Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/qOL6iqGUIlfB1pXMt6vEk0hHnIU.roa
File: qOL6iqGUIlfB1pXMt6vEk0hHnIU.roa (raw, json)
Hash identifier: il6LfNwqIKdUOIBUd8eQIiTLVoCNRh9t0cdNoogTUW4=
Subject key identifier: A8:E2:FA:8A:A1:94:22:57:C1:D6:95:CC:B7:AB:C4:93:48:47:9C:85
Certificate issuer: /CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Certificate serial: 01A190D959C82981B191BBEC8D99E12385F6
Authority key identifier: 49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/qOL6iqGUIlfB1pXMt6vEk0hHnIU.roa
Signing time: Sat 31 Oct 2026 07:25:25 +0000
ROA not before: Sat 31 Oct 2026 07:25:25 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 57043
IP address blocks: 80.71.226.0/24 maxlen: 24
81.29.144.0/24 maxlen: 24
81.29.146.0/24 maxlen: 24
81.29.147.0/24 maxlen: 24
81.29.155.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.mft
rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:90:d9:59:c8:29:81:b1:91:bb:ec:8d:99:e1:23:85:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=49e51694c4d46b4fcc02fae71e5db942a7108e47
Validity
Not Before: Oct 31 07:25:25 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a8e2fa8aa1942257c1d695ccb7abc49348479c85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:5e:40:9d:92:02:dc:c7:95:30:e1:3f:80:85:
7a:85:5f:e6:01:4f:5c:7c:4e:bc:2c:42:73:49:ff:
60:67:e0:17:4f:55:1e:3e:27:56:39:db:67:52:00:
7d:3a:a5:ea:f6:30:0a:1c:42:df:cc:14:76:11:c4:
e8:73:11:c5:23:77:fd:06:22:fe:39:23:07:a6:4e:
87:f9:be:40:9c:05:ad:64:52:7e:d3:cd:d5:ec:9e:
01:0a:42:01:67:a3:00:4c:88:2f:b1:74:9e:39:90:
7c:7e:5b:3f:d4:b6:00:b6:c9:e9:27:f1:de:4e:ac:
b6:17:16:bd:02:d0:ac:71:fe:6f:fa:c8:20:85:a8:
a5:29:67:99:bb:f5:7d:04:5a:06:8e:1d:4d:db:b4:
33:e9:be:4b:2d:85:23:89:5a:4d:07:97:93:45:9a:
7f:6f:2e:d0:13:81:9b:3e:24:16:69:30:95:7d:1d:
5f:4a:6d:82:07:40:bb:f1:8e:be:8e:2c:20:3f:9d:
d7:ed:2e:00:74:06:f8:e4:29:a3:b0:3f:fe:f9:51:
bd:b7:8c:fc:45:58:f5:86:ad:66:19:50:65:cf:c3:
9e:29:86:14:c1:a8:c0:fe:c8:94:87:33:bb:e5:0f:
9c:ab:b4:7b:83:ff:50:b8:e5:76:19:09:fd:4b:fe:
08:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:E2:FA:8A:A1:94:22:57:C1:D6:95:CC:B7:AB:C4:93:48:47:9C:85
X509v3 Authority Key Identifier:
keyid:49:E5:16:94:C4:D4:6B:4F:CC:02:FA:E7:1E:5D:B9:42:A7:10:8E:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SeUWlMTUa0_MAvrnHl25QqcQjkc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/qOL6iqGUIlfB1pXMt6vEk0hHnIU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/9db525-1059-4c07-a5ad-19189b3c9c7d/1/SeUWlMTUa0_MAvrnHl25QqcQjkc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
80.71.226.0/24
81.29.144.0/24
81.29.146.0/23
81.29.155.0/24
Signature Algorithm: sha256WithRSAEncryption
2c:93:5d:ef:f0:a6:bf:01:b3:44:09:2a:54:b9:f2:a2:ce:93:
87:d4:c7:7d:fc:b9:d4:8b:f8:f9:69:b7:d7:85:80:d7:4f:18:
83:fc:ad:5e:d2:cd:59:5b:4e:f6:f4:82:27:00:98:f9:41:16:
18:ae:59:32:2a:85:0c:51:46:ba:83:e6:8a:2d:45:41:5b:a6:
31:68:f7:ac:69:b5:14:17:5a:75:19:a6:7e:39:3e:24:50:18:
dd:9d:08:06:a7:c8:cb:dd:82:4d:92:76:df:95:90:ad:c0:91:
c2:98:c3:6d:d2:12:6b:28:f0:52:97:6e:7e:ba:9c:8a:f9:98:
d5:84:a6:14:e9:e6:d6:6e:7e:41:33:7d:bb:16:fe:66:25:81:
c3:0c:86:b1:d4:85:4f:5d:c6:5e:b6:0b:91:54:2e:2b:16:85:
f6:c4:ff:20:ee:c8:6b:2e:a2:24:a6:31:a2:85:7d:78:15:bb:
49:6a:3d:ac:77:af:99:ce:00:66:b5:72:e9:22:b9:e5:1a:d8:
35:37:ee:7b:11:df:5c:4c:72:99:d6:09:bf:e1:34:19:91:06:
17:07:2b:be:4e:e9:6a:a9:12:12:c9:3e:38:32:bf:d5:fb:f1:
f4:11:24:f8:b8:6d:95:84:1b:42:8d:8a:2a:b1:f1:fd:6f:b7:
43:47:10:62
-----BEGIN CERTIFICATE-----
MIIFDzCCA/egAwIBAgISAaGQ2VnIKYGxkbvsjZnhI4X2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5ZTUxNjk0YzRkNDZiNGZjYzAyZmFlNzFlNWRiOTQyYTcx
MDhlNDcwHhcNMjYxMDMxMDcyNTI1WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOGUyZmE4YWExOTQyMjU3YzFkNjk1Y2NiN2FiYzQ5MzQ4NDc5Yzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtV5AnZIC3MeVMOE/gIV6hV/mAU9c
fE68LEJzSf9gZ+AXT1UePidWOdtnUgB9OqXq9jAKHELfzBR2EcTocxHFI3f9BiL+
OSMHpk6H+b5AnAWtZFJ+083V7J4BCkIBZ6MATIgvsXSeOZB8fls/1LYAtsnpJ/He
Tqy2Fxa9AtCscf5v+sgghailKWeZu/V9BFoGjh1N27Qz6b5LLYUjiVpNB5eTRZp/
by7QE4GbPiQWaTCVfR1fSm2CB0C78Y6+jiwgP53X7S4AdAb45CmjsD/++VG9t4z8
RVj1hq1mGVBlz8OeKYYUwajA/siUhzO75Q+cq7R7g/9QuOV2GQn9S/4I5wIDAQAB
o4ICGzCCAhcwHQYDVR0OBBYEFKji+oqhlCJXwdaVzLerxJNIR5yFMB8GA1UdIwQY
MBaAFEnlFpTE1GtPzAL65x5duUKnEI5HMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQt
MTkxODliM2M5YzdkLzEvcU9MNmlxR1VJbGZCMXBYTXQ2dkVrMGhIbklVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni85ZGI1MjUtMTA1OS00YzA3LWE1YWQtMTkxODliM2M5Yzdk
LzEvU2VVV2xNVFVhMF9NQXZybkhsMjVRcWNRamtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDEGCCsGAQUFBwEHAQH/BCIwIDAeBAIAATAYAwQAUEfiAwQA
UR2QAwQBUR2SAwQAUR2bMA0GCSqGSIb3DQEBCwUAA4IBAQAsk13v8Ka/AbNECSpU
ufKizpOH1Md9/LnUi/j5abfXhYDXTxiD/K1e0s1ZW0729IInAJj5QRYYrlkyKoUM
UUa6g+aKLUVBW6YxaPesabUUF1p1GaZ+OT4kUBjdnQgGp8jL3YJNknbflZCtwJHC
mMNt0hJrKPBSl25+upyK+ZjVhKYU6ebWbn5BM327Fv5mJYHDDIax1IVPXcZetguR
VC4rFoX2xP8g7shrLqIkpjGihX14FbtJaj2sd6+ZzgBmtXLpIrnlGtg1N+57Ed9c
THKZ1gm/4TQZkQYXByu+TulqqRISyT44Mr/V+/H0EST4uG2VhBtCjYoqsfH9b7dD
RxBi
-----END CERTIFICATE-----
Generated at Sun Nov 15 18:15:26 2026 by rpki-client