Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/qi7DumYqOb_2Ji68qci3HXVuXwA.roa
File: qi7DumYqOb_2Ji68qci3HXVuXwA.roa (raw, json)
Hash identifier: LWnpe3rZCe4uDNXUTaaSpU6AS5hw8Cx+t5qYkabhaNM=
Subject key identifier: AA:2E:C3:BA:66:2A:39:BF:F6:26:2E:BC:A9:C8:B7:1D:75:6E:5F:00
Certificate issuer: /CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Certificate serial: 019CB8B21F7FC7C28859DF6AC84D780AAAC6
Authority key identifier: 87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/qi7DumYqOb_2Ji68qci3HXVuXwA.roa
Signing time: Wed 04 Mar 2026 11:53:27 +0000
ROA not before: Wed 04 Mar 2026 11:53:27 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 210546
IP address blocks: 176.126.103.0/24 maxlen: 24
178.250.186.0/24 maxlen: 24
217.114.43.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 26 Mar 2026 11:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9c:b8:b2:1f:7f:c7:c2:88:59:df:6a:c8:4d:78:0a:aa:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8778ad8168e09cf92d4e0498257f8e9ceabf0692
Validity
Not Before: Mar 4 11:53:27 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa2ec3ba662a39bff6262ebca9c8b71d756e5f00
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:f9:ab:2f:c5:b1:2f:f2:1b:e5:23:4b:8e:f8:
95:50:2d:00:bd:e6:6c:71:01:3a:33:9a:6a:e6:3b:
83:27:6a:6d:a9:18:50:88:6a:81:f6:32:b8:20:ae:
f7:30:e3:54:52:54:79:d6:88:ab:49:44:0e:b4:ec:
be:04:81:6f:64:56:fa:66:24:da:68:35:af:02:c8:
f1:96:81:dd:c1:8f:7a:2c:43:7b:6e:5c:6f:45:84:
99:1d:73:58:71:2e:af:86:e0:e8:43:70:e7:92:72:
74:fc:73:b5:88:15:a8:3c:ca:3b:40:96:9b:c8:9f:
8b:b3:07:c8:46:91:99:13:70:7c:8d:a2:1d:bf:fc:
3e:a4:84:f3:26:ce:35:00:e4:f2:61:ca:b8:ac:fb:
e5:0d:9a:b6:2a:64:86:53:ff:42:48:80:4e:3f:fc:
0b:11:7b:11:fe:7a:90:8c:44:a6:4a:47:71:0c:93:
0c:99:cb:dd:9b:5b:1a:cc:0d:62:a8:b6:41:ae:91:
17:52:56:c7:ec:a9:6f:8f:2b:ed:44:53:d6:61:b4:
d3:72:0f:e3:71:51:0c:da:00:33:9f:cd:7d:d5:40:
4f:c1:83:06:44:3a:cf:ea:53:4e:93:aa:82:cd:49:
cf:5d:11:33:8d:13:a8:d8:1c:0f:d0:85:80:a8:5a:
c5:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:2E:C3:BA:66:2A:39:BF:F6:26:2E:BC:A9:C8:B7:1D:75:6E:5F:00
X509v3 Authority Key Identifier:
keyid:87:78:AD:81:68:E0:9C:F9:2D:4E:04:98:25:7F:8E:9C:EA:BF:06:92
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3itgWjgnPktTgSYJX-OnOq_BpI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/qi7DumYqOb_2Ji68qci3HXVuXwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/f07f8d-9df0-49c6-b2f0-aa9d691811e7/1/h3itgWjgnPktTgSYJX-OnOq_BpI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
176.126.103.0/24
178.250.186.0/24
217.114.43.0/24
Signature Algorithm: sha256WithRSAEncryption
8d:68:48:eb:01:0b:63:6f:b9:22:12:6b:a8:62:d0:e4:f9:e7:
ff:a3:df:ae:63:f4:2a:db:9f:ac:4d:61:7f:40:96:90:36:fb:
37:6b:ae:88:a1:27:2d:7a:7b:34:1b:ee:83:b4:69:29:ac:77:
42:4c:78:fa:ea:89:79:00:a4:20:df:4d:5c:9f:be:2f:53:fc:
ff:78:4f:16:6d:8d:bd:bd:9c:4c:d2:7d:b3:2f:78:01:4c:fb:
c7:ac:aa:34:54:7c:76:21:1c:2b:5d:5a:36:51:25:78:b7:9d:
0d:f0:1f:e5:d4:43:17:f3:f6:75:94:3e:ab:9e:dd:4c:bc:cf:
14:b9:f3:b5:94:3c:cc:25:97:6d:1e:84:2d:6e:4d:6b:b3:57:
6c:bf:d6:33:e7:8d:f7:16:dd:78:fe:b6:db:55:7d:c8:c1:e6:
b1:41:0f:53:80:22:55:e2:79:ee:b1:be:5a:ba:34:b7:18:13:
b4:b6:be:53:78:c9:9a:f4:1f:82:cc:93:b5:64:09:44:82:d7:
29:0f:b9:4c:d8:64:3c:1f:7e:fc:ce:33:fd:42:7a:2b:24:de:
be:ca:14:54:f3:3c:97:c8:97:a0:01:05:11:ed:38:a7:40:a3:
52:e2:a5:d0:1c:aa:c2:c3:22:ea:e2:a6:7e:86:dd:b4:23:d3:
cb:3f:35:db
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZy4sh9/x8KIWd9qyE14CqrGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzhhZDgxNjhlMDljZjkyZDRlMDQ5ODI1N2Y4ZTljZWFi
ZjA2OTIwHhcNMjYwMzA0MTE1MzI3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTJlYzNiYTY2MmEzOWJmZjYyNjJlYmNhOWM4YjcxZDc1NmU1ZjAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAufmrL8WxL/Ib5SNLjviVUC0AveZs
cQE6M5pq5juDJ2ptqRhQiGqB9jK4IK73MONUUlR51oirSUQOtOy+BIFvZFb6ZiTa
aDWvAsjxloHdwY96LEN7blxvRYSZHXNYcS6vhuDoQ3DnknJ0/HO1iBWoPMo7QJab
yJ+LswfIRpGZE3B8jaIdv/w+pITzJs41AOTyYcq4rPvlDZq2KmSGU/9CSIBOP/wL
EXsR/nqQjESmSkdxDJMMmcvdm1sazA1iqLZBrpEXUlbH7KlvjyvtRFPWYbTTcg/j
cVEM2gAzn8191UBPwYMGRDrP6lNOk6qCzUnPXREzjROo2BwP0IWAqFrFNQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKouw7pmKjm/9iYuvKnItx11bl8AMB8GA1UdIwQY
MBaAFId4rYFo4Jz5LU4EmCV/jpzqvwaSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAt
YWE5ZDY5MTgxMWU3LzEvcWk3RHVtWXFPYl8ySmk2OHFjaTNIWFZ1WHdBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mMDdmOGQtOWRmMC00OWM2LWIyZjAtYWE5ZDY5MTgxMWU3
LzEvaDNpdGdXamduUGt0VGdTWUpYLU9uT3FfQnBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQAsH5nAwQA
svq6AwQA2XIrMA0GCSqGSIb3DQEBCwUAA4IBAQCNaEjrAQtjb7kiEmuoYtDk+ef/
o9+uY/Qq25+sTWF/QJaQNvs3a66IoSctens0G+6DtGkprHdCTHj66ol5AKQg301c
n74vU/z/eE8WbY29vZxM0n2zL3gBTPvHrKo0VHx2IRwrXVo2USV4t50N8B/l1EMX
8/Z1lD6rnt1MvM8UufO1lDzMJZdtHoQtbk1rs1dsv9Yz5433Ft14/rbbVX3Iweax
QQ9TgCJV4nnusb5aujS3GBO0tr5TeMma9B+CzJO1ZAlEgtcpD7lM2GQ8H378zjP9
QnorJN6+yhRU8zyXyJegAQUR7TinQKNS4qXQHKrCwyLq4qZ+ht20I9PLPzXb
-----END CERTIFICATE-----
Generated at Wed Mar 25 21:27:10 2026 by rpki-client