Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/xAgNG2ab1Odx9OPGL8O_VCHs2r4.roa
File: xAgNG2ab1Odx9OPGL8O_VCHs2r4.roa (raw, json)
Hash identifier: Qg0Er9yW1p6tGJCqfUrEgpKUwThpO2+ur4790Y2y8Ew=
Subject key identifier: C4:08:0D:1B:66:9B:D4:E7:71:F4:E3:C6:2F:C3:BF:54:21:EC:DA:BE
Certificate issuer: /CN=4166c06ff49e0534809e234005baa5cca7e146a8
Certificate serial: 019EEE98D68C98D3A0EED04817093E844D53
Authority key identifier: 41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/xAgNG2ab1Odx9OPGL8O_VCHs2r4.roa
Signing time: Mon 22 Jun 2026 09:10:53 +0000
ROA not before: Mon 22 Jun 2026 09:10:53 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 197421
IP address blocks: 87.236.149.0/24 maxlen: 24
91.217.133.0/24 maxlen: 24
185.239.177.0/24 maxlen: 24
195.69.228.0/24 maxlen: 24
195.69.230.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.mft
rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 14:03:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9e:ee:98:d6:8c:98:d3:a0:ee:d0:48:17:09:3e:84:4d:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4166c06ff49e0534809e234005baa5cca7e146a8
Validity
Not Before: Jun 22 09:10:53 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=c4080d1b669bd4e771f4e3c62fc3bf5421ecdabe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:50:95:ce:da:9b:53:af:69:de:09:d7:c0:02:
b9:80:10:54:a0:a2:96:8c:b3:b9:4e:94:f2:a0:ad:
fe:5a:77:2d:d6:51:89:66:92:dc:d7:1c:03:61:56:
0d:66:9f:0e:ac:16:c0:67:b7:48:0f:34:7d:31:57:
f4:b0:93:5d:59:42:03:5d:44:44:bc:de:8b:70:61:
1a:b1:94:36:8b:70:ed:b2:47:3c:ec:9c:ab:06:cf:
c7:21:55:0c:3d:e1:33:68:2b:21:c8:24:90:3f:cd:
c6:91:d8:1f:cf:5b:4b:62:c9:66:db:35:54:7a:5f:
0a:f4:76:6d:8d:10:c5:3f:d0:d2:37:ae:b5:38:48:
e8:0a:3b:45:d9:3a:bd:49:bd:30:fa:ca:43:e5:32:
5f:07:8c:15:70:e6:3e:a6:69:87:d2:ab:da:ba:34:
31:06:a3:ec:02:59:08:b8:39:39:8c:7b:67:94:66:
43:a6:36:db:7b:d4:b2:54:2b:ba:36:11:64:f7:0d:
5d:7e:8d:db:dc:cf:1e:cb:9e:6c:84:66:01:f4:e7:
68:c0:8e:a7:f6:6a:1e:b8:9d:67:49:2b:b2:29:26:
96:cc:97:75:0c:22:cf:d1:0b:5c:e2:4b:a0:48:5d:
61:ef:c0:f8:04:b4:11:fb:15:f1:d5:77:45:3e:75:
64:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:08:0D:1B:66:9B:D4:E7:71:F4:E3:C6:2F:C3:BF:54:21:EC:DA:BE
X509v3 Authority Key Identifier:
keyid:41:66:C0:6F:F4:9E:05:34:80:9E:23:40:05:BA:A5:CC:A7:E1:46:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/QWbAb_SeBTSAniNABbqlzKfhRqg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/xAgNG2ab1Odx9OPGL8O_VCHs2r4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/70d2d4-354a-4a89-931e-8826e877d143/1/QWbAb_SeBTSAniNABbqlzKfhRqg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
87.236.149.0/24
91.217.133.0/24
185.239.177.0/24
195.69.228.0/24
195.69.230.0/24
Signature Algorithm: sha256WithRSAEncryption
94:2f:69:f5:4f:c1:1b:f7:fa:c3:5d:93:36:4a:19:f1:c4:ec:
9c:7c:93:e9:13:4e:e6:95:81:cd:45:f9:ec:96:f3:95:c1:4b:
bb:78:ed:45:42:7e:ea:79:9a:77:7d:53:a4:38:0f:8a:f8:f2:
6a:25:a5:10:1c:08:6b:8c:a4:32:db:bc:92:39:1f:b6:76:b0:
59:be:27:8d:29:1a:e6:1f:7a:e0:33:fe:fa:b2:29:39:b6:bf:
e7:3b:1c:48:cc:7e:92:3d:9c:85:52:2a:cc:1d:d0:3e:fc:0c:
7b:42:8d:62:ea:80:2b:f2:cb:17:6e:fe:10:e4:9f:7f:08:b8:
e9:12:c6:8a:6c:10:7a:a1:99:ee:55:d3:68:77:e0:76:5f:2b:
91:a2:c3:8a:72:da:6a:1e:33:b9:1d:e2:99:60:95:fc:e0:75:
65:95:fa:79:99:be:5d:96:87:7b:53:3e:a3:72:89:18:98:fe:
fc:46:6c:23:24:43:d0:a8:b4:f0:70:94:e4:8e:4e:3a:b9:ab:
15:64:5f:0c:0f:34:f4:9a:07:68:d2:c2:19:a8:b3:11:97:a6:
d2:bc:54:c6:b9:da:08:80:a7:07:c1:0f:f8:5a:65:96:42:51:
6e:d4:87:28:9b:bb:31:b3:cc:af:6a:bf:e3:d6:17:b0:76:f5:
9b:6a:87:5c
-----BEGIN CERTIFICATE-----
MIIFFTCCA/2gAwIBAgISAZ7umNaMmNOg7tBIFwk+hE1TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQxNjZjMDZmZjQ5ZTA1MzQ4MDllMjM0MDA1YmFhNWNjYTdl
MTQ2YTgwHhcNMjYwNjIyMDkxMDUzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhjNDA4MGQxYjY2OWJkNGU3NzFmNGUzYzYyZmMzYmY1NDIxZWNkYWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs1CVztqbU69p3gnXwAK5gBBUoKKW
jLO5TpTyoK3+Wnct1lGJZpLc1xwDYVYNZp8OrBbAZ7dIDzR9MVf0sJNdWUIDXURE
vN6LcGEasZQ2i3Dtskc87JyrBs/HIVUMPeEzaCshyCSQP83Gkdgfz1tLYslm2zVU
el8K9HZtjRDFP9DSN661OEjoCjtF2Tq9Sb0w+spD5TJfB4wVcOY+pmmH0qvaujQx
BqPsAlkIuDk5jHtnlGZDpjbbe9SyVCu6NhFk9w1dfo3b3M8ey55shGYB9OdowI6n
9moeuJ1nSSuyKSaWzJd1DCLP0Qtc4kugSF1h78D4BLQR+xXx1XdFPnVkTQIDAQAB
o4ICITCCAh0wHQYDVR0OBBYEFMQIDRtmm9TncfTjxi/Dv1Qh7Nq+MB8GA1UdIwQY
MBaAFEFmwG/0ngU0gJ4jQAW6pcyn4UaoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUt
ODgyNmU4NzdkMTQzLzEveEFnTkcyYWIxT2R4OU9QR0w4T19WQ0hzMnI0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC83MGQyZDQtMzU0YS00YTg5LTkzMWUtODgyNmU4NzdkMTQz
LzEvUVdiQWJfU2VCVFNBbmlOQUJicWx6S2ZoUnFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDcGCCsGAQUFBwEHAQH/BCgwJjAkBAIAATAeAwQAV+yVAwQA
W9mFAwQAue+xAwQAw0XkAwQAw0XmMA0GCSqGSIb3DQEBCwUAA4IBAQCUL2n1T8Eb
9/rDXZM2ShnxxOycfJPpE07mlYHNRfnslvOVwUu7eO1FQn7qeZp3fVOkOA+K+PJq
JaUQHAhrjKQy27ySOR+2drBZvieNKRrmH3rgM/76sik5tr/nOxxIzH6SPZyFUirM
HdA+/Ax7Qo1i6oAr8ssXbv4Q5J9/CLjpEsaKbBB6oZnuVdNod+B2XyuRosOKctpq
HjO5HeKZYJX84HVllfp5mb5dlod7Uz6jcokYmP78RmwjJEPQqLTwcJTkjk46uasV
ZF8MDzT0mgdo0sIZqLMRl6bSvFTGudoIgKcHwQ/4WmWWQlFu1Icom7sxs8yvar/j
1hewdvWbaodc
-----END CERTIFICATE-----
Generated at Thu Jul 23 20:08:37 2026 by rpki-client