Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/2QK16_GzCxStUDI0mu8WHffdpn8.roa
File: 2QK16_GzCxStUDI0mu8WHffdpn8.roa (raw, json)
Hash identifier: GKlCvD0CmH/A+xQlfrKSRNG2sqH4ve1r+aoC47JjAIU=
Subject key identifier: D9:02:B5:EB:F1:B3:0B:14:AD:50:32:34:9A:EF:16:1D:F7:DD:A6:7F
Certificate issuer: /CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Certificate serial: 019CFFD7A999A62E7EA5B981B9E753F054D8
Authority key identifier: 8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/2QK16_GzCxStUDI0mu8WHffdpn8.roa
Signing time: Wed 18 Mar 2026 07:27:29 +0000
ROA not before: Wed 18 Mar 2026 07:27:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 786
IP address blocks: 158.94.0.0/19 maxlen: 19
158.94.224.0/19 maxlen: 19
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.mft
rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:ff:d7:a9:99:a6:2e:7e:a5:b9:81:b9:e7:53:f0:54:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e41597923b981e1c0d4fca2ffd0a8cdc3667b7d
Validity
Not Before: Mar 18 07:27:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=d902b5ebf1b30b14ad5032349aef161df7dda67f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a3:7e:77:10:94:1c:31:98:d2:fa:94:14:21:
84:bb:b5:67:88:b3:9c:f0:32:dd:62:60:15:d1:5b:
40:aa:2c:8d:2c:79:e6:9d:fc:ce:89:08:63:81:43:
14:e4:84:4b:02:a6:49:66:85:d3:f2:b9:86:d5:e6:
9b:63:8e:8d:c7:3b:f6:3b:01:c4:5d:c2:c1:98:37:
b7:31:3d:85:ec:16:55:88:97:54:ad:47:ef:5f:c2:
17:e3:29:80:ee:00:84:20:2a:2c:74:55:9c:e5:45:
79:3f:0e:c8:bd:d2:59:9a:e0:22:97:41:50:c5:3e:
37:a2:3e:b8:bf:c4:e7:84:91:2b:c1:68:41:27:6f:
33:10:a3:7c:d8:4f:11:f9:0f:33:e3:db:4d:48:d0:
39:c8:68:ee:af:f6:56:a1:9b:c9:cf:7c:10:f7:9c:
ad:75:1e:4d:c5:d9:e6:dc:b7:7d:75:c0:1f:64:ff:
1a:b0:5c:e8:e4:af:3a:8e:cd:57:b0:33:e6:81:4f:
9f:cd:a0:61:39:43:92:17:35:72:8c:04:01:73:ca:
de:51:5f:d6:64:94:3a:e7:b9:71:35:f4:cf:95:58:
a6:a5:ca:34:0d:08:b6:b5:0c:bc:d6:01:9a:ae:14:
c9:ff:13:d5:16:1a:0b:0a:f2:05:d1:52:88:20:07:
9a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D9:02:B5:EB:F1:B3:0B:14:AD:50:32:34:9A:EF:16:1D:F7:DD:A6:7F
X509v3 Authority Key Identifier:
keyid:8E:41:59:79:23:B9:81:E1:C0:D4:FC:A2:FF:D0:A8:CD:C3:66:7B:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jkFZeSO5geHA1Pyi_9CozcNme30.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/2QK16_GzCxStUDI0mu8WHffdpn8.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/c96090-91d4-4403-bbfd-47ba33ba3c05/1/jkFZeSO5geHA1Pyi_9CozcNme30.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
158.94.0.0/19
158.94.224.0/19
Signature Algorithm: sha256WithRSAEncryption
50:af:0c:b5:de:87:0a:ea:21:89:d9:b4:00:c3:1a:ae:64:f1:
47:d0:fb:96:45:25:5c:f8:d8:88:56:c9:97:c6:d9:0a:f5:46:
a5:e7:c9:bc:7f:5e:f7:81:1d:48:e7:07:ab:3c:1e:56:e8:f8:
22:3e:de:f9:40:8e:f1:1b:4a:e3:8d:d7:66:7c:e6:11:00:44:
c6:63:11:98:64:74:29:c5:65:ec:49:8c:74:93:cb:f5:5b:85:
c5:f9:6c:9c:f4:d7:70:77:dc:c4:34:fc:70:b5:6a:74:a4:2e:
bb:ef:a2:3b:69:28:02:66:bf:5c:16:83:91:14:93:ae:8e:c7:
f5:91:1d:3c:37:cd:24:f8:c8:88:13:82:a0:38:0a:6e:a4:34:
3f:09:32:30:be:0e:04:fb:93:cd:5b:2a:2b:bb:0e:c1:ba:bf:
fd:5e:5e:5f:bc:d8:92:01:38:64:f7:8e:14:58:e4:c0:fd:7e:
ce:2c:2a:b5:3e:33:c4:c8:72:b0:6d:46:c2:71:c1:d2:8b:0a:
a9:f0:0a:f3:1e:fc:3d:cc:c3:fb:a3:92:a5:a9:b8:07:56:b2:
01:5f:d1:82:7d:d9:9e:a0:02:cd:1f:9f:ca:33:de:47:a1:c8:
2e:24:f8:a5:31:89:04:7e:68:69:62:82:a6:39:77:14:9a:e5:
ef:d4:89:f8
-----BEGIN CERTIFICATE-----
MIIFAzCCA+ugAwIBAgISAZz/16mZpi5+pbmBuedT8FTYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhlNDE1OTc5MjNiOTgxZTFjMGQ0ZmNhMmZmZDBhOGNkYzM2
NjdiN2QwHhcNMjYwMzE4MDcyNzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhkOTAyYjVlYmYxYjMwYjE0YWQ1MDMyMzQ5YWVmMTYxZGY3ZGRhNjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvaN+dxCUHDGY0vqUFCGEu7VniLOc
8DLdYmAV0VtAqiyNLHnmnfzOiQhjgUMU5IRLAqZJZoXT8rmG1eabY46Nxzv2OwHE
XcLBmDe3MT2F7BZViJdUrUfvX8IX4ymA7gCEICosdFWc5UV5Pw7IvdJZmuAil0FQ
xT43oj64v8TnhJErwWhBJ28zEKN82E8R+Q8z49tNSNA5yGjur/ZWoZvJz3wQ95yt
dR5Nxdnm3Ld9dcAfZP8asFzo5K86js1XsDPmgU+fzaBhOUOSFzVyjAQBc8reUV/W
ZJQ657lxNfTPlVimpco0DQi2tQy81gGarhTJ/xPVFhoLCvIF0VKIIAeaDQIDAQAB
o4ICDzCCAgswHQYDVR0OBBYEFNkCtevxswsUrVAyNJrvFh333aZ/MB8GA1UdIwQY
MBaAFI5BWXkjuYHhwNT8ov/QqM3DZnt9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvamtGWmVTTzVnZUhBMVB5aV85Q296Y05tZTMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS9jOTYwOTAtOTFkNC00NDAzLWJiZmQt
NDdiYTMzYmEzYzA1LzEvMlFLMTZfR3pDeFN0VURJMG11OFdIZmZkcG44LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS9jOTYwOTAtOTFkNC00NDAzLWJiZmQtNDdiYTMzYmEzYzA1
LzEvamtGWmVTTzVnZUhBMVB5aV85Q296Y05tZTMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQFnl4AAwQF
nl7gMA0GCSqGSIb3DQEBCwUAA4IBAQBQrwy13ocK6iGJ2bQAwxquZPFH0PuWRSVc
+NiIVsmXxtkK9Ual58m8f173gR1I5werPB5W6PgiPt75QI7xG0rjjddmfOYRAETG
YxGYZHQpxWXsSYx0k8v1W4XF+Wyc9Ndwd9zENPxwtWp0pC6776I7aSgCZr9cFoOR
FJOujsf1kR08N80k+MiIE4KgOApupDQ/CTIwvg4E+5PNWyoruw7Bur/9Xl5fvNiS
AThk944UWOTA/X7OLCq1PjPEyHKwbUbCccHSiwqp8ArzHvw9zMP7o5KlqbgHVrIB
X9GCfdmeoALNH5/KM95HocguJPilMYkEfmhpYoKmOXcUmuXv1In4
-----END CERTIFICATE-----
Generated at Thu Mar 26 07:55:46 2026 by rpki-client