Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/q_09y7kzQ35Hofngi_hiaffCZwA.roa
File: q_09y7kzQ35Hofngi_hiaffCZwA.roa (raw, json)
Hash identifier: sHIfF0cJoyvJ2aYaxzmWds00JZ6y6D950zXoaEnnPTk=
Subject key identifier: AB:FD:3D:CB:B9:33:43:7E:47:A1:F9:E0:8B:F8:62:69:F7:C2:67:00
Certificate issuer: /CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Certificate serial: 019F236837D2A417C7976252CD14B1E2AE36
Authority key identifier: 9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/q_09y7kzQ35Hofngi_hiaffCZwA.roa
Signing time: Thu 02 Jul 2026 15:17:40 +0000
ROA not before: Thu 02 Jul 2026 15:17:40 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 47541
IP address blocks: 79.137.164.0/24 maxlen: 24
79.137.180.0/24 maxlen: 24
93.186.224.0/21 maxlen: 21
93.186.232.0/21 maxlen: 21
95.142.192.0/20 maxlen: 20
95.142.192.0/21 maxlen: 21
185.32.248.0/22 maxlen: 22
2a00:bdc0::/33 maxlen: 33
2a00:bdc0:8000::/34 maxlen: 34
2a00:bdc0:c000::/35 maxlen: 35
2a00:bdc2::/31 maxlen: 31
2a00:bdc4::/30 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:23:68:37:d2:a4:17:c7:97:62:52:cd:14:b1:e2:ae:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f85d14760f98662b989893d8a1e5e05cd3a13e4
Validity
Not Before: Jul 2 15:17:40 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=abfd3dcbb933437e47a1f9e08bf86269f7c26700
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:f3:fa:65:1e:99:80:98:1b:4b:e1:d2:d4:00:
45:40:37:23:45:ea:fc:af:6e:48:48:99:95:2e:76:
0c:66:4d:53:25:43:a9:28:68:55:89:2f:5d:7b:c3:
de:10:cf:05:92:7b:ad:48:8f:aa:c7:3d:d0:fe:a2:
4a:36:8d:4a:1b:d4:ef:04:06:84:91:fa:9a:98:b4:
d7:13:12:f1:14:12:c0:6a:9a:42:a7:5f:02:84:46:
6a:13:74:ad:08:4e:f9:b1:64:81:0f:df:dd:b5:1a:
c5:61:7a:c3:19:92:79:24:e3:6e:76:de:dd:c4:e9:
55:d6:41:5d:53:0a:e6:1c:c5:6c:48:b5:f6:ee:d0:
8f:d6:aa:6f:db:9a:5d:81:f8:2b:21:01:79:22:78:
58:c6:50:a6:40:1c:31:2d:44:27:5b:e1:fc:71:f2:
fd:d0:4a:07:7c:a2:12:1e:3f:a8:da:ca:7e:5e:d6:
0d:c5:2c:6c:2d:34:52:33:70:8e:00:a3:4e:65:07:
2a:69:b2:7e:31:e9:34:eb:0c:45:b8:44:d0:c1:c6:
1c:0b:87:7e:07:91:65:a3:48:35:ec:10:fa:cd:27:
01:29:ff:6c:a5:b3:73:52:e0:3e:c0:a8:14:6f:53:
9e:bb:e1:d5:49:2d:10:00:d2:fa:52:44:af:27:b6:
9b:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:FD:3D:CB:B9:33:43:7E:47:A1:F9:E0:8B:F8:62:69:F7:C2:67:00
X509v3 Authority Key Identifier:
keyid:9F:85:D1:47:60:F9:86:62:B9:89:89:3D:8A:1E:5E:05:CD:3A:13:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n4XRR2D5hmK5iYk9ih5eBc06E-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/q_09y7kzQ35Hofngi_hiaffCZwA.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9f/1813ba-506e-444e-9ca4-f093e17b27ef/1/n4XRR2D5hmK5iYk9ih5eBc06E-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
79.137.164.0/24
79.137.180.0/24
93.186.224.0/20
95.142.192.0/20
185.32.248.0/22
IPv6:
2a00:bdc0::-2a00:bdc0:dfff:ffff:ffff:ffff:ffff:ffff
2a00:bdc2::-2a00:bdc7:ffff:ffff:ffff:ffff:ffff:ffff
Signature Algorithm: sha256WithRSAEncryption
35:77:be:f7:82:9c:fa:e9:41:9c:81:44:6d:ba:e4:06:0b:af:
de:69:25:b5:3f:1d:d8:64:7f:84:5d:ac:3b:3e:e6:a4:cc:80:
aa:78:1e:18:b0:bc:71:33:99:72:75:ce:d3:2f:b1:a4:29:25:
0e:f0:3a:6b:03:c3:a6:82:2f:a3:0e:89:e9:ae:21:ff:a7:31:
c3:2e:4f:b2:37:ca:9e:56:38:4c:26:f7:ce:01:32:d7:cc:99:
38:c0:72:38:1d:1a:18:34:e6:f4:d4:04:67:e9:fc:3e:26:e0:
10:14:ed:2c:6f:7f:a5:04:9d:13:4e:b9:e5:f1:8b:45:34:b1:
4b:93:bc:fc:f0:49:a4:79:33:f3:00:6a:25:a7:e3:53:ec:ce:
54:86:da:59:0d:60:88:f7:25:16:c8:eb:06:f7:4f:1d:b3:b4:
ab:5d:2a:10:64:4f:a2:8f:fa:f0:38:08:ea:08:a1:02:38:f3:
ba:66:4f:d5:41:cc:5a:cc:f8:d7:f7:a1:44:1a:8b:ce:0f:99:
a7:59:cc:36:f5:e3:18:ee:c2:f0:3f:47:5e:8f:e5:89:f0:58:
67:e1:fd:f8:99:96:dd:a0:b8:2c:ed:ec:49:eb:f5:c7:71:4e:
90:d4:c6:cb:95:91:61:cb:ea:a7:68:70:76:a1:54:00:94:b7:
77:7a:4c:7c
-----BEGIN CERTIFICATE-----
MIIFPjCCBCagAwIBAgISAZ8jaDfSpBfHl2JSzRSx4q42MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmODVkMTQ3NjBmOTg2NjJiOTg5ODkzZDhhMWU1ZTA1Y2Qz
YTEzZTQwHhcNMjYwNzAyMTUxNzQwWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYmZkM2RjYmI5MzM0MzdlNDdhMWY5ZTA4YmY4NjI2OWY3YzI2NzAwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6PP6ZR6ZgJgbS+HS1ABFQDcjRer8
r25ISJmVLnYMZk1TJUOpKGhViS9de8PeEM8FknutSI+qxz3Q/qJKNo1KG9TvBAaE
kfqamLTXExLxFBLAappCp18ChEZqE3StCE75sWSBD9/dtRrFYXrDGZJ5JONudt7d
xOlV1kFdUwrmHMVsSLX27tCP1qpv25pdgfgrIQF5InhYxlCmQBwxLUQnW+H8cfL9
0EoHfKISHj+o2sp+XtYNxSxsLTRSM3COAKNOZQcqabJ+Mek06wxFuETQwcYcC4d+
B5Flo0g17BD6zScBKf9spbNzUuA+wKgUb1Oeu+HVSS0QANL6UkSvJ7abPQIDAQAB
o4ICSjCCAkYwHQYDVR0OBBYEFKv9Pcu5M0N+R6H54Iv4Ymn3wmcAMB8GA1UdIwQY
MBaAFJ+F0Udg+YZiuYmJPYoeXgXNOhPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjRYUlIyRDVobUs1aVlrOWloNWVCYzA2RS1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQt
ZjA5M2UxN2IyN2VmLzEvcV8wOXk3a3pRMzVIb2ZuZ2lfaGlhZmZDWndBLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Zi8xODEzYmEtNTA2ZS00NDRlLTljYTQtZjA5M2UxN2IyN2Vm
LzEvbjRYUlIyRDVobUs1aVlrOWloNWVCYzA2RS1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMGAGCCsGAQUFBwEHAQH/BFEwTzAkBAIAATAeAwQAT4mkAwQA
T4m0AwQEXbrgAwQEX47AAwQCuSD4MCcEAgACMCEwDwMFBioAvcADBgUqAL3AwDAO
AwUBKgC9wgMFAyoAvcAwDQYJKoZIhvcNAQELBQADggEBADV3vveCnPrpQZyBRG26
5AYLr95pJbU/Hdhkf4RdrDs+5qTMgKp4HhiwvHEzmXJ1ztMvsaQpJQ7wOmsDw6aC
L6MOiemuIf+nMcMuT7I3yp5WOEwm984BMtfMmTjAcjgdGhg05vTUBGfp/D4m4BAU
7Sxvf6UEnRNOueXxi0U0sUuTvPzwSaR5M/MAaiWn41PszlSG2lkNYIj3JRbI6wb3
Tx2ztKtdKhBkT6KP+vA4COoIoQI487pmT9VBzFrM+Nf3oUQai84PmadZzDb14xju
wvA/R16P5YnwWGfh/fiZlt2guCzt7Enr9cdxTpDUxsuVkWHL6qdocHahVACUt3d6
THw=
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:33:15 2026 by rpki-client