Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/qUdUjzO5wbIJQqS_VlLhpc89w3g.roa
File: qUdUjzO5wbIJQqS_VlLhpc89w3g.roa (raw, json)
Hash identifier: 0jNylDiJyEdjtPsOF21hCjhqjEzpVgAdCqxEIg+vfcM=
Subject key identifier: A9:47:54:8F:33:B9:C1:B2:09:42:A4:BF:56:52:E1:A5:CF:3D:C3:78
Certificate issuer: /CN=302d11e852615740076b3281b8aff0fac5ca2f33
Certificate serial: 019F86316F8B3215CFD70BABF333DE348478
Authority key identifier: 30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/qUdUjzO5wbIJQqS_VlLhpc89w3g.roa
Signing time: Tue 21 Jul 2026 19:40:14 +0000
ROA not before: Tue 21 Jul 2026 19:40:14 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 39212
IP address blocks: 185.182.24.0/24 maxlen: 24
185.182.26.0/24 maxlen: 24
2a0a:df80:24::/48 maxlen: 48
2a0a:df80:26::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:86:31:6f:8b:32:15:cf:d7:0b:ab:f3:33:de:34:84:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=302d11e852615740076b3281b8aff0fac5ca2f33
Validity
Not Before: Jul 21 19:40:14 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a947548f33b9c1b20942a4bf5652e1a5cf3dc378
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:de:ce:90:c1:74:44:a7:5e:63:af:bd:27:a3:
08:64:a3:a5:db:69:0e:fe:12:49:c2:eb:d8:5d:c2:
8b:9b:21:e9:e4:19:12:da:08:55:ad:25:6b:fd:6e:
01:31:35:f5:37:0a:79:8b:a5:f2:67:53:84:5d:55:
80:ec:a7:ee:00:93:b3:69:37:23:ac:98:37:84:0a:
d2:3d:4f:2a:fc:3e:9d:88:6b:75:9a:cb:bf:ee:f3:
d3:91:1b:44:7c:5a:1f:ee:6a:60:2a:a0:60:54:ec:
69:f1:7d:a3:fa:42:49:2d:61:34:0f:c0:60:15:60:
6a:22:74:7c:60:42:96:61:f2:24:40:d3:1e:53:1a:
d2:d5:22:15:a7:57:bc:46:c8:30:e9:96:24:64:04:
0b:3d:d6:9b:ac:45:c3:f3:54:46:7b:19:c9:90:48:
80:0f:cf:25:99:e6:23:23:5a:7f:81:7b:eb:a3:96:
0d:e1:72:34:91:01:76:d2:c5:35:3e:bf:89:49:02:
4b:82:02:5e:ee:d2:6e:7b:5f:8a:7c:6f:96:dc:36:
bd:03:6a:cc:d4:01:a6:06:57:9a:b5:0d:6b:b7:19:
dc:5a:c6:15:05:7e:8b:13:87:b8:99:d0:a7:9f:f8:
76:42:9c:b8:74:3c:78:75:ea:92:d3:2a:ea:90:cd:
50:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:47:54:8F:33:B9:C1:B2:09:42:A4:BF:56:52:E1:A5:CF:3D:C3:78
X509v3 Authority Key Identifier:
keyid:30:2D:11:E8:52:61:57:40:07:6B:32:81:B8:AF:F0:FA:C5:CA:2F:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MC0R6FJhV0AHazKBuK_w-sXKLzM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/qUdUjzO5wbIJQqS_VlLhpc89w3g.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/bd3880-fc26-4121-b2e4-e6d6e8aebef8/1/MC0R6FJhV0AHazKBuK_w-sXKLzM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.182.24.0/24
185.182.26.0/24
IPv6:
2a0a:df80:24::/48
2a0a:df80:26::/48
Signature Algorithm: sha256WithRSAEncryption
66:34:77:a1:04:7d:d0:88:02:22:48:68:ac:72:8b:03:13:2b:
0d:04:02:ee:03:cd:b6:e9:d5:f0:32:e1:4a:05:b5:a4:44:52:
88:13:50:02:4f:af:b9:30:c3:f2:d8:91:ce:69:18:d0:02:db:
b3:1f:5e:47:80:e8:16:6c:10:86:b9:bc:f7:43:95:69:36:84:
c1:54:d6:a5:8b:ae:49:40:06:07:71:dc:bc:98:9b:3e:11:2f:
c4:19:a9:c4:a8:03:2f:18:b8:05:c5:11:4b:b8:01:ed:e3:aa:
5b:78:6e:2e:b2:a2:dc:7a:ea:56:66:93:14:0e:cf:43:d7:0d:
81:45:03:06:81:48:0d:23:6c:8d:6f:ce:fc:ea:4e:9d:d4:61:
d0:e7:6e:77:c5:ff:57:28:16:ef:09:29:7a:d0:ec:e7:27:e0:
98:3f:2f:3e:bf:de:b5:ab:74:4f:52:95:5b:41:de:e8:33:ef:
d0:5f:55:90:0f:28:38:59:f2:91:f6:ca:30:9a:e0:54:c1:bc:
6a:68:29:a3:0d:68:40:3d:06:9c:af:07:2a:90:24:aa:ac:19:
7b:82:ff:a5:c7:00:32:c3:3a:1d:37:3a:a3:8f:39:af:e7:fd:
d5:97:cb:14:50:22:3c:eb:a3:00:f6:7d:7f:02:f9:66:23:d0:
a8:e7:54:59
-----BEGIN CERTIFICATE-----
MIIFHTCCBAWgAwIBAgISAZ+GMW+LMhXP1wur8zPeNIR4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMmQxMWU4NTI2MTU3NDAwNzZiMzI4MWI4YWZmMGZhYzVj
YTJmMzMwHhcNMjYwNzIxMTk0MDE0WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTQ3NTQ4ZjMzYjljMWIyMDk0MmE0YmY1NjUyZTFhNWNmM2RjMzc4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmt7OkMF0RKdeY6+9J6MIZKOl22kO
/hJJwuvYXcKLmyHp5BkS2ghVrSVr/W4BMTX1Nwp5i6XyZ1OEXVWA7KfuAJOzaTcj
rJg3hArSPU8q/D6diGt1msu/7vPTkRtEfFof7mpgKqBgVOxp8X2j+kJJLWE0D8Bg
FWBqInR8YEKWYfIkQNMeUxrS1SIVp1e8Rsgw6ZYkZAQLPdabrEXD81RGexnJkEiA
D88lmeYjI1p/gXvro5YN4XI0kQF20sU1Pr+JSQJLggJe7tJue1+KfG+W3Da9A2rM
1AGmBleatQ1rtxncWsYVBX6LE4e4mdCnn/h2Qpy4dDx4deqS0yrqkM1QwQIDAQAB
o4ICKTCCAiUwHQYDVR0OBBYEFKlHVI8zucGyCUKkv1ZS4aXPPcN4MB8GA1UdIwQY
MBaAFDAtEehSYVdAB2sygbiv8PrFyi8zMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUMwUjZGSmhWMEFIYXpLQnVLX3ctc1hLTHpNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi9iZDM4ODAtZmMyNi00MTIxLWIyZTQt
ZTZkNmU4YWViZWY4LzEvcVVkVWp6TzV3YklKUXFTX1ZsTGhwYzg5dzNnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi9iZDM4ODAtZmMyNi00MTIxLWIyZTQtZTZkNmU4YWViZWY4
LzEvTUMwUjZGSmhWMEFIYXpLQnVLX3ctc1hLTHpNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD8GCCsGAQUFBwEHAQH/BDAwLjASBAIAATAMAwQAubYYAwQA
ubYaMBgEAgACMBIDBwAqCt+AACQDBwAqCt+AACYwDQYJKoZIhvcNAQELBQADggEB
AGY0d6EEfdCIAiJIaKxyiwMTKw0EAu4Dzbbp1fAy4UoFtaREUogTUAJPr7kww/LY
kc5pGNAC27MfXkeA6BZsEIa5vPdDlWk2hMFU1qWLrklABgdx3LyYmz4RL8QZqcSo
Ay8YuAXFEUu4Ae3jqlt4bi6yotx66lZmkxQOz0PXDYFFAwaBSA0jbI1vzvzqTp3U
YdDnbnfF/1coFu8JKXrQ7Ocn4Jg/Lz6/3rWrdE9SlVtB3ugz79BfVZAPKDhZ8pH2
yjCa4FTBvGpoKaMNaEA9BpyvByqQJKqsGXuC/6XHADLDOh03OqOPOa/n/dWXyxRQ
IjzrowD2fX8C+WYj0KjnVFk=
-----END CERTIFICATE-----
Generated at Fri Jul 24 18:45:16 2026 by rpki-client