Route Origin Authorization
$ rpki-client -vvvf rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/qWvFNqskXHsPxENe_ElNOi_ZdwU.roa
File: qWvFNqskXHsPxENe_ElNOi_ZdwU.roa (raw, json)
Hash identifier: Lox9iJeR/nzrJwtR4kRDqG6cZUpQudB7+6Z9SNhuzk0=
Subject key identifier: A9:6B:C5:36:AB:24:5C:7B:0F:C4:43:5E:FC:49:4D:3A:2F:D9:77:05
Certificate issuer: /CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Certificate serial: 01A110469F74CF3F1F75073F98AE157F6184
Authority key identifier: 3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/qWvFNqskXHsPxENe_ElNOi_ZdwU.roa
Signing time: Tue 06 Oct 2026 08:13:46 +0000
ROA not before: Tue 06 Oct 2026 08:13:46 +0000
ROA not after: Thu 01 Jul 2027 00:00:00 +0000
asID: 12665
IP address blocks: 195.238.128.0/19 maxlen: 20
195.238.144.0/20 maxlen: 20
212.4.224.0/19 maxlen: 19
2a01:408::/32 maxlen: 32
2a03:1a40::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.mft
rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 07 Oct 2026 22:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:a1:10:46:9f:74:cf:3f:1f:75:07:3f:98:ae:15:7f:61:84
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3df8a40c6a2c6993c9fbe81df3ea7dd372f96dec
Validity
Not Before: Oct 6 08:13:46 2026 GMT
Not After : Jul 1 00:00:00 2027 GMT
Subject: CN=a96bc536ab245c7b0fc4435efc494d3a2fd97705
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:20:db:7d:f1:97:3a:44:30:3d:d5:77:63:ed:
f0:be:18:53:4f:51:ab:9e:05:34:2d:93:af:5a:f9:
ac:ef:cd:8c:cb:82:3e:26:b9:a4:1f:fb:76:04:35:
cd:ff:af:80:0e:30:bd:26:6f:15:8e:58:a7:6a:7b:
59:c7:da:fb:9b:a8:13:b0:f7:7a:d8:1f:a0:db:fc:
17:b0:97:2d:15:08:b3:59:c6:84:7d:f1:85:53:f4:
c9:d5:1a:02:39:34:94:fd:ef:37:88:1e:92:40:a6:
b3:fe:4f:06:0f:99:68:7a:5e:3a:8e:f0:28:1d:ca:
b5:6e:2f:64:4f:5a:37:13:13:32:d0:d3:d6:eb:09:
03:3c:ba:a4:0f:d5:fa:59:c3:bd:23:a2:b1:b5:93:
d6:8c:45:f4:b0:3c:72:0d:e1:28:66:92:8d:a4:6f:
6c:65:da:85:07:b5:fb:18:81:82:27:ef:e2:d9:60:
bc:4a:76:bb:e4:8c:b0:87:28:7c:35:a6:a5:6c:42:
c3:c4:d4:e5:66:a9:91:40:e7:88:37:9d:1a:f5:b1:
42:f6:05:77:97:2b:a2:d5:af:08:d8:00:1d:af:84:
44:9b:73:7e:bd:7d:33:1e:12:5d:93:ba:e4:4d:dd:
27:68:e4:7d:55:cd:c6:27:d4:5a:8a:a4:76:10:24:
35:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:6B:C5:36:AB:24:5C:7B:0F:C4:43:5E:FC:49:4D:3A:2F:D9:77:05
X509v3 Authority Key Identifier:
keyid:3D:F8:A4:0C:6A:2C:69:93:C9:FB:E8:1D:F3:EA:7D:D3:72:F9:6D:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/PfikDGosaZPJ--gd8-p903L5bew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/qWvFNqskXHsPxENe_ElNOi_ZdwU.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/3e6687-7a44-40d8-993f-895a5a392438/1/PfikDGosaZPJ--gd8-p903L5bew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
195.238.128.0/19
212.4.224.0/19
IPv6:
2a01:408::/32
2a03:1a40::/32
Signature Algorithm: sha256WithRSAEncryption
69:16:bb:29:c7:a8:b3:63:8e:fd:8b:83:a1:d2:c3:9d:1a:a2:
83:19:cb:4f:a4:75:77:32:00:98:5f:02:c2:0c:fc:f3:e4:2f:
ce:26:c0:bd:a8:09:b9:f5:04:2f:ab:52:73:29:18:8f:f8:1c:
6f:23:64:42:c9:df:ab:23:81:ce:bf:f0:49:a4:fe:3b:64:32:
22:2a:1f:1d:f9:0d:f4:44:3e:2b:14:21:9f:dd:cd:04:f1:e9:
05:0c:ee:1a:9f:42:8a:46:d0:ea:dd:aa:5a:e7:9f:bd:2c:16:
9a:f4:00:bc:f0:2c:b7:af:a8:42:fc:c0:7d:0e:e4:6a:14:cc:
39:9d:40:3e:9e:cc:0e:97:a6:70:9e:56:89:7a:53:bb:85:96:
69:ea:17:5c:98:3f:d8:f7:a5:38:94:c0:2f:82:f5:c3:d5:62:
fe:25:33:5b:2a:3c:a9:85:44:86:b9:37:9d:bb:95:31:d0:8a:
d2:b7:16:c7:07:88:c4:20:6c:78:f3:f9:8c:9b:11:80:26:95:
29:3e:08:e2:81:e8:af:90:4f:09:66:ef:3a:aa:f5:e0:79:ab:
4a:17:e9:d2:1b:ba:68:6a:96:ae:4a:d8:ac:cc:58:e1:76:14:
be:70:8b:e6:5a:a8:53:df:03:ec:1b:2b:92:22:e4:ea:98:36:
08:b4:1b:0b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAaEQRp90zz8fdQc/mK4Vf2GEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNkZjhhNDBjNmEyYzY5OTNjOWZiZTgxZGYzZWE3ZGQzNzJm
OTZkZWMwHhcNMjYxMDA2MDgxMzQ2WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD
EyhhOTZiYzUzNmFiMjQ1YzdiMGZjNDQzNWVmYzQ5NGQzYTJmZDk3NzA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1SDbffGXOkQwPdV3Y+3wvhhTT1Gr
ngU0LZOvWvms782My4I+JrmkH/t2BDXN/6+ADjC9Jm8VjlinantZx9r7m6gTsPd6
2B+g2/wXsJctFQizWcaEffGFU/TJ1RoCOTSU/e83iB6SQKaz/k8GD5loel46jvAo
Hcq1bi9kT1o3ExMy0NPW6wkDPLqkD9X6WcO9I6KxtZPWjEX0sDxyDeEoZpKNpG9s
ZdqFB7X7GIGCJ+/i2WC8Sna75Iywhyh8NaalbELDxNTlZqmRQOeIN50a9bFC9gV3
lyui1a8I2AAdr4REm3N+vX0zHhJdk7rkTd0naOR9Vc3GJ9RaiqR2ECQ1twIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFKlrxTarJFx7D8RDXvxJTTov2XcFMB8GA1UdIwQY
MBaAFD34pAxqLGmTyfvoHfPqfdNy+W3sMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUGZpa0RHb3NhWlBKLS1nZDgtcDkwM0w1YmV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8zZTY2ODctN2E0NC00MGQ4LTk5M2Yt
ODk1YTVhMzkyNDM4LzEvcVd2Rk5xc2tYSHNQeEVOZV9FbE5PaV9aZHdVLnJvYTCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8zZTY2ODctN2E0NC00MGQ4LTk5M2YtODk1YTVhMzkyNDM4
LzEvUGZpa0RHb3NhWlBKLS1nZDgtcDkwM0w1YmV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMDsGCCsGAQUFBwEHAQH/BCwwKjASBAIAATAMAwQFw+6AAwQF
1ATgMBQEAgACMA4DBQAqAQQIAwUAKgMaQDANBgkqhkiG9w0BAQsFAAOCAQEAaRa7
Kceos2OO/YuDodLDnRqigxnLT6R1dzIAmF8Cwgz88+QvzibAvagJufUEL6tScykY
j/gcbyNkQsnfqyOBzr/wSaT+O2QyIiofHfkN9EQ+KxQhn93NBPHpBQzuGp9CikbQ
6t2qWuefvSwWmvQAvPAst6+oQvzAfQ7kahTMOZ1APp7MDpemcJ5WiXpTu4WWaeoX
XJg/2PelOJTAL4L1w9Vi/iUzWyo8qYVEhrk3nbuVMdCK0rcWxweIxCBsePP5jJsR
gCaVKT4I4oHor5BPCWbvOqr14HmrShfp0hu6aGqWrkrYrMxY4XYUvnCL5lqoU98D
7BsrkiLk6pg2CLQbCw==
-----END CERTIFICATE-----
Generated at Wed Oct 7 06:09:40 2026 by rpki-client