Route Origin Authorization
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/qmzO7mlQad_7dlbrAr1Mw_1dWQ4.roa
File: qmzO7mlQad_7dlbrAr1Mw_1dWQ4.roa (raw, json)
Hash identifier: aOy0qMqofYClfKxTTVggVX6wSS7nXBYoHRRV19W75MY=
Subject key identifier: AA:6C:CE:EE:69:50:69:DF:FB:76:56:EB:02:BD:4C:C3:FD:5D:59:0E
Certificate issuer: /CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Certificate serial: 019F6EED10A6FEFC3A54382D238B43E4D3DD
Authority key identifier: F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/qmzO7mlQad_7dlbrAr1Mw_1dWQ4.roa
Signing time: Fri 17 Jul 2026 07:14:17 +0000
ROA not before: Fri 17 Jul 2026 07:14:17 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 203771
IP address blocks: 213.128.69.0/24 maxlen: 24
213.128.78.0/24 maxlen: 24
213.128.80.0/24 maxlen: 24
213.128.81.0/24 maxlen: 24
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 24 Jul 2026 22:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:6e:ed:10:a6:fe:fc:3a:54:38:2d:23:8b:43:e4:d3:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f571bbf1d3d3c0efe36de110392be0c7ac447a84
Validity
Not Before: Jul 17 07:14:17 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=aa6cceee695069dffb7656eb02bd4cc3fd5d590e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:48:0d:3b:73:51:04:23:08:88:a5:df:f6:32:
9f:22:93:61:49:24:f7:1c:aa:1f:13:14:40:3a:04:
e0:95:e6:34:2d:a8:1c:0d:e5:c0:a6:30:44:b7:8d:
57:1a:de:79:5a:e9:e2:ef:cb:28:ae:aa:09:82:f8:
df:ae:ad:1a:7f:2b:66:e6:b3:2b:a0:da:75:13:fd:
32:f5:ae:1b:70:19:bc:3a:88:3e:59:df:75:1b:78:
90:f8:73:64:ed:94:d4:a7:33:d1:7a:a3:71:a3:8c:
ed:4f:df:bd:67:03:93:d0:00:bb:e7:93:6a:99:03:
f8:1d:83:69:5b:c5:bd:a3:d6:af:95:af:99:71:55:
01:4e:da:f4:6f:0b:77:30:31:7b:c3:ee:ed:dc:a5:
1d:20:5b:b8:5b:48:51:c6:a1:6f:d7:93:80:2b:c1:
d9:a3:33:f8:d4:bc:9d:86:f2:35:85:59:c9:cf:9f:
e5:45:0d:f0:21:ee:4c:2f:1c:72:31:d6:6e:a5:00:
fc:3d:90:46:2e:9e:4c:7a:b2:01:ba:0f:ee:ce:a9:
ee:ee:99:49:64:31:0e:4e:59:d0:a7:03:0f:0b:36:
a8:47:08:5e:ec:fb:72:0d:2a:d5:c0:52:9c:02:72:
a2:23:c1:a8:70:3f:dd:8d:1f:d5:3d:7d:f1:02:5c:
96:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:6C:CE:EE:69:50:69:DF:FB:76:56:EB:02:BD:4C:C3:FD:5D:59:0E
X509v3 Authority Key Identifier:
keyid:F5:71:BB:F1:D3:D3:C0:EF:E3:6D:E1:10:39:2B:E0:C7:AC:44:7A:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9XG78dPTwO_jbeEQOSvgx6xEeoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/qmzO7mlQad_7dlbrAr1Mw_1dWQ4.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/68303f-e8b0-4fe0-96b6-a9657eb1f8d7/1/9XG78dPTwO_jbeEQOSvgx6xEeoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
213.128.69.0/24
213.128.78.0/24
213.128.80.0/23
Signature Algorithm: sha256WithRSAEncryption
84:a7:cc:1b:8e:44:35:03:79:25:49:5c:ef:ee:b3:2e:96:06:
6a:ee:5d:7f:39:19:29:8b:db:af:c8:81:0f:65:9c:ad:f2:61:
25:aa:17:c6:1f:5c:bb:3e:7b:a4:5c:38:97:fd:38:b0:97:fd:
50:eb:63:2a:80:65:0d:2d:ee:5f:84:35:ea:ef:91:a8:5d:eb:
04:de:7f:fe:64:fe:22:5c:e9:f6:7e:d1:09:6d:3a:7d:a2:4f:
e1:a9:32:39:23:da:60:7a:d8:16:b3:25:7f:1f:b7:4c:64:03:
5d:4a:cd:19:5a:d7:ed:bb:33:79:a7:a1:d0:f4:a6:ca:5b:78:
a0:3c:92:ea:ec:31:13:7f:b1:ac:a3:cd:9f:f9:37:95:d6:5a:
55:48:21:16:86:68:e7:de:ed:03:b1:43:de:ad:70:cb:11:35:
19:79:dc:a1:10:3a:2e:63:17:5d:a7:3d:b3:e2:ec:12:18:8e:
a7:f4:eb:55:cf:5b:d8:7c:6c:e7:04:84:6a:7a:ed:ec:54:22:
75:eb:bb:26:84:30:a0:7f:5c:0e:6f:e8:a7:fb:be:7e:1f:bd:
e9:d3:45:82:11:6c:0e:14:8b:04:06:7e:05:0c:e4:8d:d8:d2:
e8:c1:5c:0d:06:a9:24:75:84:9a:2a:08:8d:0e:ed:1d:3d:08:
4a:a7:99:14
-----BEGIN CERTIFICATE-----
MIIFCTCCA/GgAwIBAgISAZ9u7RCm/vw6VDgtI4tD5NPdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NzFiYmYxZDNkM2MwZWZlMzZkZTExMDM5MmJlMGM3YWM0
NDdhODQwHhcNMjYwNzE3MDcxNDE3WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhYTZjY2VlZTY5NTA2OWRmZmI3NjU2ZWIwMmJkNGNjM2ZkNWQ1OTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlkgNO3NRBCMIiKXf9jKfIpNhSST3
HKofExRAOgTgleY0LagcDeXApjBEt41XGt55Wuni78sorqoJgvjfrq0afytm5rMr
oNp1E/0y9a4bcBm8Oog+Wd91G3iQ+HNk7ZTUpzPReqNxo4ztT9+9ZwOT0AC755Nq
mQP4HYNpW8W9o9avla+ZcVUBTtr0bwt3MDF7w+7t3KUdIFu4W0hRxqFv15OAK8HZ
ozP41LydhvI1hVnJz5/lRQ3wIe5MLxxyMdZupQD8PZBGLp5MerIBug/uzqnu7plJ
ZDEOTlnQpwMPCzaoRwhe7PtyDSrVwFKcAnKiI8GocD/djR/VPX3xAlyWWQIDAQAB
o4ICFTCCAhEwHQYDVR0OBBYEFKpszu5pUGnf+3ZW6wK9TMP9XVkOMB8GA1UdIwQY
MBaAFPVxu/HT08Dv423hEDkr4MesRHqEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVhHNzhkUFR3T19qYmVFUU9Tdmd4NnhFZW9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82ODMwM2YtZThiMC00ZmUwLTk2YjYt
YTk2NTdlYjFmOGQ3LzEvcW16TzdtbFFhZF83ZGxickFyMU13XzFkV1E0LnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82ODMwM2YtZThiMC00ZmUwLTk2YjYtYTk2NTdlYjFmOGQ3
LzEvOVhHNzhkUFR3T19qYmVFUU9Tdmd4NnhFZW9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCsGCCsGAQUFBwEHAQH/BBwwGjAYBAIAATASAwQA1YBFAwQA
1YBOAwQB1YBQMA0GCSqGSIb3DQEBCwUAA4IBAQCEp8wbjkQ1A3klSVzv7rMulgZq
7l1/ORkpi9uvyIEPZZyt8mElqhfGH1y7PnukXDiX/Tiwl/1Q62MqgGUNLe5fhDXq
75GoXesE3n/+ZP4iXOn2ftEJbTp9ok/hqTI5I9pgetgWsyV/H7dMZANdSs0ZWtft
uzN5p6HQ9KbKW3igPJLq7DETf7Gso82f+TeV1lpVSCEWhmjn3u0DsUPerXDLETUZ
edyhEDouYxddpz2z4uwSGI6n9OtVz1vYfGznBIRqeu3sVCJ167smhDCgf1wOb+in
+75+H73p00WCEWwOFIsEBn4FDOSN2NLowVwNBqkkdYSaKgiNDu0dPQhKp5kU
-----END CERTIFICATE-----
Generated at Fri Jul 24 07:30:57 2026 by rpki-client