ
ScbYk/i15NHFat1NP516LmtvmbwIDhPjLd6QwFqowAhfWiBfKuTXtHI2NpggR3CA
UwSJU6QZmnYdQsvFRLsgNTVA2YDw8mdVVfxNrum1Hi3ZcsYnUXme3pTQpdbKPvI+
NZe3kvWIs/zCIuPvw7GtCCl6OcVPe5kslfXBKey56nWkTaRSWlb6ilchOtUzB6Gy
dmo+G2F5MUJWypnfyFcqXwOGvbtL2UtdRgEKv9+9tWCJ7gdOBYeSiFmYk8j7U0Gn
VDTqgwPGz215+I477w0M/yewxwukWwv9ivy7p366QNDXVD6VIOK7
-----END CERTIFICATE-----
Generated at Fri Jul 24 03:27:46 2026 by rpki-client