Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/qEMl4e9fLr-AQLdZxe6hKXxJlLI.roa
File: qEMl4e9fLr-AQLdZxe6hKXxJlLI.roa (raw, json)
Hash identifier: 9NW/M2MDfZmmSLbTCkFcYZxx54P1bR5jVO5Iu7jkpT0=
Subject key identifier: A8:43:25:E1:EF:5F:2E:BF:80:40:B7:59:C5:EE:A1:29:7C:49:94:B2
Certificate issuer: /CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Certificate serial: 01A18340BA9712886D02DF8EF50691E3C065
Authority key identifier: A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/qEMl4e9fLr-AQLdZxe6hKXxJlLI.roa
Signing time: Wed 28 Oct 2026 16:03:39 +0000
ROA not before: Wed 28 Oct 2026 16:03:39 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 48974
IP address blocks: 86.107.167.0/24 maxlen: 24
93.113.64.0/24 maxlen: 24
93.113.68.0/24 maxlen: 24
93.117.129.0/24 maxlen: 24
93.119.147.0/24 maxlen: 24
93.119.151.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.mft
rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Nov 2026 01:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:83:40:ba:97:12:88:6d:02:df:8e:f5:06:91:e3:c0:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a2088e06d553cff293d277f4d76c3a710bd8b2f7
Validity
Not Before: Oct 28 16:03:39 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a84325e1ef5f2ebf8040b759c5eea1297c4994b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:c0:c6:86:9a:e1:b3:b2:05:90:5f:8f:06:9e:
d7:e7:3e:0e:6c:8d:08:22:56:90:b6:c9:04:df:1e:
68:a0:f5:59:20:18:d1:af:21:6b:59:04:f9:4f:1e:
71:bb:b3:79:12:4e:0a:f2:a2:bf:ee:00:0e:5e:89:
b9:41:36:af:2f:9b:97:c8:d4:ce:62:76:2e:14:1c:
e1:06:23:9d:90:20:22:b5:ed:12:d9:da:fe:9b:b6:
75:f4:54:34:f6:fb:fe:37:59:73:e6:aa:5e:7b:f8:
73:19:2d:25:db:d6:d1:e8:0b:cb:45:49:d6:cb:4f:
b0:be:1c:ba:29:e7:6c:8f:20:a5:8e:40:92:4f:35:
9c:55:dc:06:54:b1:70:6b:d6:d2:99:b4:6e:07:fd:
15:4f:15:40:8b:73:dc:db:f3:09:2d:f6:a2:8d:fa:
2f:de:65:5a:d1:25:3e:7b:d7:5a:23:2f:94:b0:20:
68:12:17:ee:22:36:70:d4:9f:1d:fd:fd:7c:ae:42:
22:d8:06:3d:3f:23:9e:8e:00:36:95:e6:3a:43:c6:
0f:4c:9a:d9:94:81:73:2e:c5:c0:0c:5f:f0:09:be:
22:c5:39:50:ee:cc:18:02:14:ea:09:84:1e:bb:13:
40:99:82:0c:e0:c2:50:e4:ca:bc:e9:ab:0b:4a:87:
2f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:43:25:E1:EF:5F:2E:BF:80:40:B7:59:C5:EE:A1:29:7C:49:94:B2
X509v3 Authority Key Identifier:
keyid:A2:08:8E:06:D5:53:CF:F2:93:D2:77:F4:D7:6C:3A:71:0B:D8:B2:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ogiOBtVTz_KT0nf012w6cQvYsvc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/qEMl4e9fLr-AQLdZxe6hKXxJlLI.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/b45d79-a4d7-4460-bfe7-bbea2918e102/1/ogiOBtVTz_KT0nf012w6cQvYsvc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
86.107.167.0/24
93.113.64.0/24
93.113.68.0/24
93.117.129.0/24
93.119.147.0/24
93.119.151.0/24
Signature Algorithm: sha256WithRSAEncryption
05:3f:38:cc:0d:85:9d:5e:ad:ab:6a:47:df:fd:fe:bf:13:d6:
c0:a6:91:5c:03:a0:bc:c4:36:03:54:f5:8d:cb:88:ed:2c:6d:
fb:cc:db:75:3c:b5:15:7b:33:93:bc:0f:66:da:69:ed:b4:b8:
58:b7:34:34:ca:f5:76:80:50:ac:25:07:52:c6:1c:55:fb:fa:
f5:b2:70:9c:b6:01:42:a2:60:90:e6:ee:77:38:e5:80:c8:9d:
7f:22:8e:2f:fc:bc:5f:95:b6:73:1b:51:c2:6c:92:e7:21:4e:
b2:c6:79:b5:e5:f7:7f:1f:39:ce:f2:d9:12:c8:77:13:46:c5:
c7:37:65:fd:a1:96:6f:b7:3c:4e:e8:8c:a3:67:43:55:ef:f1:
a4:52:d5:79:50:e7:ec:ae:84:e2:39:69:3d:54:81:c4:03:00:
b6:53:4f:2b:eb:e0:4c:3d:69:98:c5:c9:d2:01:06:3e:bd:15:
6c:3f:6a:14:18:09:9c:90:07:f6:0c:9b:b4:e8:1f:3e:1c:60:
54:b2:ec:43:81:9e:c9:71:b5:e6:40:b4:4d:40:4b:62:8b:c8:
ac:f0:f0:a4:43:da:23:24:41:e1:df:62:86:f9:c2:d8:f4:0d:
73:eb:c6:d1:78:19:d0:5a:aa:3a:d8:63:92:09:f1:61:e1:18:
59:64:e7:84
-----BEGIN CERTIFICATE-----
MIIFGzCCBAOgAwIBAgISAaGDQLqXEohtAt+O9QaR48BlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEyMDg4ZTA2ZDU1M2NmZjI5M2QyNzdmNGQ3NmMzYTcxMGJk
OGIyZjcwHhcNMjYxMDI4MTYwMzM5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhODQzMjVlMWVmNWYyZWJmODA0MGI3NTljNWVlYTEyOTdjNDk5NGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApsDGhprhs7IFkF+PBp7X5z4ObI0I
IlaQtskE3x5ooPVZIBjRryFrWQT5Tx5xu7N5Ek4K8qK/7gAOXom5QTavL5uXyNTO
YnYuFBzhBiOdkCAite0S2dr+m7Z19FQ09vv+N1lz5qpee/hzGS0l29bR6AvLRUnW
y0+wvhy6KedsjyCljkCSTzWcVdwGVLFwa9bSmbRuB/0VTxVAi3Pc2/MJLfaijfov
3mVa0SU+e9daIy+UsCBoEhfuIjZw1J8d/f18rkIi2AY9PyOejgA2leY6Q8YPTJrZ
lIFzLsXADF/wCb4ixTlQ7swYAhTqCYQeuxNAmYIM4MJQ5Mq86asLSocvQwIDAQAB
o4ICJzCCAiMwHQYDVR0OBBYEFKhDJeHvXy6/gEC3WcXuoSl8SZSyMB8GA1UdIwQY
MBaAFKIIjgbVU8/yk9J39NdsOnEL2LL3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTct
YmJlYTI5MThlMTAyLzEvcUVNbDRlOWZMci1BUUxkWnhlNmhLWHhKbExJLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS9iNDVkNzktYTRkNy00NDYwLWJmZTctYmJlYTI5MThlMTAy
LzEvb2dpT0J0VlR6X0tUMG5mMDEydzZjUXZZc3ZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMD0GCCsGAQUFBwEHAQH/BC4wLDAqBAIAATAkAwQAVmunAwQA
XXFAAwQAXXFEAwQAXXWBAwQAXXeTAwQAXXeXMA0GCSqGSIb3DQEBCwUAA4IBAQAF
PzjMDYWdXq2rakff/f6/E9bAppFcA6C8xDYDVPWNy4jtLG37zNt1PLUVezOTvA9m
2mnttLhYtzQ0yvV2gFCsJQdSxhxV+/r1snCctgFComCQ5u53OOWAyJ1/Io4v/Lxf
lbZzG1HCbJLnIU6yxnm15fd/HznO8tkSyHcTRsXHN2X9oZZvtzxO6IyjZ0NV7/Gk
UtV5UOfsroTiOWk9VIHEAwC2U08r6+BMPWmYxcnSAQY+vRVsP2oUGAmckAf2DJu0
6B8+HGBUsuxDgZ7JcbXmQLRNQEtii8is8PCkQ9ojJEHh32KG+cLY9A1z68bReBnQ
Wqo62GOSCfFh4RhZZOeE
-----END CERTIFICATE-----
Generated at Sun Nov 15 11:31:59 2026 by rpki-client