Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/zqXQxmKTmDm6GihOCrESd1pcxt0.roa
File: zqXQxmKTmDm6GihOCrESd1pcxt0.roa (raw, json)
Hash identifier: ffj2vkVxCUUpkzhVlo6ZR37XMhfIbdRLt/Ms4l+n+6k=
Subject key identifier: CE:A5:D0:C6:62:93:98:39:BA:1A:28:4E:0A:B1:12:77:5A:5C:C6:DD
Certificate issuer: /CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Certificate serial: 01A1AD6F221B2F76884C6157CD57F4BEC906
Authority key identifier: 6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/zqXQxmKTmDm6GihOCrESd1pcxt0.roa
Signing time: Thu 05 Nov 2026 20:38:23 +0000
ROA not before: Thu 05 Nov 2026 20:38:23 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48648
IP address blocks: 91.198.233.0/24 maxlen: 24
91.211.120.0/24 maxlen: 24
91.211.122.0/24 maxlen: 24
185.190.151.0/24 maxlen: 24
193.107.80.0/24 maxlen: 24
194.28.100.0/24 maxlen: 24
194.28.103.0/24 maxlen: 24
195.12.56.0/22 maxlen: 22
195.12.56.0/24 maxlen: 24
195.12.57.0/24 maxlen: 24
195.12.59.0/24 maxlen: 24
195.88.27.0/24 maxlen: 24
2a0a:2c0::/48 maxlen: 48
2a0a:2c0:2::/48 maxlen: 48
2a0a:2c0:a::/48 maxlen: 48
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.mft
rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 12:50:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:ad:6f:22:1b:2f:76:88:4c:61:57:cd:57:f4:be:c9:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6ce97cf4d8d0bc17b3af1d62c4d71488661bd212
Validity
Not Before: Nov 5 20:38:23 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=cea5d0c662939839ba1a284e0ab112775a5cc6dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f5:a5:4c:e4:0b:f0:cb:43:b5:a7:f4:8a:da:
aa:66:ce:d7:9d:3e:c1:2e:0b:13:d3:9d:04:7d:a2:
5b:5d:b3:7b:e6:07:2f:9c:32:61:ff:01:fa:ec:67:
11:68:48:13:58:aa:82:8e:17:f0:fc:c8:f6:db:6b:
49:d5:aa:35:50:f8:07:1f:12:14:a4:e6:1a:2c:c7:
10:bf:16:2d:e8:95:3e:04:23:d5:2e:7e:e2:68:b6:
ce:23:8b:48:35:5d:86:74:4a:03:60:d4:90:43:0c:
a5:b9:b2:42:93:c6:da:3e:aa:09:df:3f:7b:ac:97:
e3:f6:a7:1d:69:44:50:50:10:29:55:6b:4b:7c:44:
8c:c2:48:ff:6b:78:32:8e:29:da:00:64:02:2d:e0:
3d:80:2b:be:2e:03:1f:14:00:14:a7:43:72:40:6f:
cd:3c:44:fe:85:9a:a1:a5:39:03:0c:8d:f1:e5:06:
7b:94:b7:4d:f1:4c:1f:59:33:0c:11:a0:15:8b:1f:
d8:0d:40:12:b9:66:0b:1f:6d:7d:ad:0b:8d:ec:98:
c0:d5:59:3e:3d:25:a1:45:3b:c8:6c:50:78:40:c8:
e5:5a:55:a1:bd:d9:8e:0a:58:1e:02:65:78:16:3e:
eb:b6:b8:f2:74:ba:ec:47:17:36:56:20:72:e1:66:
fc:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:A5:D0:C6:62:93:98:39:BA:1A:28:4E:0A:B1:12:77:5A:5C:C6:DD
X509v3 Authority Key Identifier:
keyid:6C:E9:7C:F4:D8:D0:BC:17:B3:AF:1D:62:C4:D7:14:88:66:1B:D2:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bOl89NjQvBezrx1ixNcUiGYb0hI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/zqXQxmKTmDm6GihOCrESd1pcxt0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/e4ccb1-ca25-4099-8273-3993aa324e1f/1/bOl89NjQvBezrx1ixNcUiGYb0hI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.198.233.0/24
91.211.120.0/24
91.211.122.0/24
185.190.151.0/24
193.107.80.0/24
194.28.100.0/24
194.28.103.0/24
195.12.56.0/22
195.88.27.0/24
IPv6:
2a0a:2c0::/48
2a0a:2c0:2::/48
2a0a:2c0:a::/48
Signature Algorithm: sha256WithRSAEncryption
79:5e:57:4a:28:bb:9c:fb:60:28:26:40:6b:af:5e:96:f2:43:
77:44:7c:63:89:d2:01:ec:68:23:ba:2e:f5:82:7b:d9:9a:e9:
5c:65:ef:1c:7f:73:f4:5d:24:b7:d7:9b:e3:0c:84:c5:d3:9c:
75:4e:75:2a:4b:1e:e7:18:39:70:11:53:3a:a4:d8:e1:3f:0f:
1c:90:cb:df:72:80:36:c7:14:85:c4:2f:d4:54:15:3e:ff:7d:
04:f7:48:64:f7:4e:15:97:9d:b1:64:34:86:bd:9e:33:46:12:
48:65:59:04:69:5f:bf:dc:ad:ba:92:18:08:9b:9e:27:28:6b:
74:58:c4:c9:3c:ed:84:8e:3b:40:6c:61:7a:21:6f:49:1c:0f:
e0:38:31:65:4f:41:6e:42:83:66:77:e1:a8:27:2e:90:8a:1e:
1d:e4:e1:d5:6b:cc:1f:3b:44:95:89:bd:ff:3a:bc:6b:2d:09:
90:2c:83:f9:75:da:a2:be:78:04:5f:be:26:35:c0:49:80:9b:
07:d8:7b:1b:55:63:38:ee:63:40:0e:7c:93:01:1c:97:8c:36:
d9:21:2d:82:2f:cf:3c:99:d2:0e:3e:5e:c3:a1:eb:dd:90:c9:
d1:26:00:4a:a3:a3:88:fd:70:b4:96:c4:76:aa:4f:56:74:3f:
94:fc:7e:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Nov 15 22:08:40 2026 by rpki-client