Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/qSwrp68FpZz4UWbhcFj7tZ9wjAg.roa
File: qSwrp68FpZz4UWbhcFj7tZ9wjAg.roa (raw, json)
Hash identifier: 9FJcSNnr7pqbVbKrD5HrCnLrSIAQlMcpTOG8uf3lID4=
Subject key identifier: A9:2C:2B:A7:AF:05:A5:9C:F8:51:66:E1:70:58:FB:B5:9F:70:8C:08
Certificate issuer: /CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Certificate serial: 019D1A20C9DCB6A1B929A70D5D7E33FF63AF
Authority key identifier: 4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/qSwrp68FpZz4UWbhcFj7tZ9wjAg.roa
Signing time: Mon 23 Mar 2026 09:57:29 +0000
ROA not before: Mon 23 Mar 2026 09:57:29 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 204457
IP address blocks: 45.94.5.0/24 maxlen: 24
45.94.7.0/24 maxlen: 24
45.156.30.0/24 maxlen: 24
45.156.31.0/24 maxlen: 24
87.121.22.0/24 maxlen: 24
185.248.12.0/22 maxlen: 22
185.248.12.0/24 maxlen: 24
185.248.13.0/24 maxlen: 24
185.248.14.0/24 maxlen: 24
185.248.15.0/24 maxlen: 24
188.125.163.0/24 maxlen: 24
188.125.168.0/24 maxlen: 24
194.4.153.0/24 maxlen: 24
2a0a:a580::/29 maxlen: 29
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.mft
rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:1a:20:c9:dc:b6:a1:b9:29:a7:0d:5d:7e:33:ff:63:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4a0973c1f443ec4a8387aad7aca75d07b6faa9da
Validity
Not Before: Mar 23 09:57:29 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a92c2ba7af05a59cf85166e17058fbb59f708c08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:96:95:6f:b8:41:8c:ab:57:46:64:bb:4a:2b:
22:95:35:a9:39:86:cc:46:6d:76:a1:7d:3d:e2:7c:
79:38:8d:d3:23:95:b4:a6:63:43:9a:78:96:09:d1:
d8:2f:15:fa:b7:7e:f9:76:d2:ca:69:96:e8:bd:25:
ae:ac:12:84:07:5d:76:e5:a2:b0:0a:e6:9a:e3:56:
60:8a:60:a5:6e:b0:b7:e1:b7:77:08:fa:7d:0b:fe:
5b:49:cc:00:64:a4:23:4e:c7:78:47:a0:d4:6e:c3:
b7:aa:4e:d9:25:73:61:6d:e9:26:fe:93:88:e8:02:
4c:66:33:65:aa:07:2d:1c:99:c1:77:01:97:3c:e3:
16:65:0a:43:4e:3b:af:a4:87:aa:a7:66:d2:e5:96:
db:22:e9:95:5e:32:99:be:15:27:08:e4:e1:74:91:
69:59:61:60:0e:3d:1b:16:0b:53:f8:24:0e:bd:6b:
4d:97:28:dc:55:0f:9d:df:bd:e4:8b:f5:58:9c:fc:
b6:13:a3:a5:53:a9:6f:50:7d:f8:89:5f:9d:9b:1f:
8f:65:61:65:e3:14:86:0b:a1:eb:66:6f:ee:9e:83:
56:b9:4e:53:4f:8a:89:17:cd:b8:49:75:aa:9e:b1:
90:2a:a5:bc:7f:d6:ec:da:40:f5:4b:b8:b0:df:75:
10:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:2C:2B:A7:AF:05:A5:9C:F8:51:66:E1:70:58:FB:B5:9F:70:8C:08
X509v3 Authority Key Identifier:
keyid:4A:09:73:C1:F4:43:EC:4A:83:87:AA:D7:AC:A7:5D:07:B6:FA:A9:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SglzwfRD7EqDh6rXrKddB7b6qdo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/qSwrp68FpZz4UWbhcFj7tZ9wjAg.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/18e0f5-4e14-431a-b793-1217729af1c8/1/SglzwfRD7EqDh6rXrKddB7b6qdo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.94.5.0/24
45.94.7.0/24
45.156.30.0/23
87.121.22.0/24
185.248.12.0/22
188.125.163.0/24
188.125.168.0/24
194.4.153.0/24
IPv6:
2a0a:a580::/29
Signature Algorithm: sha256WithRSAEncryption
c6:53:71:c9:31:26:e2:ce:84:4b:b0:57:68:6f:b3:34:aa:1a:
5d:28:7f:d1:f0:ea:86:79:6f:59:54:2c:7f:2a:84:87:73:7e:
12:77:19:23:1b:83:29:4d:56:32:00:ab:ca:d6:44:14:60:61:
44:a4:d1:b1:af:fc:a5:80:d2:9f:46:26:d5:d3:d8:c6:ff:15:
8c:31:33:4a:bc:4e:9d:8f:18:f1:74:a3:a7:48:e7:64:fb:de:
1e:3d:3a:ae:30:09:4f:2e:da:3f:96:da:12:34:0e:82:c2:54:
76:0a:13:8d:2a:f5:be:b9:72:a1:a1:c5:81:01:5c:81:27:f4:
48:5c:00:54:62:1a:b7:48:e2:72:60:cd:60:0c:8d:a5:74:07:
59:37:cb:51:72:62:44:93:a1:76:5b:ee:1b:73:df:f5:61:46:
24:ec:2d:ca:e4:6e:16:28:8a:17:ea:16:de:25:52:e3:ac:f9:
2f:d2:d7:2f:f6:d6:93:0c:d5:d9:8c:9b:e7:b7:2c:05:3b:2d:
0a:30:17:81:b7:5f:2f:cb:40:bd:45:90:40:27:75:7b:70:6a:
31:68:53:95:4c:be:49:db:be:d0:9c:df:0c:6d:29:d9:d0:cb:
71:67:e2:dc:8c:5d:37:d7:bf:22:e4:c7:ce:83:73:f4:22:86:
15:ff:16:08
-----BEGIN CERTIFICATE-----
MIIFNjCCBB6gAwIBAgISAZ0aIMnctqG5KacNXX4z/2OvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRhMDk3M2MxZjQ0M2VjNGE4Mzg3YWFkN2FjYTc1ZDA3YjZm
YWE5ZGEwHhcNMjYwMzIzMDk1NzI5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTJjMmJhN2FmMDVhNTljZjg1MTY2ZTE3MDU4ZmJiNTlmNzA4YzA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkJaVb7hBjKtXRmS7SisilTWpOYbM
Rm12oX094nx5OI3TI5W0pmNDmniWCdHYLxX6t375dtLKaZbovSWurBKEB1125aKw
Cuaa41ZgimClbrC34bd3CPp9C/5bScwAZKQjTsd4R6DUbsO3qk7ZJXNhbekm/pOI
6AJMZjNlqgctHJnBdwGXPOMWZQpDTjuvpIeqp2bS5ZbbIumVXjKZvhUnCOThdJFp
WWFgDj0bFgtT+CQOvWtNlyjcVQ+d373ki/VYnPy2E6OlU6lvUH34iV+dmx+PZWFl
4xSGC6HrZm/unoNWuU5TT4qJF824SXWqnrGQKqW8f9bs2kD1S7iw33UQBwIDAQAB
o4ICQjCCAj4wHQYDVR0OBBYEFKksK6evBaWc+FFm4XBY+7WfcIwIMB8GA1UdIwQY
MBaAFEoJc8H0Q+xKg4eq16ynXQe2+qnaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU2dsendmUkQ3RXFEaDZyWHJLZGRCN2I2cWRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8xOGUwZjUtNGUxNC00MzFhLWI3OTMt
MTIxNzcyOWFmMWM4LzEvcVN3cnA2OEZwWno0VVdiaGNGajd0Wjl3akFnLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8xOGUwZjUtNGUxNC00MzFhLWI3OTMtMTIxNzcyOWFmMWM4
LzEvU2dsendmUkQ3RXFEaDZyWHJLZGRCN2I2cWRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMFgGCCsGAQUFBwEHAQH/BEkwRzA2BAIAATAwAwQALV4FAwQA
LV4HAwQBLZweAwQAV3kWAwQCufgMAwQAvH2jAwQAvH2oAwQAwgSZMA0EAgACMAcD
BQMqCqWAMA0GCSqGSIb3DQEBCwUAA4IBAQDGU3HJMSbizoRLsFdob7M0qhpdKH/R
8OqGeW9ZVCx/KoSHc34SdxkjG4MpTVYyAKvK1kQUYGFEpNGxr/ylgNKfRibV09jG
/xWMMTNKvE6djxjxdKOnSOdk+94ePTquMAlPLto/ltoSNA6CwlR2ChONKvW+uXKh
ocWBAVyBJ/RIXABUYhq3SOJyYM1gDI2ldAdZN8tRcmJEk6F2W+4bc9/1YUYk7C3K
5G4WKIoX6hbeJVLjrPkv0tcv9taTDNXZjJvntywFOy0KMBeBt18vy0C9RZBAJ3V7
cGoxaFOVTL5J277QnN8MbSnZ0MtxZ+LcjF03178i5MfOg3P0IoYV/xYI
-----END CERTIFICATE-----
Generated at Thu Mar 26 08:17:26 2026 by rpki-client