Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/rQxBtH7hdMEEm2Jod-_z7L_0lFo.roa
File: rQxBtH7hdMEEm2Jod-_z7L_0lFo.roa (raw, json)
Hash identifier: wmtNul/mb3o7mmH1j6RDeQtvK7CdPjjO3paUDDIesTU=
Subject key identifier: AD:0C:41:B4:7E:E1:74:C1:04:9B:62:68:77:EF:F3:EC:BF:F4:94:5A
Certificate issuer: /CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Certificate serial: 01A0CD5AAE0AFE032396DFFA6268E590922C
Authority key identifier: BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/rQxBtH7hdMEEm2Jod-_z7L_0lFo.roa
Signing time: Wed 23 Sep 2026 08:21:07 +0000
ROA not before: Wed 23 Sep 2026 08:21:07 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 199408
IP address blocks: 91.194.0.0/23 maxlen: 23
91.194.14.0/23 maxlen: 23
91.194.14.0/24 maxlen: 24
91.194.15.0/24 maxlen: 24
91.195.0.0/23 maxlen: 23
91.195.1.0/24 maxlen: 24
185.14.168.0/22 maxlen: 22
2a03:aec0::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 11:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a0:cd:5a:ae:0a:fe:03:23:96:df:fa:62:68:e5:90:92:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4bbd334581ddcdd935bcef47d9a04cbce5fded
Validity
Not Before: Sep 23 08:21:07 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=ad0c41b47ee174c1049b626877eff3ecbff4945a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:00:bc:b2:4a:a1:84:d0:23:c9:d5:ad:72:71:
72:cf:06:8b:98:ef:97:a3:b2:f2:a0:b6:6d:46:59:
35:a4:a2:7a:a7:90:c4:b6:4b:d6:9c:b4:19:0c:e7:
44:fd:f6:17:92:39:02:bc:c2:a3:80:65:7c:1e:0f:
29:bf:de:c7:c7:10:7d:81:34:04:75:15:c5:6e:d4:
97:db:34:2b:ff:22:bf:cd:e8:79:e4:6b:61:0d:3a:
c6:08:c2:26:1a:2f:4b:2b:a6:6e:64:84:dd:6d:d0:
71:61:24:cb:96:d2:a1:5f:fa:7d:3a:0c:a9:0c:02:
b2:13:9b:56:28:a5:89:f5:6a:80:c7:bf:eb:d7:62:
4f:5f:aa:fd:77:a5:bb:8b:1e:d2:d1:b7:01:f9:c2:
74:01:27:70:b1:24:ae:17:f6:11:b1:6c:ea:19:26:
94:f3:0c:57:9a:11:87:f5:77:3e:d2:b0:c2:c1:e0:
b9:18:09:4f:16:6c:5e:8f:0c:eb:bd:12:1c:cf:0a:
93:20:dc:aa:81:85:cc:ed:b0:67:13:6b:40:5d:32:
5b:f7:43:99:d9:0b:7f:3c:d1:69:fc:1a:63:3a:3c:
93:87:dd:c1:da:2a:3a:8d:ae:8d:44:c0:8c:61:e8:
49:52:09:93:78:ca:ce:20:e6:b5:f9:bb:dc:2a:91:
fc:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:0C:41:B4:7E:E1:74:C1:04:9B:62:68:77:EF:F3:EC:BF:F4:94:5A
X509v3 Authority Key Identifier:
keyid:BB:4B:BD:33:45:81:DD:CD:D9:35:BC:EF:47:D9:A0:4C:BC:E5:FD:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/rQxBtH7hdMEEm2Jod-_z7L_0lFo.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/7a7ce6-06a6-41d3-b5fa-97174a96e815/1/u0u9M0WB3c3ZNbzvR9mgTLzl_e0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
91.194.0.0/23
91.194.14.0/23
91.195.0.0/23
185.14.168.0/22
IPv6:
2a03:aec0::/32
Signature Algorithm: sha256WithRSAEncryption
7c:c0:20:ee:92:bc:6c:83:09:dc:c3:b6:7a:af:e7:aa:84:45:
48:18:bc:d9:2c:34:28:bf:74:5f:6d:52:31:47:5e:3c:d5:8b:
33:fe:64:a7:b4:09:e4:60:d2:3a:be:f1:d0:9a:1b:89:d0:ec:
9a:09:dd:71:bb:b1:42:46:9d:be:64:0b:fa:5f:07:bf:bd:81:
a0:d7:c3:dc:64:af:b6:17:a4:6f:a2:a3:1d:bd:d1:c8:13:9e:
47:9f:c3:47:9a:1a:c8:84:35:28:d9:9c:8e:d5:a3:a9:14:cd:
50:21:9e:7f:44:b8:fc:f7:39:59:4c:5d:76:ce:1f:a1:0d:ae:
03:f6:d6:02:18:7f:ad:5e:6c:36:38:31:07:92:4e:c0:b2:75:
95:6f:65:95:2d:e2:f5:ab:57:75:92:bf:60:0e:0e:d9:3a:55:
2e:42:0e:57:8c:7a:43:97:78:ee:61:a6:02:46:6d:e2:24:bb:
5d:7a:fd:f4:90:38:33:dc:fb:38:bf:09:68:f1:43:bd:1c:cb:
c7:27:88:1f:d1:00:3d:00:9a:95:4a:17:29:f7:c2:47:b1:36:
ec:57:9b:60:3e:29:f6:63:fb:6a:80:59:8b:40:b1:9f:51:b6:
76:98:c6:b4:fa:ec:32:51:8c:2c:8c:09:fa:ca:bf:96:4e:fe:
92:c1:2a:e1
-----BEGIN CERTIFICATE-----
MIIFHjCCBAagAwIBAgISAaDNWq4K/gMjlt/6YmjlkJIsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNGJiZDMzNDU4MWRkY2RkOTM1YmNlZjQ3ZDlhMDRjYmNl
NWZkZWQwHhcNMjYwOTIzMDgyMTA3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhZDBjNDFiNDdlZTE3NGMxMDQ5YjYyNjg3N2VmZjNlY2JmZjQ5NDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQC8skqhhNAjydWtcnFyzwaLmO+X
o7LyoLZtRlk1pKJ6p5DEtkvWnLQZDOdE/fYXkjkCvMKjgGV8Hg8pv97HxxB9gTQE
dRXFbtSX2zQr/yK/zeh55GthDTrGCMImGi9LK6ZuZITdbdBxYSTLltKhX/p9Ogyp
DAKyE5tWKKWJ9WqAx7/r12JPX6r9d6W7ix7S0bcB+cJ0ASdwsSSuF/YRsWzqGSaU
8wxXmhGH9Xc+0rDCweC5GAlPFmxejwzrvRIczwqTINyqgYXM7bBnE2tAXTJb90OZ
2Qt/PNFp/BpjOjyTh93B2io6ja6NRMCMYehJUgmTeMrOIOa1+bvcKpH8LQIDAQAB
o4ICKjCCAiYwHQYDVR0OBBYEFK0MQbR+4XTBBJtiaHfv8+y/9JRaMB8GA1UdIwQY
MBaAFLtLvTNFgd3N2TW870fZoEy85f3tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTB1OU0wV0IzYzNaTmJ6dlI5bWdUTHpsX2UwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC83YTdjZTYtMDZhNi00MWQzLWI1ZmEt
OTcxNzRhOTZlODE1LzEvclF4QnRIN2hkTUVFbTJKb2QtX3o3TF8wbEZvLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC83YTdjZTYtMDZhNi00MWQzLWI1ZmEtOTcxNzRhOTZlODE1
LzEvdTB1OU0wV0IzYzNaTmJ6dlI5bWdUTHpsX2UwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMEAGCCsGAQUFBwEHAQH/BDEwLzAeBAIAATAYAwQBW8IAAwQB
W8IOAwQBW8MAAwQCuQ6oMA0EAgACMAcDBQAqA67AMA0GCSqGSIb3DQEBCwUAA4IB
AQB8wCDukrxsgwncw7Z6r+eqhEVIGLzZLDQov3RfbVIxR1481Ysz/mSntAnkYNI6
vvHQmhuJ0OyaCd1xu7FCRp2+ZAv6Xwe/vYGg18PcZK+2F6RvoqMdvdHIE55Hn8NH
mhrIhDUo2ZyO1aOpFM1QIZ5/RLj89zlZTF12zh+hDa4D9tYCGH+tXmw2ODEHkk7A
snWVb2WVLeL1q1d1kr9gDg7ZOlUuQg5XjHpDl3juYaYCRm3iJLtdev30kDgz3Ps4
vwlo8UO9HMvHJ4gf0QA9AJqVShcp98JHsTbsV5tgPin2Y/tqgFmLQLGfUbZ2mMa0
+uwyUYwsjAn6yr+WTv6SwSrh
-----END CERTIFICATE-----
Generated at Tue Oct 6 19:02:18 2026 by rpki-client