Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/BiqZCcX1jW4zRSaBE7UcdWP-dR0.roa
File: BiqZCcX1jW4zRSaBE7UcdWP-dR0.roa (raw, json)
Hash identifier: /nPULKBfynh2uwjKBnkc6UCZT7e3n0diWOEtni/iwP0=
Subject key identifier: 06:2A:99:09:C5:F5:8D:6E:33:45:26:81:13:B5:1C:75:63:FE:75:1D
Certificate issuer: /CN=b30fd255c96b42e72b5688c670f6e26119ad3935
Certificate serial: 019F1462F150C8E0DD6C474A8E9C02FE45DC
Authority key identifier: B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/BiqZCcX1jW4zRSaBE7UcdWP-dR0.roa
Signing time: Mon 29 Jun 2026 17:17:36 +0000
ROA not before: Mon 29 Jun 2026 17:17:36 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 208821
IP address blocks: 185.99.22.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.mft
rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 25 Jul 2026 08:00:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:14:62:f1:50:c8:e0:dd:6c:47:4a:8e:9c:02:fe:45:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b30fd255c96b42e72b5688c670f6e26119ad3935
Validity
Not Before: Jun 29 17:17:36 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=062a9909c5f58d6e3345268113b51c7563fe751d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:04:ef:a5:54:81:16:61:11:9b:fd:31:c4:08:
cc:2e:79:57:95:d0:02:da:00:cd:fd:41:5b:24:e6:
af:90:ca:24:28:35:d1:13:5a:b9:9c:4a:3c:8f:32:
96:5e:ab:6b:3f:64:6f:01:4e:00:5f:74:c0:fe:73:
57:40:dc:7b:97:74:85:92:64:9a:ca:5c:74:78:4e:
62:1e:1b:5c:4b:fc:19:4b:f4:10:a0:e6:bb:ca:a7:
92:15:e9:04:e0:ba:6c:4c:e8:f2:e7:90:8a:91:64:
c6:fe:ba:ef:c4:84:af:d1:24:ac:0e:72:f0:d0:03:
12:b5:e5:1c:25:7b:da:90:d8:1a:cf:e5:a6:79:e1:
13:07:4a:57:20:08:d8:e4:99:0b:c2:87:c7:62:91:
39:f4:1c:b3:b0:35:ff:b0:eb:da:c9:02:3b:f8:bf:
1a:a6:f8:a7:fc:ff:c7:6f:02:d4:85:42:7d:55:7b:
16:e4:72:0e:72:3a:98:40:ac:ce:04:b4:9b:13:b6:
71:51:5c:e3:38:fa:fb:20:38:2d:ec:06:b9:a6:44:
23:7b:fa:36:f9:3f:52:42:cb:12:dd:f9:d3:b9:99:
3b:68:96:01:4a:45:26:e2:d0:bf:13:d6:7c:b7:a1:
70:b2:cd:9c:ad:11:35:a4:8a:96:68:3f:b2:8e:82:
11:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
06:2A:99:09:C5:F5:8D:6E:33:45:26:81:13:B5:1C:75:63:FE:75:1D
X509v3 Authority Key Identifier:
keyid:B3:0F:D2:55:C9:6B:42:E7:2B:56:88:C6:70:F6:E2:61:19:AD:39:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sw_SVclrQucrVojGcPbiYRmtOTU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/BiqZCcX1jW4zRSaBE7UcdWP-dR0.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/99b6b6-c2a6-4a7b-8045-9229cf492fb4/1/sw_SVclrQucrVojGcPbiYRmtOTU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
185.99.22.0/24
Signature Algorithm: sha256WithRSAEncryption
84:1a:39:1d:9a:74:cd:9e:67:e3:0b:22:75:50:04:d7:1e:ac:
6b:14:50:40:e5:76:32:05:2a:b4:92:34:7d:2c:65:0a:df:54:
96:8b:1d:6e:8e:86:87:0d:af:fc:05:60:14:8a:b7:4f:51:f9:
8f:69:30:5f:2d:41:ce:c8:d4:6c:5f:79:8b:d7:c3:00:11:a8:
8f:9e:ae:5b:62:3a:d4:d0:f9:61:55:57:a4:2f:3e:a3:fd:14:
93:50:23:cd:40:cf:22:02:ec:9f:a8:6f:2c:9d:05:d8:e6:24:
fb:13:57:66:f6:98:04:01:0c:46:e9:a7:c4:56:90:72:3b:53:
1a:00:ba:5d:36:e6:94:78:04:57:0b:2b:9d:eb:ee:d6:a9:9f:
be:26:45:0c:b6:95:de:5c:4c:a1:25:e4:09:44:38:bd:ba:d1:
ac:62:9f:b4:57:ba:f0:fa:72:d0:6d:6d:14:3a:37:50:74:41:
95:13:88:2f:fe:5b:74:49:03:5a:20:b0:4b:ce:be:34:0d:01:
91:c3:61:3e:5e:7a:10:c6:4e:d1:a5:85:a4:30:70:ab:d1:a9:
6d:d7:2d:bf:79:54:bf:24:7c:b3:43:a0:fb:79:f2:52:8f:3b:
c6:64:5b:01:7b:2a:0b:e3:61:5c:27:66:0c:77:09:6f:bb:76:
ae:9c:50:89
-----BEGIN CERTIFICATE-----
MIIE/TCCA+WgAwIBAgISAZ8UYvFQyODdbEdKjpwC/kXcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMGZkMjU1Yzk2YjQyZTcyYjU2ODhjNjcwZjZlMjYxMTlh
ZDM5MzUwHhcNMjYwNjI5MTcxNzM2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EygwNjJhOTkwOWM1ZjU4ZDZlMzM0NTI2ODExM2I1MWM3NTYzZmU3NTFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7wTvpVSBFmERm/0xxAjMLnlXldAC
2gDN/UFbJOavkMokKDXRE1q5nEo8jzKWXqtrP2RvAU4AX3TA/nNXQNx7l3SFkmSa
ylx0eE5iHhtcS/wZS/QQoOa7yqeSFekE4LpsTOjy55CKkWTG/rrvxISv0SSsDnLw
0AMSteUcJXvakNgaz+WmeeETB0pXIAjY5JkLwofHYpE59ByzsDX/sOvayQI7+L8a
pvin/P/HbwLUhUJ9VXsW5HIOcjqYQKzOBLSbE7ZxUVzjOPr7IDgt7Aa5pkQje/o2
+T9SQssS3fnTuZk7aJYBSkUm4tC/E9Z8t6Fwss2crRE1pIqWaD+yjoIR6QIDAQAB
o4ICCTCCAgUwHQYDVR0OBBYEFAYqmQnF9Y1uM0UmgRO1HHVj/nUdMB8GA1UdIwQY
MBaAFLMP0lXJa0LnK1aIxnD24mEZrTk1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3dfU1ZjbHJRdWNyVm9qR2NQYmlZUm10T1RVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC85OWI2YjYtYzJhNi00YTdiLTgwNDUt
OTIyOWNmNDkyZmI0LzEvQmlxWkNjWDFqVzR6UlNhQkU3VWNkV1AtZFIwLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC85OWI2YjYtYzJhNi00YTdiLTgwNDUtOTIyOWNmNDkyZmI0
LzEvc3dfU1ZjbHJRdWNyVm9qR2NQYmlZUm10T1RVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAuWMWMA0G
CSqGSIb3DQEBCwUAA4IBAQCEGjkdmnTNnmfjCyJ1UATXHqxrFFBA5XYyBSq0kjR9
LGUK31SWix1ujoaHDa/8BWAUirdPUfmPaTBfLUHOyNRsX3mL18MAEaiPnq5bYjrU
0PlhVVekLz6j/RSTUCPNQM8iAuyfqG8snQXY5iT7E1dm9pgEAQxG6afEVpByO1Ma
ALpdNuaUeARXCyud6+7WqZ++JkUMtpXeXEyhJeQJRDi9utGsYp+0V7rw+nLQbW0U
OjdQdEGVE4gv/lt0SQNaILBLzr40DQGRw2E+XnoQxk7RpYWkMHCr0alt1y2/eVS/
JHyzQ6D7efJSjzvGZFsBeyoL42FcJ2YMdwlvu3aunFCJ
-----END CERTIFICATE-----
Generated at Fri Jul 24 19:20:23 2026 by rpki-client